last executing test programs: 1m26.242669199s ago: executing program 3 (id=428): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0x200cc75, 0x800, 0x200003, 0x26e}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5f03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m24.962566285s ago: executing program 3 (id=440): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1m23.727655176s ago: executing program 3 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x20040054) 1m23.233217043s ago: executing program 3 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m22.995098958s ago: executing program 3 (id=454): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 1m22.384240986s ago: executing program 3 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m22.043050409s ago: executing program 32 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.498561992s ago: executing program 0 (id=1144): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="7c8ee910666bc4f493cb597e97d4de889cd9b5e04199b9c32ed077a2f8aed1b3e4bb2aa0295386c99014e945b896a466cd91bd6e695c921fc445e4243f8333a0d1cc567bdef9cf5866653fd4c69267d0"}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) 4.234325891s ago: executing program 0 (id=1148): r0 = syz_io_uring_setup(0x1244, &(0x7f00000004c0)={0x0, 0xd5a5, 0x1, 0x1, 0x147}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.396980575s ago: executing program 0 (id=1156): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.257153538s ago: executing program 1 (id=1158): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 3.144205406s ago: executing program 0 (id=1159): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r1 = syz_io_uring_setup(0x4cf7, &(0x7f0000000580)={0x0, 0x8917, 0x2, 0x3, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 2.876518322s ago: executing program 1 (id=1160): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c800, &(0x7f00000000c0)={0xa, 0x4e24, 0xf6e9, @local, 0x5}, 0x1c) 1.844410354s ago: executing program 2 (id=1170): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0x400, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0x1}, {0x1c, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 1.843895319s ago: executing program 1 (id=1171): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b00010067726574617000001400028006000e0002000000080007006401010108000a00", @ANYRES32=r3], 0x4c}}, 0x0) 1.795925408s ago: executing program 5 (id=1173): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000f80)={0x0, 0x4, 0x4, 0x0, 0xfffffffc}, &(0x7f0000000fc0)=0x14) 1.591952272s ago: executing program 5 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.559718938s ago: executing program 4 (id=1175): sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.548598785s ago: executing program 2 (id=1176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x0, @loopback, 0x401}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) shutdown(r0, 0x1) 1.446793394s ago: executing program 1 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000d, 0x12, r2, 0x1000) 1.340581446s ago: executing program 2 (id=1178): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 1.330087105s ago: executing program 5 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000100039042bbd5a002500000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002c00128008000100677265002000028008001400020000000800040004000000060010004e2200000400120008000400"], 0x54}}, 0x0) 1.32449757s ago: executing program 1 (id=1180): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x301, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.188405937s ago: executing program 4 (id=1181): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.187992532s ago: executing program 0 (id=1182): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) creat(&(0x7f0000000180)='./file1\x00', 0x0) 1.171105784s ago: executing program 2 (id=1183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r0, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 1.043372474s ago: executing program 4 (id=1184): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) 996.399617ms ago: executing program 1 (id=1185): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x4, 0x0, 0x70, 0x4}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000001a}) 891.146048ms ago: executing program 2 (id=1186): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x1, 0x4000102b, r2, 0x0) vmsplice(r0, &(0x7f0000001700)=[{&(0x7f0000000a40)="8b", 0x1}], 0x1, 0x0) 855.116742ms ago: executing program 4 (id=1187): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) 680.367383ms ago: executing program 2 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x16d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 679.896188ms ago: executing program 5 (id=1189): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00'}) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 443.354943ms ago: executing program 4 (id=1190): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r3, 0xb}) close_range(r0, 0xffffffffffffffff, 0x0) 409.179068ms ago: executing program 5 (id=1191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050) 209.016168ms ago: executing program 5 (id=1192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 120.505544ms ago: executing program 0 (id=1193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) ioctl$KVM_CHECK_EXTENSION(r0, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x10000, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x3000, 0x308000, 0x8}) 0s ago: executing program 4 (id=1194): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) sendmsg$IPSET_CMD_TYPE(r1, 0x0, 0x200000b0) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. [ 84.365024][ T5807] cgroup: Unknown subsys name 'net' [ 84.505821][ T5807] cgroup: Unknown subsys name 'cpuset' [ 84.515244][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.167205][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.711024][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.717359][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.727016][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.737598][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.738267][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.745668][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.753782][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.766196][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.766927][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.773790][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.783867][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.789067][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.798168][ T5139] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.802155][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.810119][ T5139] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.825388][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.830382][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.833569][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.840237][ T5139] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.847524][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.855468][ T5139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.861924][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.869894][ T5139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.882844][ T5139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.890333][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.619613][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.731178][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 91.796258][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 91.884385][ T9] cfg80211: failed to load regulatory.db [ 91.895085][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 91.912053][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 91.995002][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.004893][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.012469][ T5829] bridge_slave_0: entered allmulticast mode [ 92.020249][ T5829] bridge_slave_0: entered promiscuous mode [ 92.028624][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.036308][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.043776][ T5829] bridge_slave_1: entered allmulticast mode [ 92.051283][ T5829] bridge_slave_1: entered promiscuous mode [ 92.172120][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.179559][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.186703][ T5825] bridge_slave_0: entered allmulticast mode [ 92.194575][ T5825] bridge_slave_0: entered promiscuous mode [ 92.220978][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.233944][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.264200][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.271576][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.279003][ T5825] bridge_slave_1: entered allmulticast mode [ 92.288372][ T5825] bridge_slave_1: entered promiscuous mode [ 92.314240][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.321704][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.328859][ T5833] bridge_slave_0: entered allmulticast mode [ 92.336238][ T5833] bridge_slave_0: entered promiscuous mode [ 92.400796][ T5829] team0: Port device team_slave_0 added [ 92.406991][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.416402][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.424238][ T5833] bridge_slave_1: entered allmulticast mode [ 92.433188][ T5833] bridge_slave_1: entered promiscuous mode [ 92.495577][ T5829] team0: Port device team_slave_1 added [ 92.518421][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.526015][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.535659][ T5836] bridge_slave_0: entered allmulticast mode [ 92.542942][ T5836] bridge_slave_0: entered promiscuous mode [ 92.552994][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.591839][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.601370][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.608550][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.615877][ T5836] bridge_slave_1: entered allmulticast mode [ 92.623449][ T5836] bridge_slave_1: entered promiscuous mode [ 92.633365][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.658739][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.665957][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.673292][ T5823] bridge_slave_0: entered allmulticast mode [ 92.681452][ T5823] bridge_slave_0: entered promiscuous mode [ 92.707178][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.767900][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.775182][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.783107][ T5823] bridge_slave_1: entered allmulticast mode [ 92.791093][ T5823] bridge_slave_1: entered promiscuous mode [ 92.798519][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.805614][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.832523][ T5830] Bluetooth: hci0: command tx timeout [ 92.838498][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.852668][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.859898][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.886105][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.909371][ T5837] Bluetooth: hci1: command tx timeout [ 92.910216][ T5830] Bluetooth: hci3: command tx timeout [ 92.922357][ T5833] team0: Port device team_slave_0 added [ 92.931175][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.944807][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.956831][ T5825] team0: Port device team_slave_0 added [ 92.986597][ T5833] team0: Port device team_slave_1 added [ 92.992478][ T5830] Bluetooth: hci4: command tx timeout [ 92.992487][ T5837] Bluetooth: hci2: command tx timeout [ 93.023963][ T5825] team0: Port device team_slave_1 added [ 93.074378][ T5836] team0: Port device team_slave_0 added [ 93.114308][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.125293][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.132773][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.158736][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.172288][ T5836] team0: Port device team_slave_1 added [ 93.178954][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.186337][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.212464][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.237279][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.244501][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.271216][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.284106][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.291144][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.317336][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.330644][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.412176][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.419147][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.446081][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.464663][ T5829] hsr_slave_0: entered promiscuous mode [ 93.471161][ T5829] hsr_slave_1: entered promiscuous mode [ 93.512574][ T5823] team0: Port device team_slave_0 added [ 93.532984][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.540657][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.567011][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.597183][ T5823] team0: Port device team_slave_1 added [ 93.700490][ T5833] hsr_slave_0: entered promiscuous mode [ 93.706894][ T5833] hsr_slave_1: entered promiscuous mode [ 93.714157][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.722143][ T5833] Cannot create hsr debugfs directory [ 93.734080][ T5825] hsr_slave_0: entered promiscuous mode [ 93.741135][ T5825] hsr_slave_1: entered promiscuous mode [ 93.747638][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.755968][ T5825] Cannot create hsr debugfs directory [ 93.786496][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.793951][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.820017][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.833007][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.840101][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.866162][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.945869][ T5836] hsr_slave_0: entered promiscuous mode [ 93.952906][ T5836] hsr_slave_1: entered promiscuous mode [ 93.958994][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.966943][ T5836] Cannot create hsr debugfs directory [ 94.089862][ T5823] hsr_slave_0: entered promiscuous mode [ 94.096650][ T5823] hsr_slave_1: entered promiscuous mode [ 94.103434][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.111301][ T5823] Cannot create hsr debugfs directory [ 94.534724][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.575549][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.594484][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.622465][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.703082][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.721658][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.744179][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.778303][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.838907][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.851391][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.864279][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.889856][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.911594][ T5830] Bluetooth: hci0: command tx timeout [ 94.990774][ T5830] Bluetooth: hci3: command tx timeout [ 94.990845][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.996226][ T5830] Bluetooth: hci1: command tx timeout [ 95.012421][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.045599][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.056655][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.069336][ T5830] Bluetooth: hci4: command tx timeout [ 95.079961][ T5830] Bluetooth: hci2: command tx timeout [ 95.223535][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.238736][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.254413][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.268561][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.281995][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.294622][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.373627][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.387986][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.424605][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.464619][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.471979][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.484874][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.492092][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.503935][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.525434][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.532668][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.546683][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.553896][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.580812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.587920][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.636150][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.643364][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.690401][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.773511][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.818396][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.854688][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.861911][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.917918][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.925179][ T3522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.036800][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.123854][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.172890][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.226882][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.234108][ T4042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.296462][ T4042] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.304070][ T4042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.403554][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.607234][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.650757][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.922539][ T5833] veth0_vlan: entered promiscuous mode [ 96.958791][ T5833] veth1_vlan: entered promiscuous mode [ 96.978041][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.996344][ T5825] veth0_vlan: entered promiscuous mode [ 96.999258][ T5830] Bluetooth: hci0: command tx timeout [ 97.013192][ T5825] veth1_vlan: entered promiscuous mode [ 97.072672][ T5830] Bluetooth: hci1: command tx timeout [ 97.078161][ T5830] Bluetooth: hci3: command tx timeout [ 97.117208][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.148837][ T5825] veth0_macvtap: entered promiscuous mode [ 97.159899][ T5830] Bluetooth: hci2: command tx timeout [ 97.159941][ T5837] Bluetooth: hci4: command tx timeout [ 97.196083][ T5825] veth1_macvtap: entered promiscuous mode [ 97.235201][ T5833] veth0_macvtap: entered promiscuous mode [ 97.263485][ T5833] veth1_macvtap: entered promiscuous mode [ 97.277839][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.305982][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.331822][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.340793][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.350990][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.359831][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.375785][ T5823] veth0_vlan: entered promiscuous mode [ 97.411166][ T5836] veth0_vlan: entered promiscuous mode [ 97.426486][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.439094][ T5823] veth1_vlan: entered promiscuous mode [ 97.490076][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.510791][ T5836] veth1_vlan: entered promiscuous mode [ 97.526081][ T5823] veth0_macvtap: entered promiscuous mode [ 97.536589][ T5829] veth0_vlan: entered promiscuous mode [ 97.555423][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.567272][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.576625][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.585591][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.605688][ T5823] veth1_macvtap: entered promiscuous mode [ 97.634730][ T5829] veth1_vlan: entered promiscuous mode [ 97.712253][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.736941][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.747247][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.776844][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.808953][ T5836] veth0_macvtap: entered promiscuous mode [ 97.836503][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.846204][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.856468][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.865508][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.891183][ T5836] veth1_macvtap: entered promiscuous mode [ 97.907141][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.920879][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.928204][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.973732][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.992400][ T5829] veth0_macvtap: entered promiscuous mode [ 98.009144][ T4051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.020367][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.029112][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.034129][ T4051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.045046][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.045090][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.076268][ T5829] veth1_macvtap: entered promiscuous mode [ 98.101619][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.235068][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.238638][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.256176][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.337249][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.435522][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.453796][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.462740][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.471695][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.572079][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.605706][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.641672][ T5943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.695141][ T4042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.741209][ T4042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.773053][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.800533][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.917742][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.942411][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.070968][ T5837] Bluetooth: hci0: command tx timeout [ 99.130571][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.158208][ T5837] Bluetooth: hci3: command tx timeout [ 99.158291][ T5830] Bluetooth: hci1: command tx timeout [ 99.190442][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.229620][ T5830] Bluetooth: hci2: command tx timeout [ 99.229803][ T5837] Bluetooth: hci4: command tx timeout [ 99.301400][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.359842][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.564572][ T5953] process 'syz.2.3' launched '/dev/fd/3' with NULL argv: empty string added [ 99.779860][ T5924] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.952955][ T5956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.968447][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 99.986384][ T5924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.015167][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 100.032119][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.056604][ T5924] usb 2-1: config 0 descriptor?? [ 100.108682][ T5924] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 100.119350][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.159943][ T5956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.274993][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.289457][ T5901] usb 3-1: config 0 has no interface number 0 [ 100.311113][ T5901] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 100.324045][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.364665][ T5901] usb 3-1: Product: syz [ 100.366150][ T5956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.368911][ T5901] usb 3-1: Manufacturer: syz [ 100.414788][ T5901] usb 3-1: SerialNumber: syz [ 100.432673][ T5901] usb 3-1: config 0 descriptor?? [ 100.686922][ T5901] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 100.739669][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 100.776615][ T5901] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 100.802894][ T5901] usb 3-1: media controller created [ 101.006533][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.015651][ T5174] bcm5974 2-1:0.0: could not read from device [ 101.096583][ T5956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.096829][ T5924] bcm5974 2-1:0.0: could not read from device [ 101.136645][ T5174] bcm5974 2-1:0.0: could not read from device [ 101.172066][ T5924] input: failed to attach handler mousedev to device input5, error: -5 [ 101.195636][ T5174] bcm5974 2-1:0.0: could not read from device [ 101.212588][ T5924] usb 2-1: USB disconnect, device number 2 [ 101.227094][ T5174] bcm5974 2-1:0.0: could not read from device [ 101.526086][ T5956] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.571268][ T5956] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.624185][ T5956] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.685009][ T5956] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.977806][ T5901] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 102.176055][ T5901] usb 3-1: USB disconnect, device number 2 [ 102.799508][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.020401][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.188039][ T6001] netlink: 'syz.2.24': attribute type 13 has an invalid length. [ 103.237734][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 103.242009][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.262395][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.272925][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.294018][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.302280][ T5901] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.326080][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.341008][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.363728][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.378647][ T5901] usb 1-1: config 0 descriptor?? [ 103.424356][ T5875] usb 5-1: config 0 descriptor?? [ 103.456603][ T5875] hub 5-1:0.0: USB hub found [ 103.663231][ T5875] hub 5-1:0.0: 1 port detected [ 103.777961][ T6005] random: crng reseeded on system resumption [ 104.008270][ T5901] usb 1-1: language id specifier not provided by device, defaulting to English [ 104.309960][ T5901] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 104.318886][ T5901] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 104.333351][ T5875] hub 5-1:0.0: activate --> -90 [ 104.342482][ T5901] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 104.380733][ T5901] usb 1-1: USB disconnect, device number 2 [ 104.392954][ T6005] Restarting kernel threads ... [ 104.408550][ T6005] Done restarting kernel threads. [ 104.705869][ T6017] loop7: detected capacity change from 0 to 16384 [ 104.752062][ T5924] usb 5-1: USB disconnect, device number 2 [ 104.913931][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.090020][ T5926] usb 4-1: Using ep0 maxpacket: 32 [ 105.119120][ T5926] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.127596][ T5926] usb 4-1: config 0 has no interface number 0 [ 105.139325][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.141989][ T5926] usb 4-1: config 0 interface 184 has no altsetting 0 [ 105.176962][ T5926] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.191784][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.209674][ T5926] usb 4-1: Product: syz [ 105.213981][ T5926] usb 4-1: Manufacturer: syz [ 105.218607][ T5926] usb 4-1: SerialNumber: syz [ 105.254793][ T5926] usb 4-1: config 0 descriptor?? [ 105.285365][ T5926] smsc75xx v1.0.0 [ 105.329483][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 105.360508][ T5901] usb 2-1: config 0 has no interfaces? [ 105.419348][ T5901] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 105.445142][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.457229][ T5901] usb 2-1: Product: syz [ 105.469425][ T5901] usb 2-1: Manufacturer: syz [ 105.484490][ T5901] usb 2-1: SerialNumber: syz [ 105.511689][ T5901] usb 2-1: config 0 descriptor?? [ 105.961718][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.053229][ T1225] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.229567][ T1225] usb 5-1: Using ep0 maxpacket: 32 [ 106.245489][ T1225] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 106.268050][ T1225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.309295][ T1225] usb 5-1: config 0 descriptor?? [ 106.342607][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 106.365530][ T1225] gspca_main: sunplus-2.14.0 probing 041e:400b [ 106.494582][ T5901] usb 2-1: USB disconnect, device number 3 [ 106.573720][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 106.650446][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 106.695430][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 106.756787][ T5926] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.797340][ T5926] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 106.860929][ T5926] usb 4-1: USB disconnect, device number 2 [ 107.540859][ T1225] gspca_sunplus: reg_w_riv err -71 [ 107.546326][ T1225] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 107.575886][ T1225] usb 5-1: USB disconnect, device number 3 [ 107.605669][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.149329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.240983][ T6070] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O€!Ý [ 108.329451][ T1225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.505583][ T1225] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.561634][ T1225] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.599295][ T1225] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.629382][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.685433][ T6066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.721694][ T1225] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.213255][ T1225] usb 3-1: USB disconnect, device number 3 [ 109.477753][ T6099] netlink: 104 bytes leftover after parsing attributes in process `syz.0.60'. [ 110.108160][ T6115] tipc: Started in network mode [ 110.118672][ T6115] tipc: Node identity 4, cluster identity 4711 [ 110.133798][ T6115] tipc: Node number set to 4 [ 110.185337][ T6117] input: syz1 as /devices/virtual/input/input6 [ 111.087208][ T5909] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 111.143113][ T5909] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 111.355047][ T6146] fido_id[6146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.518862][ T6155] sctp: [Deprecated]: syz.4.83 (pid 6155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.518862][ T6155] Use struct sctp_sack_info instead [ 113.429304][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.624899][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 113.647642][ T5901] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.668896][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.680574][ T5901] usb 4-1: Product: syz [ 113.684794][ T5901] usb 4-1: Manufacturer: syz [ 113.709983][ T5901] usb 4-1: SerialNumber: syz [ 113.725549][ T5901] usb 4-1: config 0 descriptor?? [ 113.960767][ T5901] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.773730][ T5901] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 114.837204][ T5901] usb 4-1: USB disconnect, device number 3 [ 115.112936][ T1159] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.524243][ T6268] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.962889][ T6279] xt_hashlimit: size too large, truncated to 1048576 [ 116.246438][ T6285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.553496][ T6288] Zero length message leads to an empty skb [ 116.685291][ T6290] Bluetooth: MGMT ver 1.23 [ 116.698350][ T6290] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 117.153274][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 117.159342][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.439568][ T5924] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.632813][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 117.653247][ T5924] usb 2-1: config 0 has no interfaces? [ 117.668741][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 117.687812][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.706700][ T5924] usb 2-1: Product: syz [ 117.716229][ T5924] usb 2-1: Manufacturer: syz [ 117.726179][ T5924] usb 2-1: SerialNumber: syz [ 117.766140][ T5924] usb 2-1: config 0 descriptor?? [ 118.033761][ T6317] Invalid ELF header magic: != ELF [ 119.188897][ T6346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.266504][ T1225] usb 2-1: USB disconnect, device number 4 [ 120.611731][ T6370] netlink: 92 bytes leftover after parsing attributes in process `syz.0.171'. [ 121.309331][ T1225] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.361534][ T5937] kernel read not supported for file /vga_arbiter (pid: 5937 comm: kworker/0:7) [ 121.471215][ T1225] usb 4-1: Using ep0 maxpacket: 32 [ 121.479704][ T1225] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 121.509453][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.539387][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.558856][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 121.579771][ T6398] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.594868][ T1225] usb 4-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 121.619126][ T1225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.656365][ T1225] usb 4-1: config 0 descriptor?? [ 122.106622][ T1225] uclogic 0003:2179:0077.0003: interface is invalid, ignoring [ 122.340468][ T1225] usb 4-1: USB disconnect, device number 4 [ 122.765982][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 122.814502][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 122.877126][ T1225] IPVS: starting estimator thread 0... [ 122.969706][ T6427] IPVS: using max 24 ests per chain, 57600 per kthread [ 123.110790][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 123.122172][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 123.561354][ T6420] ceph: No mds server is up or the cluster is laggy [ 123.639807][ T5926] libceph: connect (1)[c::]:6789 error -101 [ 123.649548][ T5926] libceph: mon0 (1)[c::]:6789 connect error [ 123.947613][ T6448] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 124.169566][ T6448] bond1: entered promiscuous mode [ 124.194024][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.458364][ T6451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.490134][ T6451] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 124.531714][ T6451] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 124.570636][ T6451] bond1: (slave ip6gre1): making interface the new active one [ 124.598549][ T6451] ip6gre1: entered promiscuous mode [ 124.641087][ T6451] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 125.498559][ T6467] syz.0.205 uses obsolete (PF_INET,SOCK_PACKET) [ 125.620679][ T6471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.701492][ T6475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.919743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.972006][ T6484] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 126.065327][ T6483] Illegal XDP return value 4294967274 on prog (id 26) dev syz_tun, expect packet loss! [ 126.419600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.429657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 126.529616][ T6495] fuse: root generation should be zero [ 126.561909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 127.990194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.004223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 128.307025][ T5937] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.493517][ T5937] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 128.517282][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.535918][ T5937] usb 3-1: Product: syz [ 128.546011][ T5937] usb 3-1: Manufacturer: syz [ 128.556129][ T5937] usb 3-1: SerialNumber: syz [ 128.570919][ T5937] usb 3-1: config 0 descriptor?? [ 128.598411][ T5937] ch341 3-1:0.0: ch341-uart converter detected [ 129.720235][ T5937] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 129.965510][ T5937] usb 3-1: USB disconnect, device number 4 [ 130.021105][ T5937] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 130.038321][ T5937] ch341 3-1:0.0: device disconnected [ 131.513946][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.255'. [ 132.076077][ T6601] trusted_key: syz.3.260 sent an empty control message without MSG_MORE. [ 132.540269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.552983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.561708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 132.883909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.890572][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.703915][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 133.935837][ T5924] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.112896][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.138470][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.168917][ T5924] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.191178][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.231361][ T5924] usb 4-1: SerialNumber: syz [ 134.350304][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.494940][ T5924] usb 4-1: 0:2 : does not exist [ 134.563165][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.579226][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.619376][ T5924] usb 4-1: USB disconnect, device number 5 [ 134.627249][ T5875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.664734][ T5875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.678804][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.701002][ T5875] usb 3-1: config 0 descriptor?? [ 134.726225][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.930495][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 134.967619][ T6648] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 135.221852][ T5875] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 135.580129][ T5875] usb 3-1: USB disconnect, device number 5 [ 139.200995][ T6697] vlan2: entered promiscuous mode [ 139.206177][ T6697] bridge0: entered promiscuous mode [ 139.211880][ T6697] vlan2: entered allmulticast mode [ 139.238515][ T6697] bridge0: entered allmulticast mode [ 139.351291][ T6706] bridge_slave_0: left allmulticast mode [ 139.380306][ T6706] bridge_slave_0: left promiscuous mode [ 139.399607][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.560510][ T6706] bridge_slave_1: left allmulticast mode [ 139.593699][ T6706] bridge_slave_1: left promiscuous mode [ 139.603839][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.720241][ T6706] bond0: (slave bond_slave_0): Releasing backup interface [ 139.828547][ T6706] bond0: (slave bond_slave_1): Releasing backup interface [ 139.964603][ T6706] team0: Port device team_slave_0 removed [ 140.036720][ T6706] team0: Port device team_slave_1 removed [ 140.092156][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.138999][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.211867][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.227178][ T6706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.140693][ T6749] netlink: 52 bytes leftover after parsing attributes in process `syz.4.316'. [ 141.152542][ T6749] unsupported nlmsg_type 40 [ 141.522072][ T30] audit: type=1326 audit(1751317284.247:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 141.641105][ T30] audit: type=1326 audit(1751317284.247:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7bb8e929 code=0x7ffc0000 [ 141.757990][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 141.759529][ T30] audit: type=1326 audit(1751317284.247:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7bb8e929 code=0x7ffc0000 [ 141.931711][ T30] audit: type=1326 audit(1751317284.247:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 142.069367][ T30] audit: type=1326 audit(1751317284.247:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7bb8e929 code=0x7ffc0000 [ 142.180981][ T30] audit: type=1326 audit(1751317284.247:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 142.349107][ T30] audit: type=1326 audit(1751317284.247:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 142.464672][ T30] audit: type=1326 audit(1751317284.247:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 142.639500][ T30] audit: type=1326 audit(1751317284.247:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b7bb2ab19 code=0x7ffc0000 [ 142.748720][ T30] audit: type=1326 audit(1751317284.247:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6731 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7bb8e929 code=0x7ffc0000 [ 143.284690][ T6784] dlm: non-version read from control device 211 [ 143.293412][ T6784] dlm: non-version read from control device 211 [ 143.299821][ T6784] dlm: non-version read from control device 211 [ 143.306287][ T6784] dlm: non-version read from control device 211 [ 143.312664][ T6784] dlm: non-version read from control device 211 [ 143.319542][ T6784] dlm: non-version read from control device 211 [ 143.326109][ T6784] dlm: non-version read from control device 211 [ 143.332478][ T6784] dlm: non-version read from control device 211 [ 143.338779][ T6784] dlm: non-version read from control device 211 [ 143.348646][ T6784] dlm: non-version read from control device 211 [ 143.356058][ T6784] dlm: non-version read from control device 211 [ 143.362552][ T6784] dlm: non-version read from control device 211 [ 143.368859][ T6784] dlm: non-version read from control device 211 [ 143.375608][ T6784] dlm: non-version read from control device 211 [ 143.383518][ T6784] dlm: non-version read from control device 211 [ 143.390061][ T6784] dlm: non-version read from control device 211 [ 143.396369][ T6784] dlm: non-version read from control device 211 [ 143.402776][ T6784] dlm: non-version read from control device 211 [ 143.409080][ T6784] dlm: non-version read from control device 211 [ 143.415559][ T6784] dlm: non-version read from control device 211 [ 143.421920][ T6784] dlm: non-version read from control device 211 [ 143.428215][ T6784] dlm: non-version read from control device 211 [ 143.434613][ T6784] dlm: non-version read from control device 211 [ 143.440956][ T6784] dlm: non-version read from control device 211 [ 143.447254][ T6784] dlm: non-version read from control device 211 [ 143.453610][ T6784] dlm: non-version read from control device 211 [ 143.460935][ T6784] dlm: non-version read from control device 211 [ 143.467356][ T6784] dlm: non-version read from control device 211 [ 143.473714][ T6784] dlm: non-version read from control device 211 [ 143.480069][ T6784] dlm: non-version read from control device 211 [ 143.486383][ T6784] dlm: non-version read from control device 211 [ 143.492774][ T6784] dlm: non-version read from control device 211 [ 143.499076][ T6784] dlm: non-version read from control device 211 [ 143.505509][ T6784] dlm: non-version read from control device 211 [ 143.511853][ T6784] dlm: non-version read from control device 211 [ 143.518260][ T6784] dlm: non-version read from control device 211 [ 143.524652][ T6784] dlm: non-version read from control device 211 [ 143.530986][ T6784] dlm: non-version read from control device 211 [ 143.537299][ T6784] dlm: non-version read from control device 211 [ 143.543701][ T6784] dlm: non-version read from control device 211 [ 143.550217][ T6784] dlm: non-version read from control device 211 [ 143.556510][ T6784] dlm: non-version read from control device 211 [ 143.564421][ T6784] dlm: non-version read from control device 211 [ 143.572405][ T6784] dlm: non-version read from control device 211 [ 143.578728][ T6784] dlm: non-version read from control device 211 [ 143.585582][ T6784] dlm: non-version read from control device 211 [ 143.592262][ T6784] dlm: non-version read from control device 211 [ 143.598578][ T6784] dlm: non-version read from control device 211 [ 143.604903][ T6784] dlm: non-version read from control device 211 [ 143.611248][ T6784] dlm: non-version read from control device 211 [ 143.617557][ T6784] dlm: non-version read from control device 211 [ 143.624022][ T6784] dlm: non-version read from control device 211 [ 143.630378][ T6784] dlm: non-version read from control device 211 [ 143.636673][ T6784] dlm: non-version read from control device 211 [ 143.643381][ T6784] dlm: non-version read from control device 211 [ 143.649877][ T6784] dlm: non-version read from control device 211 [ 143.656174][ T6784] dlm: non-version read from control device 211 [ 143.663566][ T6784] dlm: non-version read from control device 211 [ 143.669945][ T6784] dlm: non-version read from control device 211 [ 143.676380][ T6784] dlm: non-version read from control device 211 [ 143.682736][ T6784] dlm: non-version read from control device 211 [ 143.689032][ T6784] dlm: non-version read from control device 211 [ 143.695394][ T6784] dlm: non-version read from control device 211 [ 143.701753][ T6784] dlm: non-version read from control device 211 [ 143.708050][ T6784] dlm: non-version read from control device 211 [ 143.714498][ T6784] dlm: non-version read from control device 211 [ 143.720851][ T6784] dlm: non-version read from control device 211 [ 143.727221][ T6784] dlm: non-version read from control device 211 [ 143.733588][ T6784] dlm: non-version read from control device 211 [ 143.739954][ T6784] dlm: non-version read from control device 211 [ 143.746246][ T6784] dlm: non-version read from control device 211 [ 143.752869][ T6784] dlm: non-version read from control device 211 [ 143.759323][ T6784] dlm: non-version read from control device 211 [ 143.766641][ T6784] dlm: non-version read from control device 211 [ 143.773009][ T6784] dlm: non-version read from control device 211 [ 143.779469][ T6784] dlm: non-version read from control device 211 [ 143.785786][ T6784] dlm: non-version read from control device 211 [ 143.793012][ T6784] dlm: non-version read from control device 211 [ 143.799371][ T6784] dlm: non-version read from control device 211 [ 143.805681][ T6784] dlm: non-version read from control device 211 [ 143.811995][ T6784] dlm: non-version read from control device 211 [ 143.818735][ T6784] dlm: non-version read from control device 211 [ 143.825116][ T6784] dlm: non-version read from control device 211 [ 143.831585][ T6784] dlm: non-version read from control device 211 [ 143.837889][ T6784] dlm: non-version read from control device 211 [ 143.844269][ T6784] dlm: non-version read from control device 211 [ 143.850650][ T6784] dlm: non-version read from control device 211 [ 143.856955][ T6784] dlm: non-version read from control device 211 [ 143.863313][ T6784] dlm: non-version read from control device 211 [ 143.870712][ T6784] dlm: non-version read from control device 211 [ 143.877016][ T6784] dlm: non-version read from control device 211 [ 143.883470][ T6784] dlm: non-version read from control device 211 [ 143.889845][ T6784] dlm: non-version read from control device 211 [ 143.896140][ T6784] dlm: non-version read from control device 211 [ 143.902507][ T6784] dlm: non-version read from control device 211 [ 143.908810][ T6784] dlm: non-version read from control device 211 [ 143.915925][ T6784] dlm: non-version read from control device 211 [ 143.922778][ T6784] dlm: non-version read from control device 211 [ 143.929076][ T6784] dlm: non-version read from control device 211 [ 144.761313][ T6822] netlink: 'syz.3.346': attribute type 10 has an invalid length. [ 144.824354][ T6822] hsr_slave_0: left promiscuous mode [ 144.865314][ T6822] hsr_slave_1: left promiscuous mode [ 145.491486][ T6836] kvm: emulating exchange as write [ 145.782065][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.892072][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 145.962788][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 145.992009][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.018704][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.040022][ T5937] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 146.051257][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.091958][ T5937] usb 2-1: config 0 descriptor?? [ 146.520874][ T5937] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 146.551606][ T5937] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 146.559009][ T5937] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 146.572763][ T5937] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 146.581917][ T5937] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 146.602870][ T5937] prodikeys 0003:041E:2801.0005: hidraw0: USB HID v0.04 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 146.748518][ T5937] usb 2-1: USB disconnect, device number 5 [ 147.079317][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.110444][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 147.147426][ T6885] team1: entered promiscuous mode [ 147.154786][ T6885] team1: entered allmulticast mode [ 147.239327][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 147.261666][ T5909] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 147.282074][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.334259][ T5909] usb 4-1: config 0 descriptor?? [ 147.609889][ T5909] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 147.642138][ T5909] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.663431][ T5909] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 147.694802][ T5909] usb 4-1: media controller created [ 147.743767][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.789396][ T5924] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.959533][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 147.974395][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.994161][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.005931][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.022215][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.038429][ T5924] usb 2-1: config 0 descriptor?? [ 148.048139][ T5924] hub 2-1:0.0: USB hub found [ 148.255235][ T5924] hub 2-1:0.0: 1 port detected [ 148.509304][ T1225] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.669856][ T5909] stb0899_attach: Driver disabled by Kconfig [ 148.684750][ T5909] az6027: no front-end attached [ 148.684750][ T5909] [ 148.689290][ T1225] usb 3-1: Using ep0 maxpacket: 16 [ 148.723483][ T5909] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 148.724131][ T1225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 148.752721][ T1225] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.765674][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.784904][ T1225] usb 3-1: Product: syz [ 148.790438][ T1225] usb 3-1: Manufacturer: syz [ 148.795506][ T1225] usb 3-1: SerialNumber: syz [ 148.798576][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 148.854201][ T5909] dvb-usb: schedule remote query interval to 400 msecs. [ 148.871271][ T1225] usb 3-1: config 0 descriptor?? [ 148.879506][ T5909] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 148.911367][ T1225] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.961166][ T1225] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 148.996205][ T5909] usb 4-1: USB disconnect, device number 6 [ 149.205242][ T5909] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 149.215631][ T5926] hub 2-1:0.0: activate --> -90 [ 149.445059][ T9] usb 2-1: USB disconnect, device number 6 [ 149.527767][ T1225] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 150.158908][ T1225] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 150.209667][ T1225] em28xx 3-1:0.0: board has no eeprom [ 150.326328][ T1225] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 150.345218][ T1225] em28xx 3-1:0.0: dvb set to bulk mode. [ 150.367184][ T5937] em28xx 3-1:0.0: Binding DVB extension [ 150.402478][ T1225] usb 3-1: USB disconnect, device number 6 [ 150.441730][ T1225] em28xx 3-1:0.0: Disconnecting em28xx [ 150.545177][ T5937] em28xx 3-1:0.0: Registering input extension [ 150.560139][ T1225] em28xx 3-1:0.0: Closing input extension [ 150.646828][ T1225] em28xx 3-1:0.0: Freeing device [ 151.509364][ T1225] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.687179][ T1225] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.707188][ T1225] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.715777][ T1225] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 151.725723][ T1225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.751863][ T1225] usb 1-1: config 0 descriptor?? [ 152.221709][ T1225] apple 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 152.391827][ T5926] usb 1-1: USB disconnect, device number 3 [ 152.515717][ T6994] fido_id[6994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 154.081801][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 154.081823][ T30] audit: type=1326 audit(1751317296.807:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7018 comm="syz.4.426" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f7b58e929 code=0x0 [ 154.212121][ T30] audit: type=1326 audit(1751317296.927:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7025 comm="syz.2.430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdb718e929 code=0x0 [ 156.003724][ T7047] ceph: No mds server is up or the cluster is laggy [ 156.292885][ T7062] netlink: 'syz.0.443': attribute type 1 has an invalid length. [ 156.418982][ T7062] bond1: entered promiscuous mode [ 156.424211][ T7062] bond1: entered allmulticast mode [ 156.443137][ T7071] bond1: (slave geneve2): making interface the new active one [ 156.451565][ T7071] geneve2: entered promiscuous mode [ 156.456987][ T7071] geneve2: entered allmulticast mode [ 156.465607][ T7071] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 157.851898][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.972108][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.131251][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.442041][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.952408][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.962941][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.972462][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.986652][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.995782][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.722481][ T1225] IPVS: starting estimator thread 0... [ 159.740740][ T13] bridge_slave_1: left allmulticast mode [ 159.759271][ T13] bridge_slave_1: left promiscuous mode [ 159.766464][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.784600][ T13] bridge_slave_0: left allmulticast mode [ 159.799264][ T13] bridge_slave_0: left promiscuous mode [ 159.805647][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.829653][ T7155] IPVS: using max 30 ests per chain, 72000 per kthread [ 160.115718][ T7161] loop6: detected capacity change from 0 to 7 [ 160.180652][ T7161] Dev loop6: unable to read RDB block 7 [ 160.186498][ T7161] loop6: unable to read partition table [ 160.193026][ T7161] loop6: partition table beyond EOD, truncated [ 160.209601][ T7161] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.269054][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 160.280007][ T13] ip6gre1 (unregistering): left promiscuous mode [ 161.065498][ T7174] kvm: MWAIT instruction emulated as NOP! [ 161.073773][ T5837] Bluetooth: hci1: command tx timeout [ 161.424563][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.450124][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.469011][ T13] bond0 (unregistering): Released all slaves [ 161.527938][ T7182] loop2: detected capacity change from 0 to 7 [ 161.538572][ T7182] loop2: [POWERTEC] p1 p2 p3 [ 161.572939][ T7182] loop2: p2 start 4294967287 is beyond EOD, truncated [ 161.582437][ T7182] loop2: p3 start 1932423285 is beyond EOD, truncated [ 161.696423][ T13] bond1 (unregistering): Released all slaves [ 161.736166][ T7184] lo: entered allmulticast mode [ 161.766187][ T7184] lo: left allmulticast mode [ 163.157640][ T5837] Bluetooth: hci1: command tx timeout [ 163.455629][ T7232] input: syz1 as /devices/virtual/input/input11 [ 163.774416][ T7132] chnl_net:caif_netlink_parms(): no params data found [ 164.022768][ T30] audit: type=1326 audit(1751317306.757:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7238 comm="syz.2.505" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdb718e929 code=0x0 [ 164.125005][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.155620][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.214501][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.267525][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.328227][ T13] veth1_macvtap: left promiscuous mode [ 164.345159][ T13] veth0_macvtap: left promiscuous mode [ 164.360490][ T13] veth1_vlan: left promiscuous mode [ 164.367138][ T13] veth0_vlan: left promiscuous mode [ 165.230010][ T5837] Bluetooth: hci1: command tx timeout [ 165.694630][ T13] team0 (unregistering): Port device team_slave_1 removed [ 165.760831][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.712398][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 166.829563][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.843343][ T7269] syzkaller1: entered promiscuous mode [ 166.848990][ T7269] syzkaller1: entered allmulticast mode [ 166.884477][ T7292] syz.2.522 (7292) used greatest stack depth: 20088 bytes left [ 166.895897][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 166.930244][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.942231][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.979282][ T9] usb 2-1: config 0 descriptor?? [ 166.995446][ T5901] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.016567][ T5901] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.034879][ T5901] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.045006][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 167.063326][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.094104][ T7305] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.137109][ T5901] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.308010][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.320721][ T5837] Bluetooth: hci1: command tx timeout [ 167.326783][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.350219][ T7132] bridge_slave_0: entered allmulticast mode [ 167.435690][ T7132] bridge_slave_0: entered promiscuous mode [ 167.435971][ T9] usb 5-1: USB disconnect, device number 4 [ 167.483601][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.527735][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.558173][ T7132] bridge_slave_1: entered allmulticast mode [ 167.593711][ T7132] bridge_slave_1: entered promiscuous mode [ 167.657088][ T5924] usb 2-1: USB disconnect, device number 7 [ 167.721775][ T7132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.739744][ T7132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.759270][ T5875] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 167.759343][ T5901] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.849673][ T7132] team0: Port device team_slave_0 added [ 167.864801][ T7132] team0: Port device team_slave_1 added [ 167.930097][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 167.938775][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.941687][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 167.958616][ T5901] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 167.978934][ T5875] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 167.980907][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.995311][ T5875] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 167.998855][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.017788][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.019708][ T5875] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 168.054687][ T5901] usb 3-1: config 0 descriptor?? [ 168.059215][ T7132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.092662][ T5875] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 168.103011][ T5875] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 168.123522][ T5875] usb 1-1: config 1 interface 0 has no altsetting 0 [ 168.140963][ T5875] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 168.162604][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.233470][ T5875] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 168.307522][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 168.417926][ T7132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.455626][ T7132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.482694][ T5875] scsi host1: usb-storage 1-1:1.0 [ 168.506725][ T7132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.588930][ T5901] sony 0003:1345:3008.0007: hiddev0,hidraw0: USB HID v80.07 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 168.628478][ T5901] sony 0003:1345:3008.0007: failed to claim input [ 168.652470][ T5926] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.655721][ T7330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.758477][ T5901] usb 3-1: USB disconnect, device number 7 [ 168.789808][ T7331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.817538][ T7331] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 168.848564][ T5924] usb 1-1: USB disconnect, device number 4 [ 168.855632][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 168.877628][ T5926] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 168.887967][ T7331] bond1: (slave vti0): Error -95 calling set_mac_address [ 168.905077][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.921874][ T5926] usb 5-1: config 0 descriptor?? [ 169.198480][ T7132] hsr_slave_0: entered promiscuous mode [ 169.206350][ T7132] hsr_slave_1: entered promiscuous mode [ 169.213394][ T7132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.228730][ T7132] Cannot create hsr debugfs directory [ 169.354571][ T5926] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v1.01 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 169.416596][ T13] IPVS: stop unused estimator thread 0... [ 170.064395][ T7132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.102054][ T7132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.136799][ T7132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.177996][ T7132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.362305][ T5924] usb 5-1: USB disconnect, device number 5 [ 170.582813][ T7132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.655327][ T7387] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 170.676027][ T7132] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.689427][ T7387] netlink: 'syz.1.545': attribute type 4 has an invalid length. [ 170.713381][ T7387] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.545'. [ 170.725892][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.733113][ T4051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.896253][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.903509][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.665059][ T7132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.037785][ T7417] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.552'. [ 172.231378][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.375847][ T7132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.404334][ T5924] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 172.443627][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.612211][ T5924] usb 2-1: Product: syz [ 172.617573][ T5924] usb 2-1: Manufacturer: syz [ 172.623317][ T5924] usb 2-1: SerialNumber: syz [ 172.636750][ T5924] usb 2-1: config 0 descriptor?? [ 172.662220][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 172.774916][ T7434] overlayfs: failed to decode file handle (len=19, type=248, flags=0, err=-61) [ 172.871935][ T5924] gspca_sunplus: reg_r err -71 [ 172.896059][ T5924] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 172.931983][ T5924] usb 2-1: USB disconnect, device number 8 [ 173.558636][ T7132] veth0_vlan: entered promiscuous mode [ 173.677172][ T7132] veth1_vlan: entered promiscuous mode [ 173.726223][ T7463] netlink: 'syz.1.564': attribute type 4 has an invalid length. [ 173.857513][ T7132] veth0_macvtap: entered promiscuous mode [ 173.904004][ T7132] veth1_macvtap: entered promiscuous mode [ 173.994207][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.068356][ T7132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.094463][ T7132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.113746][ T7132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.129466][ T5901] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.150896][ T7132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.177244][ T7132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.199891][ T7474] only policy match revision 0 supported [ 174.199914][ T7474] unable to load match [ 174.291209][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 174.311666][ T5901] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 174.341847][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.400041][ T5901] usb 5-1: config 0 descriptor?? [ 174.444295][ T5901] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 174.554731][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.600176][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.726492][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.762580][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.783611][ T7489] warning: `syz.0.574' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.369850][ T5924] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.569362][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 175.629425][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.659743][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.685670][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.746555][ T5924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.795365][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.860090][ T7515] loop2: detected capacity change from 0 to 7 [ 175.878679][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.889522][ T5901] gspca_sonixj: i2c_w8 err -71 [ 175.904665][ T7515] Dev loop2: unable to read RDB block 7 [ 175.918569][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.929484][ T5901] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 175.933839][ T7515] loop2: unable to read partition table [ 175.969845][ T5901] usb 5-1: USB disconnect, device number 6 [ 175.979664][ T5924] usb 1-1: Manufacturer: syz [ 175.986293][ T7515] loop2: partition table beyond EOD, truncated [ 176.014574][ T7515] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.030979][ T5924] usb 1-1: config 0 descriptor?? [ 176.433751][ T5924] rc_core: IR keymap rc-hauppauge not found [ 176.477704][ T5924] Registered IR keymap rc-empty [ 176.568240][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.679468][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.708531][ T7538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.719631][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 176.772662][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 176.816896][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.869382][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.900308][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 176.949455][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.143158][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.182986][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.236005][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.301941][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.379575][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.414608][ T7550] lo speed is unknown, defaulting to 1000 [ 177.419313][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 177.460208][ T7550] lo speed is unknown, defaulting to 1000 [ 177.487016][ T5924] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 177.495049][ T7550] lo speed is unknown, defaulting to 1000 [ 177.557763][ T5924] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 177.577837][ T7552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.657703][ T5924] usb 1-1: USB disconnect, device number 5 [ 178.367855][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 178.995914][ T7550] infiniband syz0: set active [ 179.002239][ T43] lo speed is unknown, defaulting to 1000 [ 179.023287][ T7550] infiniband syz0: added lo [ 179.046138][ T7550] syz0: rxe_create_cq: returned err = -12 [ 179.047207][ T7595] netlink: 'syz.2.604': attribute type 4 has an invalid length. [ 179.091635][ T7550] infiniband syz0: Couldn't create ib_mad CQ [ 179.102764][ T7550] infiniband syz0: Couldn't open port 1 [ 179.169851][ T5901] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.178019][ T7550] RDS/IB: syz0: added [ 179.199811][ T7550] smc: adding ib device syz0 with port count 1 [ 179.209484][ T7550] smc: ib device syz0 port 1 has pnetid [ 179.217634][ T43] lo speed is unknown, defaulting to 1000 [ 179.242299][ T7550] lo speed is unknown, defaulting to 1000 [ 179.342134][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 179.359311][ T5901] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.393303][ T5901] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.421666][ T7601] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.447225][ T5901] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 179.492188][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.519603][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.547084][ T5901] usb 1-1: Product: syz [ 179.554591][ T5901] usb 1-1: Manufacturer: syz [ 179.579699][ T5901] usb 1-1: SerialNumber: syz [ 180.021905][ T7591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 180.165986][ T5924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.254754][ T7550] lo speed is unknown, defaulting to 1000 [ 180.339278][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 180.356458][ T5924] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 180.379304][ T5924] usb 2-1: config 150 has no interface number 0 [ 180.385648][ T5924] usb 2-1: config 150 interface 204 has no altsetting 0 [ 180.418906][ T5924] usb 2-1: config 150 interface 1 has no altsetting 0 [ 180.444439][ T5924] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 180.459453][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.467538][ T5924] usb 2-1: Product: syz [ 180.481500][ T5924] usb 2-1: Manufacturer: syz [ 180.486167][ T5924] usb 2-1: SerialNumber: syz [ 180.635638][ T5901] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 180.653972][ T5901] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 180.703468][ T5901] cdc_ncm 1-1:1.0: bind() failure [ 180.761753][ T5924] xr_serial 2-1:150.204: xr_serial converter detected [ 180.792292][ T5901] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 180.838455][ T5901] cdc_ncm 1-1:1.1: bind() failure [ 180.888104][ T5901] usb 1-1: USB disconnect, device number 6 [ 181.390672][ T7550] lo speed is unknown, defaulting to 1000 [ 181.577573][ T5924] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 181.845704][ T5901] usb 2-1: USB disconnect, device number 9 [ 181.940037][ T5901] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 181.986180][ T5901] xr_serial 2-1:150.204: device disconnected [ 182.976058][ T7550] lo speed is unknown, defaulting to 1000 [ 183.364157][ T7683] capability: warning: `syz.0.627' uses 32-bit capabilities (legacy support in use) [ 183.992470][ T7666] lo speed is unknown, defaulting to 1000 [ 184.772161][ T7550] lo speed is unknown, defaulting to 1000 [ 185.229520][ T1225] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 185.402477][ T1225] usb 3-1: not running at top speed; connect to a high speed hub [ 185.422236][ T1225] usb 3-1: config 1 interface 0 has no altsetting 0 [ 185.452765][ T1225] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 185.486050][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.498786][ T1225] usb 3-1: Product: syz [ 185.503185][ T1225] usb 3-1: Manufacturer: syz [ 185.507968][ T1225] usb 3-1: SerialNumber: syz [ 185.723208][ T7728] mmap: syz.1.640 (7728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.775360][ T1225] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 185.828376][ T5174] bcm5974 3-1:1.0: could not read from device [ 185.972663][ T5174] bcm5974 3-1:1.0: could not read from device [ 186.066498][ T1225] usb 3-1: USB disconnect, device number 8 [ 186.082626][ T5174] bcm5974 3-1:1.0: could not read from device [ 186.168352][ T7732] gtp0: entered promiscuous mode [ 187.590164][ T5924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.753902][ T5924] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.785783][ T5924] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.811148][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.845006][ T5924] usb 6-1: Product: syz [ 187.862895][ T5924] usb 6-1: Manufacturer: syz [ 187.882991][ T5924] usb 6-1: SerialNumber: syz [ 188.938534][ T7796] netlink: 'syz.1.666': attribute type 29 has an invalid length. [ 188.949999][ T7796] netlink: 'syz.1.666': attribute type 29 has an invalid length. [ 188.951661][ T5924] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 188.959723][ T7796] netlink: 500 bytes leftover after parsing attributes in process `syz.1.666'. [ 188.991963][ T5924] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 189.013092][ T5924] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 189.367401][ T5924] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 189.449720][ T5924] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 189.492740][ T5924] usb 6-1: USB disconnect, device number 2 [ 189.510792][ T5924] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 189.839333][ T5937] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 190.052093][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.069316][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.099207][ T5937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.138433][ T7828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.139209][ T5937] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.175384][ T7828] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 190.185793][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.212441][ T5937] usb 1-1: config 0 descriptor?? [ 190.213473][ T7828] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 190.665655][ T5937] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 190.704580][ T5937] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 190.956149][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.999769][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.085560][ T5924] usb 1-1: USB disconnect, device number 7 [ 192.009745][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.199459][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 192.217661][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 192.260774][ T5937] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.275840][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.294648][ T5937] usb 3-1: Product: syz [ 192.298925][ T5937] usb 3-1: Manufacturer: syz [ 192.311548][ T5937] usb 3-1: SerialNumber: syz [ 192.321464][ T7878] netlink: 112 bytes leftover after parsing attributes in process `syz.5.701'. [ 192.327277][ T5937] usb 3-1: config 0 descriptor?? [ 192.351380][ T5937] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.360818][ T5937] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 192.389651][ T5924] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 192.562165][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.579097][ T5924] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 192.588493][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.612009][ T5924] usb 5-1: config 0 descriptor?? [ 192.775796][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.787275][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.876150][ T5937] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 192.966868][ T5937] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 192.978315][ T5937] em28xx 3-1:0.0: board has no eeprom [ 193.036246][ T5924] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 193.058103][ T5924] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input15 [ 193.079713][ T5937] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 193.095436][ T5937] em28xx 3-1:0.0: dvb set to bulk mode. [ 193.105381][ T5901] em28xx 3-1:0.0: Binding DVB extension [ 193.124567][ T5937] usb 3-1: USB disconnect, device number 9 [ 193.138624][ T5937] em28xx 3-1:0.0: Disconnecting em28xx [ 193.214643][ T5924] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 193.235993][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.265171][ T5901] em28xx 3-1:0.0: Registering input extension [ 193.275721][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.296276][ T5937] em28xx 3-1:0.0: Closing input extension [ 193.338776][ T5937] em28xx 3-1:0.0: Freeing device [ 193.888398][ T7909] input: syz0 as /devices/virtual/input/input17 [ 194.275561][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282353][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.589378][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 194.589530][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 195.279938][ T5937] usb 5-1: USB disconnect, device number 7 [ 195.372293][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 195.562669][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 195.581072][ T5909] usb 6-1: config 0 has no interfaces? [ 195.607553][ T5909] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.619343][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.639253][ T5909] usb 6-1: Product: syz [ 195.643471][ T5909] usb 6-1: Manufacturer: syz [ 195.648097][ T5909] usb 6-1: SerialNumber: syz [ 195.679799][ T5901] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 195.703421][ T5909] usb 6-1: config 0 descriptor?? [ 195.861833][ T5901] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.902001][ T5901] usb 3-1: config 1 interface 0 has no altsetting 0 [ 195.924125][ T5901] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 195.949532][ T5909] usb 6-1: USB disconnect, device number 3 [ 195.951528][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.999020][ T5901] usb 3-1: Product: syz [ 196.018316][ T5901] usb 3-1: Manufacturer: syz [ 196.027922][ T5901] usb 3-1: SerialNumber: syz [ 196.268904][ T5901] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18 [ 196.339023][ T5901] usb 3-1: USB disconnect, device number 10 [ 196.412507][ T7966] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1642504120 (13140032960 ns) > initial count (744665392 ns). Using initial count to start timer. [ 196.451476][ T7966] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 197.422568][ T7985] syzkaller1: entered promiscuous mode [ 197.450998][ T7985] syzkaller1: entered allmulticast mode [ 198.093995][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.752'. [ 198.414572][ T8013] loop6: detected capacity change from 0 to 7 [ 198.427093][ T8013] Dev loop6: unable to read RDB block 7 [ 198.434425][ T8013] loop6: AHDI p1 p2 p3 [ 198.438919][ T8013] loop6: partition table partially beyond EOD, truncated [ 198.463188][ T8013] loop6: p1 start 926365495 is beyond EOD, truncated [ 198.482114][ T8013] loop6: p2 size 116 extends beyond EOD, truncated [ 199.478100][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805cebdc00: rx timeout, send abort [ 199.489097][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805cebdc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 200.095788][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 201.505560][ T7402] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 201.587138][ T8079] netlink: 76 bytes leftover after parsing attributes in process `syz.5.780'. [ 202.701421][ T8122] bridge0: port 3(syz_tun) entered blocking state [ 202.716651][ T8122] bridge0: port 3(syz_tun) entered disabled state [ 202.735867][ T8122] syz_tun: entered allmulticast mode [ 202.751211][ T8122] syz_tun: entered promiscuous mode [ 202.760989][ T8122] bridge0: port 3(syz_tun) entered blocking state [ 202.767950][ T8122] bridge0: port 3(syz_tun) entered forwarding state [ 203.305428][ T8144] Bluetooth: hci0: unsupported parameter 4096 [ 203.315983][ T8144] Bluetooth: hci0: invalid len left 4, exp >= 113 [ 203.419245][ T5909] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 203.455891][ T8146] netlink: 452 bytes leftover after parsing attributes in process `syz.0.808'. [ 203.589238][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 203.604036][ T5909] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 203.628190][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.639040][ T5909] usb 6-1: Product: syz [ 203.649235][ T5909] usb 6-1: Manufacturer: syz [ 203.653875][ T5909] usb 6-1: SerialNumber: syz [ 203.672672][ T5909] usb 6-1: config 0 descriptor?? [ 203.943712][ T5909] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 204.306759][ T30] audit: type=1326 audit(1751317347.037:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8161 comm="syz.4.815" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7b58e929 code=0x0 [ 205.137075][ T5924] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 205.158121][ T5909] gspca_sunplus: reg_w_riv err -71 [ 205.162928][ T8179] Set syz1 is full, maxelem 1038 reached [ 205.164921][ T5909] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 205.196348][ T5909] usb 6-1: USB disconnect, device number 4 [ 205.316123][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.358450][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.369738][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 205.388890][ T5924] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 205.419690][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.435442][ T8184] erspan0: entered promiscuous mode [ 205.448719][ T5924] usb 1-1: config 0 descriptor?? [ 205.469782][ T8184] macvtap1: entered promiscuous mode [ 205.475479][ T8184] macvtap1: entered allmulticast mode [ 205.539194][ T8184] erspan0: entered allmulticast mode [ 205.568849][ T8189] erspan0: left allmulticast mode [ 205.584646][ T8189] erspan0: left promiscuous mode [ 205.878889][ T5924] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 205.890149][ T5924] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 205.926927][ T5924] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 206.151899][ C1] hid-thrustmaster 0003:044F:B65D.000B: URB to get model id failed with error -71 [ 206.152786][ T5937] usb 1-1: USB disconnect, device number 8 [ 207.203587][ C0] Unknown status report in ack skb [ 207.238427][ T30] audit: type=1326 audit(1751317349.967:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.288232][ T30] audit: type=1326 audit(1751317349.967:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.340140][ T30] audit: type=1326 audit(1751317349.997:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.385064][ T30] audit: type=1326 audit(1751317349.997:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.484485][ T30] audit: type=1326 audit(1751317349.997:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.568938][ T30] audit: type=1326 audit(1751317349.997:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.613764][ T30] audit: type=1326 audit(1751317349.997:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.643244][ T30] audit: type=1326 audit(1751317349.997:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 207.686047][ T30] audit: type=1326 audit(1751317349.997:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24c7d8e929 code=0x7ffc0000 [ 209.709380][ T5901] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.748159][ T8270] lo speed is unknown, defaulting to 1000 [ 209.914525][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.956125][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.040464][ T5901] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.069359][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.130167][ T5901] usb 1-1: config 0 descriptor?? [ 210.343166][ T8287] Failed to get privilege flags for destination (handle=0x0:0x20000) [ 210.659996][ T5901] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 210.773943][ T5901] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 210.805959][ T5901] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 210.848992][ T5901] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -32 [ 210.897017][ T5901] usb 1-1: USB disconnect, device number 9 [ 212.435068][ T8337] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 213.205984][ T8359] lo speed is unknown, defaulting to 1000 [ 213.379631][ T5937] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.449553][ T1225] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 213.537916][ T5909] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.569572][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 213.595372][ T5937] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 213.617718][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.627349][ T1225] usb 3-1: config 0 has no interfaces? [ 213.642646][ T5937] usb 6-1: config 0 descriptor?? [ 213.662493][ T5937] gspca_main: sunplus-2.14.0 probing 041e:400b [ 213.674033][ T1225] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 213.689229][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.707744][ T1225] usb 3-1: Product: syz [ 213.715119][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 213.719174][ T1225] usb 3-1: Manufacturer: syz [ 213.736419][ T1225] usb 3-1: SerialNumber: syz [ 213.745030][ T5909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.751392][ T1225] usb 3-1: config 0 descriptor?? [ 213.784796][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.814507][ T5909] usb 2-1: Product: syz [ 213.818723][ T5909] usb 2-1: Manufacturer: syz [ 213.843176][ T5909] usb 2-1: SerialNumber: syz [ 213.864594][ T5909] usb 2-1: config 0 descriptor?? [ 213.974236][ T8369] lo speed is unknown, defaulting to 1000 [ 214.052163][ T8371] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 214.148970][ T5909] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.284245][ T8372] xt_CT: No such helper "pptp" [ 214.373938][ T1225] usb 3-1: USB disconnect, device number 11 [ 214.979478][ T5909] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 215.020246][ T5909] usb 2-1: USB disconnect, device number 10 [ 215.086157][ T5937] gspca_sunplus: reg_w_riv err -71 [ 215.098087][ T5937] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 215.156382][ T5937] usb 6-1: USB disconnect, device number 5 [ 215.859260][ T5909] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 216.042900][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 216.052106][ T5909] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 216.095296][ T5909] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 216.110597][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.130917][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.915'. [ 216.152693][ T5909] usb 2-1: Product: syz [ 216.156931][ T5909] usb 2-1: Manufacturer: syz [ 216.161090][ T8416] gtp0: entered promiscuous mode [ 216.163220][ T5909] usb 2-1: SerialNumber: syz [ 216.178061][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 216.192069][ T5909] usb 2-1: config 0 descriptor?? [ 216.206063][ T5909] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 216.223919][ T5909] usb 2-1: Detected FT232R [ 216.419059][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 216.819554][ T5909] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 216.830218][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 216.837752][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 216.837809][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 216.843827][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 216.924978][ T5909] usb 2-1: USB disconnect, device number 11 [ 216.983123][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 217.027643][ T5909] ftdi_sio 2-1:0.0: device disconnected [ 217.063383][ T8423] bond0: entered promiscuous mode [ 217.096390][ T8423] bond_slave_0: entered promiscuous mode [ 217.120597][ T8423] bond_slave_1: entered promiscuous mode [ 217.157436][ T8423] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.188606][ T8423] bond0: left promiscuous mode [ 217.214855][ T8423] bond_slave_0: left promiscuous mode [ 217.234202][ T8423] bond_slave_1: left promiscuous mode [ 217.485921][ T8439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3758424113 (240539143232 ns) > initial count (196541296192 ns). Using initial count to start timer. [ 218.267539][ T8471] netlink: 'syz.0.941': attribute type 4 has an invalid length. [ 218.303647][ T8471] netlink: 'syz.0.941': attribute type 4 has an invalid length. [ 218.581073][ T8485] loop6: detected capacity change from 0 to 7 [ 218.599877][ T8485] loop6: [POWERTEC] p1 p2 p3 [ 218.604731][ T8485] loop6: p1 start 808464432 is beyond EOD, truncated [ 218.629246][ T8485] loop6: p2 start 808464432 is beyond EOD, truncated [ 218.652012][ T8485] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 218.715448][ T8492] sg_read: process 155 (syz.5.949) changed security contexts after opening file descriptor, this is not allowed. [ 219.252969][ T5139] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.259680][ T5830] Bluetooth: hci5: command 0x1003 tx timeout [ 219.535194][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.957'. [ 219.546011][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.957'. [ 219.565473][ T8511] bridge0: port 3(vlan2) entered blocking state [ 219.572290][ T8511] bridge0: port 3(vlan2) entered disabled state [ 219.578831][ T8511] vlan2: entered allmulticast mode [ 219.584323][ T8511] bridge0: entered allmulticast mode [ 219.626234][ T8511] vlan2: left allmulticast mode [ 219.639733][ T8511] bridge0: left allmulticast mode [ 220.363753][ T8535] KVM: debugfs: duplicate directory 8535-4 [ 221.199369][ T1225] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.363611][ T1225] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 221.373103][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.388861][ T1225] usb 2-1: config 0 descriptor?? [ 221.407400][ T1225] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 221.638485][ T1225] gp8psk: usb in 128 operation failed. [ 221.655574][ T1225] gp8psk: usb in 137 operation failed. [ 221.663545][ T1225] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 221.678502][ T1225] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 221.689333][ T1225] usb 2-1: media controller created [ 221.732964][ T1225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.773249][ T1225] gp8psk_fe: Frontend attached [ 221.778455][ T1225] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 221.799072][ T1225] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 221.898980][ T1225] gp8psk: usb in 138 operation failed. [ 221.904733][ T1225] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 221.914925][ T1225] gp8psk: found Genpix USB device pID = 203 (hex) [ 221.925386][ T1225] usb 2-1: USB disconnect, device number 12 [ 222.083242][ T1225] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 222.335505][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 222.385416][ T8593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.990'. [ 224.499273][ T5909] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 224.679394][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 224.688099][ T5909] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 224.697122][ T5909] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.717435][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.738726][ T5909] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.769785][ T5909] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.797575][ T5909] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.817092][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.075027][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'. [ 225.097581][ T5909] usb 5-1: GET_CAPABILITIES returned 0 [ 225.103284][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1028'. [ 225.124992][ T5909] usbtmc 5-1:16.0: can't read capabilities [ 225.149733][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1028'. [ 225.191304][ T8684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1028'. [ 225.341295][ T5909] usb 5-1: USB disconnect, device number 8 [ 226.089756][ T8714] gretap0: entered promiscuous mode [ 226.120231][ T8714] vlan2: entered promiscuous mode [ 226.779379][ T5909] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 226.973301][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.014480][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.044628][ T5909] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 227.064551][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.090394][ T5909] usb 6-1: config 0 descriptor?? [ 227.440144][ C0] Unknown status report in ack skb [ 227.719486][ T1225] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 227.891141][ T1225] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 227.931125][ T5909] hid-led 0003:0FC5:B080.000D: probe with driver hid-led failed with error -71 [ 227.932858][ T1225] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.961091][ T5909] usb 6-1: USB disconnect, device number 6 [ 227.983263][ T1225] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 228.014598][ T1225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.032427][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.059438][ T1225] usb 3-1: SerialNumber: syz [ 228.063585][ T8782] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1068'. [ 228.244462][ T8788] loop8: detected capacity change from 0 to 7 [ 228.254203][ T8788] Dev loop8: unable to read RDB block 7 [ 228.260232][ T8788] loop8: AHDI p3 [ 228.264139][ T8788] loop8: partition table partially beyond EOD, truncated [ 228.294721][ T1225] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 228.309595][ T1225] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 228.336241][ T1225] usb 3-1: USB disconnect, device number 12 [ 228.397462][ T8792] lo speed is unknown, defaulting to 1000 [ 228.819341][ T43] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 228.985949][ T43] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 229.018309][ T43] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.049456][ T43] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 229.084555][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 229.095050][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.119986][ T43] usb 3-1: SerialNumber: syz [ 229.142837][ T8807] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 229.196782][ T8793] netlink: 'syz.1.1072': attribute type 2 has an invalid length. [ 229.347326][ T43] rndis_host 3-1:253.0: RNDIS init failed, -71 [ 229.358768][ T43] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71 [ 229.424575][ T43] usb 3-1: USB disconnect, device number 13 [ 230.143951][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1088'. [ 230.153639][ T8833] netem: unknown loss type 13 [ 230.158716][ T8833] netem: change failed [ 230.373799][ T8839] overlayfs: failed to resolve './file1': -2 [ 230.416615][ T8841] netlink: 'syz.5.1093': attribute type 1 has an invalid length. [ 230.506883][ T8841] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.539267][ T8841] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.559348][ T8841] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.583523][ T8841] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.607381][ T8841] bond1: (slave geneve2): making interface the new active one [ 230.636577][ T8841] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 231.053474][ T1225] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 231.160673][ C0] Unknown status report in ack skb [ 231.237367][ T1225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.284715][ T1225] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 231.339914][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 231.372899][ T1225] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 231.406333][ T1225] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.441190][ T1225] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 231.487172][ T1225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 231.514745][ T1225] usb 6-1: Product: syz [ 231.541897][ T1225] usb 6-1: Manufacturer: syz [ 231.546558][ T1225] usb 6-1: SerialNumber: syz [ 231.587980][ T1225] usb 6-1: config 0 descriptor?? [ 231.819797][ T1225] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 231.856642][ T1225] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 232.020883][ T1225] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 232.028522][ T1225] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 232.099691][ T1225] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 232.226692][ T1225] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 232.293562][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 232.293582][ T30] audit: type=1804 audit(1751317375.027:203): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1105" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=26949 res=1 errno=0 [ 233.031072][ T1225] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 233.040015][ T1225] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 233.057221][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 233.064337][ T1225] usb 6-1: USB disconnect, device number 7 [ 233.146304][ T5139] Bluetooth: hci3: unexpected cc 0x0809 length: 68 > 4 [ 233.153505][ T5139] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 233.172880][ T8893] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 233.226300][ T5909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.257286][ T5909] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.293637][ T5909] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.321872][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.352959][ T5909] usb 5-1: SerialNumber: syz [ 233.588681][ T5909] usb 5-1: 0:2 : does not exist [ 233.605016][ T8902] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1116'. [ 233.667595][ T5909] usb 5-1: USB disconnect, device number 9 [ 235.701192][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 235.904642][ T8976] syz_tun: entered promiscuous mode [ 235.942166][ T8976] batadv_slave_0: entered promiscuous mode [ 235.980039][ T8976] hsr1: entered allmulticast mode [ 235.985139][ T8976] syz_tun: entered allmulticast mode [ 236.069243][ T8976] batadv_slave_0: entered allmulticast mode [ 236.463413][ T8990] batadv_slave_0: entered promiscuous mode [ 236.495097][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'. [ 236.512604][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.601271][ T30] audit: type=1800 audit(1751317379.337:204): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1155" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 236.720033][ T8990] batadv_slave_0 (unregistering): left promiscuous mode [ 236.738005][ T8990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.658730][ T9016] ======================================================= [ 237.658730][ T9016] WARNING: The mand mount option has been deprecated and [ 237.658730][ T9016] and is ignored by this kernel. Remove the mand [ 237.658730][ T9016] option from the mount to silence this warning. [ 237.658730][ T9016] ======================================================= [ 237.712655][ T9016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.268698][ T9031] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 238.447416][ T9033] bond2: (slave gretap1): making interface the new active one [ 238.458215][ T9033] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.578538][ T30] audit: type=1800 audit(1751317381.307:205): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1174" name="file1" dev="overlay" ino=576 res=0 errno=0 [ 239.138906][ T9057] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 239.349507][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 239.513483][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.551824][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.589843][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.624523][ T5909] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.644811][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.667775][ T5909] usb 2-1: config 0 descriptor?? [ 240.128866][ T5909] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xe [ 240.155325][ T5909] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 240.194637][ T5909] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 240.219638][ T9083] [ 240.222022][ T9083] ===================================================== [ 240.228976][ T9083] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 240.236464][ T9083] 6.16.0-rc4-syzkaller #0 Not tainted [ 240.241858][ T9083] ----------------------------------------------------- [ 240.248818][ T9083] syz.4.1194/9083 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 240.256484][ T9083] ffff88807c655168 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 240.265231][ T9083] [ 240.265231][ T9083] and this task is already holding: [ 240.272612][ T9083] ffff88807acf2028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 240.282378][ T9083] which would create a new lock dependency: [ 240.288272][ T9083] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 240.296388][ T9083] [ 240.296388][ T9083] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 240.305836][ T9083] (&client->buffer_lock){..-.}-{3:3} [ 240.305859][ T9083] [ 240.305859][ T9083] ... which became SOFTIRQ-irq-safe at: [ 240.318936][ T9083] lock_acquire+0x120/0x360 [ 240.323539][ T9083] _raw_spin_lock+0x2e/0x40 [ 240.328136][ T9083] evdev_pass_values+0xb9/0xbd0 [ 240.333082][ T9083] evdev_events+0x1e6/0x340 [ 240.337673][ T9083] input_pass_values+0x288/0x890 [ 240.342700][ T9083] input_event_dispose+0x3e5/0x6b0 [ 240.347906][ T9083] input_event+0x8c/0xc0 [ 240.352239][ T9083] hidinput_hid_event+0x132c/0x1c90 [ 240.357532][ T9083] hid_process_event+0x4be/0x620 [ 240.362562][ T9083] hid_report_raw_event+0xe91/0x16d0 [ 240.367945][ T9083] hid_input_report+0x43e/0x520 [ 240.372893][ T9083] hid_irq_in+0x47e/0x6d0 [ 240.377316][ T9083] __usb_hcd_giveback_urb+0x417/0x690 [ 240.382774][ T9083] dummy_timer+0x862/0x4550 [ 240.387370][ T9083] __hrtimer_run_queues+0x52c/0xc60 [ 240.392677][ T9083] hrtimer_run_softirq+0x187/0x2b0 [ 240.397882][ T9083] handle_softirqs+0x283/0x870 [ 240.402742][ T9083] __irq_exit_rcu+0xca/0x1f0 [ 240.407426][ T9083] irq_exit_rcu+0x9/0x30 [ 240.411764][ T9083] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 240.417489][ T9083] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.423574][ T9083] __rcu_read_unlock+0x33/0xe0 [ 240.428430][ T9083] unwind_next_frame+0x19ae/0x2390 [ 240.433640][ T9083] arch_stack_walk+0x11c/0x150 [ 240.438499][ T9083] stack_trace_save+0x9c/0xe0 [ 240.443284][ T9083] kasan_save_stack+0x3e/0x60 [ 240.448070][ T9083] kasan_record_aux_stack+0xbd/0xd0 [ 240.453379][ T9083] call_rcu+0x157/0x9c0 [ 240.457640][ T9083] kmem_cache_free+0x309/0x400 [ 240.462503][ T9083] __io_req_caches_free+0x8f/0x140 [ 240.467717][ T9083] io_req_caches_free+0x21/0x30 [ 240.472770][ T9083] io_ring_exit_work+0x415/0x930 [ 240.477794][ T9083] process_scheduled_works+0xae1/0x17b0 [ 240.483432][ T9083] worker_thread+0x8a0/0xda0 [ 240.488118][ T9083] kthread+0x711/0x8a0 [ 240.492277][ T9083] ret_from_fork+0x3fc/0x770 [ 240.496958][ T9083] ret_from_fork_asm+0x1a/0x30 [ 240.501814][ T9083] [ 240.501814][ T9083] to a SOFTIRQ-irq-unsafe lock: [ 240.508833][ T9083] (tasklist_lock){.+.+}-{3:3} [ 240.508861][ T9083] [ 240.508861][ T9083] ... which became SOFTIRQ-irq-unsafe at: [ 240.521500][ T9083] ... [ 240.521508][ T9083] lock_acquire+0x120/0x360 [ 240.528682][ T9083] _raw_read_lock+0x36/0x50 [ 240.533280][ T9083] __do_wait+0xde/0x740 [ 240.537530][ T9083] do_wait+0x1f8/0x520 [ 240.541691][ T9083] kernel_wait+0xab/0x170 [ 240.546111][ T9083] call_usermodehelper_exec_work+0xbe/0x230 [ 240.552097][ T9083] process_scheduled_works+0xae1/0x17b0 [ 240.557735][ T9083] worker_thread+0x8a0/0xda0 [ 240.562420][ T9083] kthread+0x711/0x8a0 [ 240.566577][ T9083] ret_from_fork+0x3fc/0x770 [ 240.571262][ T9083] ret_from_fork_asm+0x1a/0x30 [ 240.576116][ T9083] [ 240.576116][ T9083] other info that might help us debug this: [ 240.576116][ T9083] [ 240.586343][ T9083] Chain exists of: [ 240.586343][ T9083] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 240.586343][ T9083] [ 240.599477][ T9083] Possible interrupt unsafe locking scenario: [ 240.599477][ T9083] [ 240.607795][ T9083] CPU0 CPU1 [ 240.613160][ T9083] ---- ---- [ 240.618523][ T9083] lock(tasklist_lock); [ 240.622786][ T9083] local_irq_disable(); [ 240.629662][ T9083] lock(&client->buffer_lock); [ 240.637043][ T9083] lock(&new->fa_lock); [ 240.643811][ T9083] [ 240.647268][ T9083] lock(&client->buffer_lock); [ 240.652305][ T9083] [ 240.652305][ T9083] *** DEADLOCK *** [ 240.652305][ T9083] [ 240.660451][ T9083] 7 locks held by syz.4.1194/9083: [ 240.665563][ T9083] #0: ffff88802a03b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 240.674714][ T9083] #1: ffff888029d1f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 240.684826][ T9083] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 240.694499][ T9083] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 240.704075][ T9083] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 240.713222][ T9083] #5: ffff88807acf2028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 240.723415][ T9083] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 240.732473][ T9083] [ 240.732473][ T9083] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 240.742880][ T9083] -> (&client->buffer_lock){..-.}-{3:3} { [ 240.748627][ T9083] IN-SOFTIRQ-W at: [ 240.752614][ T9083] lock_acquire+0x120/0x360 [ 240.758777][ T9083] _raw_spin_lock+0x2e/0x40 [ 240.764937][ T9083] evdev_pass_values+0xb9/0xbd0 [ 240.771439][ T9083] evdev_events+0x1e6/0x340 [ 240.777594][ T9083] input_pass_values+0x288/0x890 [ 240.784182][ T9083] input_event_dispose+0x3e5/0x6b0 [ 240.790956][ T9083] input_event+0x8c/0xc0 [ 240.796853][ T9083] hidinput_hid_event+0x132c/0x1c90 [ 240.803701][ T9083] hid_process_event+0x4be/0x620 [ 240.810304][ T9083] hid_report_raw_event+0xe91/0x16d0 [ 240.817245][ T9083] hid_input_report+0x43e/0x520 [ 240.823752][ T9083] hid_irq_in+0x47e/0x6d0 [ 240.829733][ T9083] __usb_hcd_giveback_urb+0x417/0x690 [ 240.836767][ T9083] dummy_timer+0x862/0x4550 [ 240.842932][ T9083] __hrtimer_run_queues+0x52c/0xc60 [ 240.849790][ T9083] hrtimer_run_softirq+0x187/0x2b0 [ 240.856558][ T9083] handle_softirqs+0x283/0x870 [ 240.862977][ T9083] __irq_exit_rcu+0xca/0x1f0 [ 240.869227][ T9083] irq_exit_rcu+0x9/0x30 [ 240.875126][ T9083] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 240.882416][ T9083] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.890049][ T9083] __rcu_read_unlock+0x33/0xe0 [ 240.896467][ T9083] unwind_next_frame+0x19ae/0x2390 [ 240.903257][ T9083] arch_stack_walk+0x11c/0x150 [ 240.909702][ T9083] stack_trace_save+0x9c/0xe0 [ 240.916033][ T9083] kasan_save_stack+0x3e/0x60 [ 240.922365][ T9083] kasan_record_aux_stack+0xbd/0xd0 [ 240.929226][ T9083] call_rcu+0x157/0x9c0 [ 240.935038][ T9083] kmem_cache_free+0x309/0x400 [ 240.941458][ T9083] __io_req_caches_free+0x8f/0x140 [ 240.948229][ T9083] io_req_caches_free+0x21/0x30 [ 240.954734][ T9083] io_ring_exit_work+0x415/0x930 [ 240.961326][ T9083] process_scheduled_works+0xae1/0x17b0 [ 240.968526][ T9083] worker_thread+0x8a0/0xda0 [ 240.974775][ T9083] kthread+0x711/0x8a0 [ 240.980494][ T9083] ret_from_fork+0x3fc/0x770 [ 240.986739][ T9083] ret_from_fork_asm+0x1a/0x30 [ 240.993155][ T9083] INITIAL USE at: [ 240.997056][ T9083] lock_acquire+0x120/0x360 [ 241.003127][ T9083] _raw_spin_lock+0x2e/0x40 [ 241.009212][ T9083] evdev_handle_get_val+0x70/0x9f0 [ 241.015903][ T9083] evdev_ioctl_handler+0x1202/0x1f10 [ 241.022758][ T9083] __se_sys_ioctl+0xfc/0x170 [ 241.028916][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.034991][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.042451][ T9083] } [ 241.044953][ T9083] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 241.053116][ T9083] [ 241.053116][ T9083] the dependencies between the lock to be acquired [ 241.053126][ T9083] and SOFTIRQ-irq-unsafe lock: [ 241.066639][ T9083] -> (tasklist_lock){.+.+}-{3:3} { [ 241.071951][ T9083] HARDIRQ-ON-R at: [ 241.076104][ T9083] lock_acquire+0x120/0x360 [ 241.082613][ T9083] _raw_read_lock+0x36/0x50 [ 241.089123][ T9083] __do_wait+0xde/0x740 [ 241.095281][ T9083] do_wait+0x1f8/0x520 [ 241.101351][ T9083] kernel_wait+0xab/0x170 [ 241.107680][ T9083] call_usermodehelper_exec_work+0xbe/0x230 [ 241.115575][ T9083] process_scheduled_works+0xae1/0x17b0 [ 241.123127][ T9083] worker_thread+0x8a0/0xda0 [ 241.129726][ T9083] kthread+0x711/0x8a0 [ 241.135793][ T9083] ret_from_fork+0x3fc/0x770 [ 241.142385][ T9083] ret_from_fork_asm+0x1a/0x30 [ 241.149159][ T9083] SOFTIRQ-ON-R at: [ 241.153336][ T9083] lock_acquire+0x120/0x360 [ 241.159843][ T9083] _raw_read_lock+0x36/0x50 [ 241.166348][ T9083] __do_wait+0xde/0x740 [ 241.172503][ T9083] do_wait+0x1f8/0x520 [ 241.178572][ T9083] kernel_wait+0xab/0x170 [ 241.184904][ T9083] call_usermodehelper_exec_work+0xbe/0x230 [ 241.192802][ T9083] process_scheduled_works+0xae1/0x17b0 [ 241.200351][ T9083] worker_thread+0x8a0/0xda0 [ 241.206944][ T9083] kthread+0x711/0x8a0 [ 241.213010][ T9083] ret_from_fork+0x3fc/0x770 [ 241.219603][ T9083] ret_from_fork_asm+0x1a/0x30 [ 241.226364][ T9083] INITIAL USE at: [ 241.230433][ T9083] lock_acquire+0x120/0x360 [ 241.236853][ T9083] _raw_write_lock_irq+0xa2/0xf0 [ 241.243706][ T9083] copy_process+0x224f/0x3c00 [ 241.250303][ T9083] kernel_clone+0x224/0x7f0 [ 241.256721][ T9083] user_mode_thread+0xdd/0x140 [ 241.263396][ T9083] rest_init+0x23/0x300 [ 241.269467][ T9083] start_kernel+0x47d/0x500 [ 241.275905][ T9083] x86_64_start_reservations+0x24/0x30 [ 241.283294][ T9083] x86_64_start_kernel+0x143/0x1c0 [ 241.290334][ T9083] common_startup_64+0x13e/0x147 [ 241.297196][ T9083] INITIAL READ USE at: [ 241.301704][ T9083] lock_acquire+0x120/0x360 [ 241.308560][ T9083] _raw_read_lock+0x36/0x50 [ 241.315426][ T9083] __do_wait+0xde/0x740 [ 241.321933][ T9083] do_wait+0x1f8/0x520 [ 241.328349][ T9083] kernel_wait+0xab/0x170 [ 241.335027][ T9083] call_usermodehelper_exec_work+0xbe/0x230 [ 241.343271][ T9083] process_scheduled_works+0xae1/0x17b0 [ 241.351171][ T9083] worker_thread+0x8a0/0xda0 [ 241.358115][ T9083] kthread+0x711/0x8a0 [ 241.364550][ T9083] ret_from_fork+0x3fc/0x770 [ 241.371520][ T9083] ret_from_fork_asm+0x1a/0x30 [ 241.378641][ T9083] } [ 241.381318][ T9083] ... key at: [] tasklist_lock+0x18/0x40 [ 241.389224][ T9083] ... acquired at: [ 241.393203][ T9083] lock_acquire+0x120/0x360 [ 241.397883][ T9083] _raw_read_lock+0x36/0x50 [ 241.402585][ T9083] send_sigio+0x101/0x370 [ 241.407118][ T9083] kill_fasync+0x24d/0x4d0 [ 241.411724][ T9083] lease_break_callback+0x26/0x30 [ 241.416933][ T9083] __break_lease+0x6a2/0x1620 [ 241.421791][ T9083] do_dentry_open+0xd62/0x1970 [ 241.426734][ T9083] vfs_open+0x3b/0x340 [ 241.430983][ T9083] path_openat+0x2ee5/0x3830 [ 241.435748][ T9083] do_filp_open+0x1fa/0x410 [ 241.440422][ T9083] do_sys_openat2+0x121/0x1c0 [ 241.445284][ T9083] __x64_sys_creat+0x8f/0xc0 [ 241.450050][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.454744][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.460819][ T9083] [ 241.463143][ T9083] -> (&f_owner->lock){....}-{3:3} { [ 241.468478][ T9083] INITIAL USE at: [ 241.472478][ T9083] lock_acquire+0x120/0x360 [ 241.478739][ T9083] _raw_write_lock_irq+0xa2/0xf0 [ 241.485430][ T9083] __f_setown+0x67/0x370 [ 241.491431][ T9083] generic_setlease+0xd60/0x1240 [ 241.498133][ T9083] fcntl_setlease+0x3a2/0x4c0 [ 241.504544][ T9083] do_fcntl+0x6a9/0x1910 [ 241.510525][ T9083] __se_sys_fcntl+0xc8/0x150 [ 241.516858][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.523108][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.530757][ T9083] INITIAL READ USE at: [ 241.535195][ T9083] lock_acquire+0x120/0x360 [ 241.541891][ T9083] _raw_read_lock_irqsave+0xaf/0x100 [ 241.549360][ T9083] send_sigio+0x38/0x370 [ 241.555822][ T9083] kill_fasync+0x24d/0x4d0 [ 241.562421][ T9083] lease_break_callback+0x26/0x30 [ 241.569626][ T9083] __break_lease+0x6a2/0x1620 [ 241.576486][ T9083] do_dentry_open+0xd62/0x1970 [ 241.583438][ T9083] vfs_open+0x3b/0x340 [ 241.589686][ T9083] dentry_open+0x61/0xa0 [ 241.596106][ T9083] do_mq_open+0x59e/0x780 [ 241.602623][ T9083] __x64_sys_mq_open+0x16a/0x1c0 [ 241.609737][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.616423][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.624490][ T9083] } [ 241.627075][ T9083] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 241.636021][ T9083] ... acquired at: [ 241.639909][ T9083] lock_acquire+0x120/0x360 [ 241.644605][ T9083] _raw_read_lock_irqsave+0xaf/0x100 [ 241.650069][ T9083] send_sigio+0x38/0x370 [ 241.654494][ T9083] kill_fasync+0x24d/0x4d0 [ 241.659087][ T9083] lease_break_callback+0x26/0x30 [ 241.664303][ T9083] __break_lease+0x6a2/0x1620 [ 241.669166][ T9083] do_dentry_open+0xd62/0x1970 [ 241.674112][ T9083] vfs_open+0x3b/0x340 [ 241.678361][ T9083] dentry_open+0x61/0xa0 [ 241.682786][ T9083] do_mq_open+0x59e/0x780 [ 241.687294][ T9083] __x64_sys_mq_open+0x16a/0x1c0 [ 241.692412][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.697096][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.703168][ T9083] [ 241.705492][ T9083] -> (&new->fa_lock){....}-{3:3} { [ 241.710632][ T9083] INITIAL USE at: [ 241.714529][ T9083] lock_acquire+0x120/0x360 [ 241.720602][ T9083] _raw_write_lock_irq+0xa2/0xf0 [ 241.727109][ T9083] fasync_remove_entry+0xf1/0x1c0 [ 241.733697][ T9083] sock_fasync+0x85/0xf0 [ 241.739510][ T9083] __fput+0x89f/0xa70 [ 241.745064][ T9083] task_work_run+0x1d4/0x260 [ 241.751220][ T9083] do_exit+0x6b5/0x22e0 [ 241.756942][ T9083] do_group_exit+0x21c/0x2d0 [ 241.763102][ T9083] get_signal+0x125e/0x1310 [ 241.769179][ T9083] arch_do_signal_or_restart+0x9a/0x750 [ 241.776291][ T9083] exit_to_user_mode_loop+0x75/0x110 [ 241.783147][ T9083] do_syscall_64+0x2bd/0x3b0 [ 241.789319][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.796779][ T9083] INITIAL READ USE at: [ 241.801110][ T9083] lock_acquire+0x120/0x360 [ 241.807618][ T9083] _raw_read_lock_irqsave+0xaf/0x100 [ 241.814909][ T9083] kill_fasync+0x199/0x4d0 [ 241.821325][ T9083] lease_break_callback+0x26/0x30 [ 241.828348][ T9083] __break_lease+0x6a2/0x1620 [ 241.835029][ T9083] do_dentry_open+0xd62/0x1970 [ 241.841799][ T9083] vfs_open+0x3b/0x340 [ 241.847872][ T9083] dentry_open+0x61/0xa0 [ 241.854117][ T9083] do_mq_open+0x59e/0x780 [ 241.860454][ T9083] __x64_sys_mq_open+0x16a/0x1c0 [ 241.867394][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.873914][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.881896][ T9083] } [ 241.884393][ T9083] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 241.893077][ T9083] ... acquired at: [ 241.896876][ T9083] lock_acquire+0x120/0x360 [ 241.901562][ T9083] _raw_read_lock_irqsave+0xaf/0x100 [ 241.907025][ T9083] kill_fasync+0x199/0x4d0 [ 241.911614][ T9083] evdev_pass_values+0x627/0xbd0 [ 241.916724][ T9083] evdev_events+0x1e6/0x340 [ 241.921410][ T9083] input_pass_values+0x288/0x890 [ 241.926522][ T9083] input_event_dispose+0x330/0x6b0 [ 241.931820][ T9083] input_inject_event+0x1fe/0x320 [ 241.937026][ T9083] evdev_write+0x2fc/0x480 [ 241.941623][ T9083] vfs_write+0x27b/0xa90 [ 241.946038][ T9083] ksys_write+0x145/0x250 [ 241.950548][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.955229][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.961302][ T9083] [ 241.963628][ T9083] [ 241.963628][ T9083] stack backtrace: [ 241.969522][ T9083] CPU: 1 UID: 0 PID: 9083 Comm: syz.4.1194 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 241.969541][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.969550][ T9083] Call Trace: [ 241.969556][ T9083] [ 241.969563][ T9083] dump_stack_lvl+0x189/0x250 [ 241.969587][ T9083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.969607][ T9083] ? __pfx__printk+0x10/0x10 [ 241.969625][ T9083] validate_chain+0x1f05/0x2140 [ 241.969653][ T9083] __lock_acquire+0xab9/0xd20 [ 241.969673][ T9083] ? kill_fasync+0x199/0x4d0 [ 241.969685][ T9083] lock_acquire+0x120/0x360 [ 241.969703][ T9083] ? kill_fasync+0x199/0x4d0 [ 241.969719][ T9083] _raw_read_lock_irqsave+0xaf/0x100 [ 241.969738][ T9083] ? kill_fasync+0x199/0x4d0 [ 241.969750][ T9083] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 241.969767][ T9083] ? do_raw_spin_lock+0x121/0x290 [ 241.969784][ T9083] kill_fasync+0x199/0x4d0 [ 241.969796][ T9083] ? kill_fasync+0x53/0x4d0 [ 241.969809][ T9083] evdev_pass_values+0x627/0xbd0 [ 241.969826][ T9083] ? evdev_pass_values+0x641/0xbd0 [ 241.969842][ T9083] evdev_events+0x1e6/0x340 [ 241.969855][ T9083] ? evdev_events+0x79/0x340 [ 241.969868][ T9083] ? input_pass_values+0x8d/0x890 [ 241.969880][ T9083] input_pass_values+0x288/0x890 [ 241.969896][ T9083] ? input_handle_event+0x70c/0xf30 [ 241.969916][ T9083] input_event_dispose+0x330/0x6b0 [ 241.969936][ T9083] input_inject_event+0x1fe/0x320 [ 241.969954][ T9083] ? input_inject_event+0xbc/0x320 [ 241.969974][ T9083] evdev_write+0x2fc/0x480 [ 241.969990][ T9083] ? __pfx_evdev_write+0x10/0x10 [ 241.970004][ T9083] ? bpf_lsm_file_permission+0x9/0x20 [ 241.970023][ T9083] ? security_file_permission+0x75/0x290 [ 241.970041][ T9083] ? rw_verify_area+0x258/0x650 [ 241.970056][ T9083] ? __pfx_evdev_write+0x10/0x10 [ 241.970070][ T9083] vfs_write+0x27b/0xa90 [ 241.970087][ T9083] ? __pfx_vfs_write+0x10/0x10 [ 241.970103][ T9083] ? __fget_files+0x2a/0x420 [ 241.970122][ T9083] ? __fget_files+0x2a/0x420 [ 241.970139][ T9083] ? __fget_files+0x3a0/0x420 [ 241.970157][ T9083] ? __fget_files+0x2a/0x420 [ 241.970177][ T9083] ksys_write+0x145/0x250 [ 241.970194][ T9083] ? __pfx_ksys_write+0x10/0x10 [ 241.970208][ T9083] ? rcu_is_watching+0x15/0xb0 [ 241.970229][ T9083] ? do_syscall_64+0xbe/0x3b0 [ 241.970250][ T9083] do_syscall_64+0xfa/0x3b0 [ 241.970269][ T9083] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.970287][ T9083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.970302][ T9083] ? clear_bhb_loop+0x60/0xb0 [ 241.970318][ T9083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.970331][ T9083] RIP: 0033:0x7f7f7b58e929 [ 241.970346][ T9083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.970358][ T9083] RSP: 002b:00007f7f7c45c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.970375][ T9083] RAX: ffffffffffffffda RBX: 00007f7f7b7b5fa0 RCX: 00007f7f7b58e929 [ 241.970385][ T9083] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 241.970395][ T9083] RBP: 00007f7f7b610b39 R08: 0000000000000000 R09: 0000000000000000 [ 241.970411][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.970419][ T9083] R13: 0000000000000000 R14: 00007f7f7b7b5fa0 R15: 00007ffe395499c8 [ 241.970435][ T9083] [ 242.543167][ T43] usb 2-1: USB disconnect, device number 13