last executing test programs: 3m22.875603041s ago: executing program 0 (id=4344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000003f00) 3m22.500206223s ago: executing program 0 (id=4349): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 3m22.33277214s ago: executing program 0 (id=4351): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cgroups\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3m21.962699084s ago: executing program 0 (id=4353): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x82) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) 3m21.723820991s ago: executing program 0 (id=4356): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100"], 0x4c}}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180040004"], 0x28}}, 0x0) 3m21.560026879s ago: executing program 0 (id=4358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000440)='rpc_clnt_new\x00', r0, 0x0, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3m6.441725917s ago: executing program 32 (id=4358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000440)='rpc_clnt_new\x00', r0, 0x0, 0x1}, 0x18) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m29.875353087s ago: executing program 3 (id=4900): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 2m29.515879508s ago: executing program 3 (id=4895): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x5) 2m28.431876706s ago: executing program 3 (id=4904): r0 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x35a, 0x0, 0x20000002, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2m27.503554145s ago: executing program 3 (id=4909): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) sendmmsg$alg(r1, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m27.269654503s ago: executing program 3 (id=4913): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000580)={0x40, 0xf, 0x2, "b88c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x40, 0x1, 0x2, "a38d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m26.481505939s ago: executing program 3 (id=4920): r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) 2m18.967395464s ago: executing program 5 (id=5007): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m18.775929952s ago: executing program 5 (id=5009): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a0005", 0x3b, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180"], 0x4c}}, 0x0) 2m18.647861704s ago: executing program 5 (id=5010): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$BLKROSET(r0, 0x125d, 0x0) 2m18.415016374s ago: executing program 5 (id=5011): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) 2m18.071951631s ago: executing program 5 (id=5013): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 2m17.767368265s ago: executing program 5 (id=5014): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m11.403320237s ago: executing program 33 (id=4920): r0 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x5) 2m2.688488435s ago: executing program 34 (id=5014): r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) r1 = socket$rxrpc(0x21, 0x2, 0xa) close_range(r0, r1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m7.01603714s ago: executing program 4 (id=5668): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4, 0x4031, 0xffffffffffffffff, 0xdd762000) 1m6.813260868s ago: executing program 4 (id=5672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x500, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0xfffe, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m6.307944077s ago: executing program 4 (id=5681): syz_io_uring_setup(0x495, &(0x7f0000000540)={0x0, 0xe140, 0x0, 0x0, 0x288}, &(0x7f0000000340), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x3, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) 1m6.218542905s ago: executing program 4 (id=5683): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1m5.200387327s ago: executing program 4 (id=5692): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.761092559s ago: executing program 4 (id=5695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 49.403245544s ago: executing program 35 (id=5695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 5.978534357s ago: executing program 2 (id=6314): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0xf542}, {r0, 0x1141}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 5.557878794s ago: executing program 1 (id=6318): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) 5.304453854s ago: executing program 1 (id=6321): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@remote, @multicast1, 0x0, "2634784b05261d78b0920120000000000000000000002000", 0x0, 0x0, 0x6, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@loopback, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500", 0x8000000, 0x0, 0x0, 0x21}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) 5.048019887s ago: executing program 1 (id=6323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000640)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000004d564b0000000001"]) 4.991766936s ago: executing program 2 (id=6324): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x8001, 0x0, 0xf, 0xfffffff7}}}}]}, 0x4c}}, 0x44000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 4.764014006s ago: executing program 2 (id=6327): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) 4.687460398s ago: executing program 2 (id=6328): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r2, r1, 0x0, 0xe9e) 4.553535826s ago: executing program 1 (id=6332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 4.404973743s ago: executing program 2 (id=6335): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 4.239032413s ago: executing program 2 (id=6337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.719697384s ago: executing program 7 (id=6346): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x167000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) 3.534950874s ago: executing program 1 (id=6348): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x4, 0x0}]}) 3.514042978s ago: executing program 7 (id=6350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.872944008s ago: executing program 7 (id=6356): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a01004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 2.805506511s ago: executing program 7 (id=6357): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) 1.89796845s ago: executing program 7 (id=6360): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 1.795955748s ago: executing program 8 (id=6362): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) r1 = socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000a00)=[{r0, 0x8200}, {r1, 0x4285}], 0x2, 0x0, 0x0, 0x0) 1.506303471s ago: executing program 6 (id=6364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000600000023"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000300), 0x55, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.370082261s ago: executing program 6 (id=6365): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) 1.215962747s ago: executing program 1 (id=6366): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0xffffffff) 1.155845358s ago: executing program 6 (id=6367): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, 0x0) 1.10719658s ago: executing program 7 (id=6368): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) 800.774323ms ago: executing program 8 (id=6369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 653.907228ms ago: executing program 8 (id=6370): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x8100, &(0x7f00000001c0)={0x7, 0x9, 0x20000, {r0}}, 0x20) 452.857808ms ago: executing program 6 (id=6371): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591c28e8b83", 0x6) 407.883423ms ago: executing program 8 (id=6372): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 253.923342ms ago: executing program 6 (id=6373): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 189.05297ms ago: executing program 8 (id=6374): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x4, 0x8001, 0xffffffff, 0x107, {0x9, 0x8, 0x9, 0x9, 0x99ae, 0x704d, 0x0, 0x5, 0x1, 0x0, 0x5, 0x9, 0x8000, 0x10000, "8e7fec3333cea3b4fbc7d3409b8c18fbc964362cb619425ba92664d82f7e2418"}}) 96.27116ms ago: executing program 8 (id=6375): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 0s ago: executing program 6 (id=6376): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) kernel console output (not intermixed with test programs): gh-speed USB device number 41 using dummy_hcd [ 531.481142][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 531.481646][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 531.489078][ T5930] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 531.489094][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.489104][ T5930] usb 2-1: Product: syz [ 531.489111][ T5930] usb 2-1: Manufacturer: syz [ 531.489118][ T5930] usb 2-1: SerialNumber: syz [ 531.543501][ T5930] usb 2-1: config 0 descriptor?? [ 531.557205][ T5930] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 532.309425][T17579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.367949][ T5930] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 532.384400][ T5930] usb 2-1: USB disconnect, device number 41 [ 532.490807][ T5889] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 532.510725][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 532.640616][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 532.645103][ T5889] usb 5-1: config 0 has no interfaces? [ 532.648229][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 532.648255][ T5889] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 532.648273][ T5889] usb 5-1: Product: syz [ 532.648286][ T5889] usb 5-1: Manufacturer: syz [ 532.648298][ T5889] usb 5-1: SerialNumber: syz [ 532.658993][ T5889] usb 5-1: config 0 descriptor?? [ 532.897393][ T5889] usb 5-1: USB disconnect, device number 44 [ 533.550136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 534.589562][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.432054][T17657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 535.617567][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.629046][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 535.694026][T17666] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 535.694059][T17666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.885091][T17675] netlink: 520 bytes leftover after parsing attributes in process `syz.4.4448'. [ 536.098977][T12988] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 536.251137][T12988] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.251166][T12988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.257765][T12988] usb 3-1: config 0 descriptor?? [ 536.289707][T12988] cp210x 3-1:0.0: cp210x converter detected [ 536.668630][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 536.706456][T12988] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 536.848265][T17702] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4462'. [ 536.948773][T12988] usb 3-1: cp210x converter now attached to ttyUSB0 [ 537.125058][T12988] usb 3-1: USB disconnect, device number 40 [ 537.129392][T12988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 537.248581][T12988] cp210x 3-1:0.0: device disconnected [ 537.708021][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.373316][T17727] syzkaller1: entered promiscuous mode [ 538.373344][T17727] syzkaller1: entered allmulticast mode [ 538.757489][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 539.787001][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 540.827639][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.793773][T17772] vivid-000: disconnect [ 541.865943][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 541.912795][T17767] vivid-000: reconnect [ 542.138613][T17777] bridge0: port 3(gretap0) entered blocking state [ 542.138734][T17777] bridge0: port 3(gretap0) entered disabled state [ 542.138957][T17777] gretap0: entered allmulticast mode [ 542.144765][T17779] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4493'. [ 542.177777][T17777] gretap0: entered promiscuous mode [ 542.197648][T17777] gretap0: left allmulticast mode [ 542.197677][T17777] gretap0: left promiscuous mode [ 542.198144][T17777] bridge0: port 3(gretap0) entered disabled state [ 542.905415][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 543.556414][T17109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 543.573429][T17109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.577205][T17109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.583636][T17109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.591659][T17109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.944910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 544.012558][T17816] loop7: detected capacity change from 0 to 6 [ 544.018761][T17816] loop7: [POWERTEC] p1 [ 544.020937][T17816] loop7: p1 start 1680801792 is beyond EOD, truncated [ 544.047105][T17814] geneve2: entered promiscuous mode [ 544.047138][T17814] geneve2: entered allmulticast mode [ 544.716488][T12988] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 544.718439][T17802] chnl_net:caif_netlink_parms(): no params data found [ 544.874509][T12988] usb 3-1: Using ep0 maxpacket: 16 [ 544.876998][T12988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.877026][T12988] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.877047][T12988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 544.877079][T12988] usb 3-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 544.877099][T12988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.958612][T12988] usb 3-1: config 0 descriptor?? [ 544.984442][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 545.427201][T12988] apple 0003:05AC:0247.0033: fixing up Magic Keyboard JIS report descriptor [ 545.447595][T12988] apple 0003:05AC:0247.0033: unexpected long global item [ 545.449604][T12988] apple 0003:05AC:0247.0033: parse failed [ 545.449709][T12988] apple 0003:05AC:0247.0033: probe with driver apple failed with error -22 [ 545.560975][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.562393][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.562631][T17802] bridge_slave_0: entered allmulticast mode [ 545.572527][T17802] bridge_slave_0: entered promiscuous mode [ 545.582835][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.584357][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.584590][T17802] bridge_slave_1: entered allmulticast mode [ 545.591966][T17802] bridge_slave_1: entered promiscuous mode [ 545.662057][ T5930] usb 3-1: USB disconnect, device number 41 [ 545.714239][ T5853] Bluetooth: hci5: command tx timeout [ 545.832659][T17802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.857636][T17802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.023894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 546.084241][ T5930] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 546.141640][T17802] team0: Port device team_slave_0 added [ 546.161979][T17802] team0: Port device team_slave_1 added [ 546.235701][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 546.238520][ T5930] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 546.238544][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.238562][ T5930] usb 5-1: config 0 has no interface number 0 [ 546.242067][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 546.242092][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.242111][ T5930] usb 5-1: Product: syz [ 546.242122][ T5930] usb 5-1: Manufacturer: syz [ 546.242135][ T5930] usb 5-1: SerialNumber: syz [ 546.305462][ T5930] usb 5-1: config 0 descriptor?? [ 546.331689][ T5930] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 546.331720][ T5930] usb 5-1: No valid video chain found. [ 546.519089][T12988] usb 5-1: USB disconnect, device number 45 [ 546.658729][T17802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.658745][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.658769][T17802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.661207][T17802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.661221][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.661244][T17802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.063320][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 547.412370][T17802] hsr_slave_0: entered promiscuous mode [ 547.429607][T17802] hsr_slave_1: entered promiscuous mode [ 547.439545][T17802] debugfs: 'hsr0' already exists in 'hsr' [ 547.439570][T17802] Cannot create hsr debugfs directory [ 547.793040][ T5853] Bluetooth: hci5: command tx timeout [ 548.102827][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 548.224368][T17900] netlink: 83 bytes leftover after parsing attributes in process `syz.3.4536'. [ 549.142296][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 549.872228][ T5853] Bluetooth: hci5: command tx timeout [ 549.896152][T17802] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 549.960297][T17802] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 550.020690][T17802] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 550.091018][T17802] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 550.181786][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 550.634872][T17802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.695371][T17802] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.734256][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.734394][ T7814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.807409][ T7790] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.807604][ T7790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.162816][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'. [ 551.162844][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4562'. [ 551.201519][T17970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4562'. [ 551.201548][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4562'. [ 551.221309][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 551.801693][T17802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.941359][ T5853] Bluetooth: hci5: command tx timeout [ 552.260759][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.129824][T17802] veth0_vlan: entered promiscuous mode [ 553.178362][T17802] veth1_vlan: entered promiscuous mode [ 553.300212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 553.383876][T17802] veth0_macvtap: entered promiscuous mode [ 553.402824][T17802] veth1_macvtap: entered promiscuous mode [ 553.431546][T18037] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 553.431589][T18037] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 553.455123][T18037] overlayfs: conflicting lowerdir path [ 553.528371][T17802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.587507][T17802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.634365][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.637251][ T1015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.637982][ T1015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.638200][ T1015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.690136][ T5930] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 553.841485][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 553.897564][ T5930] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 553.897592][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.897610][ T5930] usb 3-1: Product: syz [ 553.897623][ T5930] usb 3-1: Manufacturer: syz [ 553.897635][ T5930] usb 3-1: SerialNumber: syz [ 553.978686][ T5930] r8152-cfgselector 3-1: Unknown version 0x0000 [ 553.978712][ T5930] r8152-cfgselector 3-1: config 0 descriptor?? [ 554.063762][ T7825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.063783][ T7825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.167916][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.167938][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.339779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 554.405768][ T5930] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 554.623899][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.779561][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 554.938539][ T31] usb 6-1: config 0 has no interfaces? [ 554.938575][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.938596][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.955248][ T31] usb 6-1: config 0 descriptor?? [ 555.379154][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 555.405102][T18059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.405521][T18059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.407312][T12990] usb 6-1: USB disconnect, device number 2 [ 555.558720][T18085] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 556.418738][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 556.560796][T18116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.560813][T18116] IPv6: NLM_F_CREATE should be set when creating new route [ 557.096171][T18132] sctp: [Deprecated]: syz.1.4625 (pid 18132) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.096171][T18132] Use struct sctp_sack_info instead [ 557.458229][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 557.693752][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.945868][T18158] syzkaller1: entered promiscuous mode [ 557.945899][T18158] syzkaller1: entered allmulticast mode [ 558.497611][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.671885][ T990] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 558.839736][ T990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 558.839766][ T990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 558.842982][ T990] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 558.843007][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.843025][ T990] usb 5-1: Product: syz [ 558.843037][ T990] usb 5-1: Manufacturer: syz [ 558.843050][ T990] usb 5-1: SerialNumber: syz [ 558.852984][ T990] usb 5-1: config 0 descriptor?? [ 558.854030][T18182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.854208][T18182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.007428][T12993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 559.100487][T18182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.100665][T18182] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 559.157409][T12993] usb 6-1: Using ep0 maxpacket: 32 [ 559.161554][T12993] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 559.161579][T12993] usb 6-1: config 0 has no interface number 0 [ 559.161628][T12993] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.161660][T12993] usb 6-1: config 0 interface 85 has no altsetting 0 [ 559.166472][T12993] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 559.166499][T12993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.166517][T12993] usb 6-1: Product: syz [ 559.166530][T12993] usb 6-1: Manufacturer: syz [ 559.166543][T12993] usb 6-1: SerialNumber: syz [ 559.249326][T12993] usb 6-1: config 0 descriptor?? [ 559.509129][ T990] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 559.537085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 559.872103][T12993] appletouch 6-1:0.85: Geyser mode initialized. [ 559.885822][T12993] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input53 [ 559.913497][ T990] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 559.944639][ T990] usb 5-1: USB disconnect, device number 46 [ 560.084561][T12993] usb 6-1: USB disconnect, device number 3 [ 560.088710][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 560.211538][T12993] appletouch 6-1:0.85: input: appletouch disconnected [ 560.407958][T18221] input: syz0 as /devices/virtual/input/input54 [ 560.576615][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 560.688330][T12990] kernel write not supported for file /ppp (pid: 12990 comm: kworker/0:11) [ 560.749618][T18234] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4670'. [ 560.835538][T12990] IPVS: starting estimator thread 0... [ 560.926846][T18237] IPVS: using max 7 ests per chain, 16800 per kthread [ 561.606122][ T5930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 561.616214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 561.760251][ T5930] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.760276][ T5930] usb 6-1: config 0 has no interface number 0 [ 561.760321][ T5930] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.760344][ T5930] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.760380][ T5930] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 561.760399][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.778027][ T5930] usb 6-1: config 0 descriptor?? [ 562.209864][ T5930] prodikeys 0003:041E:2801.0034: unknown main item tag 0x0 [ 562.209899][ T5930] prodikeys 0003:041E:2801.0034: unknown main item tag 0x0 [ 562.217467][ T5930] prodikeys 0003:041E:2801.0034: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 562.221900][ T5930] hid_prodikeys: hid-prodikeys: failed to find output report [ 562.221900][ T5930] [ 562.407777][ T5930] usb 6-1: USB disconnect, device number 4 [ 562.655528][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 562.851651][T18305] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4704'. [ 562.904683][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.015459][T12993] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 563.169101][T12993] usb 2-1: Using ep0 maxpacket: 8 [ 563.173388][T12993] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.173454][T12993] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 563.173477][T12993] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 563.219869][T12993] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.219897][T12993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.219914][T12993] usb 2-1: Product: syz [ 563.219926][T12993] usb 2-1: Manufacturer: syz [ 563.219939][T12993] usb 2-1: SerialNumber: syz [ 563.536092][ T5930] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 563.688780][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 563.691348][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.691386][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 563.691408][ T5930] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 563.691447][ T5930] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 563.691467][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.695095][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 563.707132][ T5930] usb 5-1: config 0 descriptor?? [ 564.122059][T18323] overlayfs: failed to clone lowerpath [ 564.227721][ T5930] nintendo 0003:057E:2019.0035: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.4-1/input0 [ 564.311462][T12993] cdc_ncm 2-1:1.0: bind() failure [ 564.332091][T12993] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 564.354005][T12993] usb 2-1: USB disconnect, device number 42 [ 564.435319][ T990] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 564.607451][ T990] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.607499][ T990] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 564.614109][ T990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.614135][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.614152][ T990] usb 3-1: Product: syz [ 564.614165][ T990] usb 3-1: Manufacturer: syz [ 564.614177][ T990] usb 3-1: SerialNumber: syz [ 564.623865][ T5930] nintendo 0003:057E:2019.0035: Failed to get joycon info; ret=-71 [ 564.623887][ T5930] nintendo 0003:057E:2019.0035: Failed to retrieve controller info; ret=-71 [ 564.623903][ T5930] nintendo 0003:057E:2019.0035: Failed to initialize controller; ret=-71 [ 564.638689][ T5930] nintendo 0003:057E:2019.0035: probe - fail = -71 [ 564.639237][ T5930] nintendo 0003:057E:2019.0035: probe with driver nintendo failed with error -71 [ 564.666309][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.697797][ T5930] usb 5-1: USB disconnect, device number 47 [ 564.734501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 564.902004][T18327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.902445][T18327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.960892][ T990] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 565.014473][ T990] usb 3-1: USB disconnect, device number 43 [ 565.524328][ T990] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 565.578511][T18360] overlayfs: upper fs does not support file handles, falling back to index=off. [ 565.578522][T18360] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 565.578531][T18360] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 565.677453][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 565.680621][ T990] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 565.680646][ T990] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 565.680698][ T990] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.680718][ T990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 565.680739][ T990] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 565.680761][ T990] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.680798][ T990] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 565.680819][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.774019][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 565.905814][ T990] usb 3-1: usb_control_msg returned -32 [ 565.905857][ T990] usbtmc 3-1:16.0: can't read capabilities [ 565.939601][ T990] usb 3-1: USB disconnect, device number 44 [ 566.813472][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.852921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.275994][T18438] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 568.892431][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.372370][T12988] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 569.372563][T12993] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 569.532401][T12988] usb 3-1: Using ep0 maxpacket: 8 [ 569.532568][T12993] usb 2-1: Using ep0 maxpacket: 32 [ 569.535859][T12988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 569.535907][T12988] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 569.535984][T12988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.590749][T12993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 569.600109][T12993] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 569.600137][T12993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.600153][T12993] usb 2-1: Product: syz [ 569.600165][T12993] usb 2-1: Manufacturer: syz [ 569.600178][T12993] usb 2-1: SerialNumber: syz [ 569.647273][T12988] usb 3-1: config 0 descriptor?? [ 569.664211][T12993] usb 2-1: config 0 descriptor?? [ 569.897073][T12988] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 569.932322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.126658][T12993] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 570.290039][ T990] usb 3-1: USB disconnect, device number 45 [ 570.538723][T18498] input: syz1 as /devices/virtual/input/input55 [ 570.755230][T12993] usb 2-1: USB disconnect, device number 43 [ 570.820463][T18505] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4787'. [ 570.971444][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.262903][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.013242][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.143650][T12996] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 572.311455][T12996] usb 5-1: config 0 has no interfaces? [ 572.315960][T12996] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 572.315985][T12996] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 572.316003][T12996] usb 5-1: Product: syz [ 572.316016][T12996] usb 5-1: Manufacturer: syz [ 572.323644][T12996] usb 5-1: config 0 descriptor?? [ 572.561473][T12993] usb 5-1: USB disconnect, device number 48 [ 572.950238][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4817'. [ 573.050375][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.150742][T18578] netlink: 212164 bytes leftover after parsing attributes in process `syz.2.4819'. [ 573.369901][T18584] 9pnet_fd: Insufficient options for proto=fd [ 573.839091][T18597] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 574.089812][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 574.200536][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4832'. [ 574.564021][T18618] fuse: Bad value for 'fd' [ 574.749591][ T5930] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 574.899500][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 574.901892][ T5930] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 574.901915][ T5930] usb 5-1: config 179 has no interface number 0 [ 574.901964][ T5930] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 574.901988][ T5930] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 574.902012][ T5930] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.902036][ T5930] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 574.902059][ T5930] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 574.902098][ T5930] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 574.902118][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.912420][T18612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 575.129306][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.439061][T12988] usb 5-1: USB disconnect, device number 49 [ 575.440161][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 575.440237][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 575.479397][T18634] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 575.975146][T18656] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 576.168777][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.237776][T18664] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 577.208332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 577.397274][T18694] loop1: detected capacity change from 0 to 7 [ 577.444659][T18694] Dev loop1: unable to read RDB block 7 [ 577.444680][T18694] loop1: AHDI p4 [ 577.444700][T18694] loop1: partition table partially beyond EOD, truncated [ 578.035687][ T37] kauditd_printk_skb: 42 callbacks suppressed [ 578.035706][ T37] audit: type=1400 audit(1756235933.758:2729): lsm=SMACK fn=smack_inode_setattr action=denied subject="w" object="_" requested=w pid=18700 comm="syz.2.4873" name="982" dev="tmpfs" ino=4990 [ 578.249228][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.509387][T18714] loop2: detected capacity change from 0 to 7 [ 578.510524][T18714] Dev loop2: unable to read RDB block 7 [ 578.510552][T18714] loop2: unable to read partition table [ 578.510684][T18714] loop2: partition table beyond EOD, truncated [ 578.510694][T18714] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 578.709423][T18716] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4880'. [ 578.768916][T18718] netlink: 'syz.5.4881': attribute type 2 has an invalid length. [ 578.815598][T18720] loop2: detected capacity change from 0 to 7 [ 578.826163][T18720] Dev loop2: unable to read RDB block 7 [ 578.826222][T18720] loop2: unable to read partition table [ 578.826444][T18720] loop2: partition table beyond EOD, truncated [ 578.826461][T18720] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 579.277290][T12988] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 579.287237][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 579.427345][T12988] usb 3-1: Using ep0 maxpacket: 8 [ 579.453744][T12988] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 579.453773][T12988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.453791][T12988] usb 3-1: Product: syz [ 579.453803][T12988] usb 3-1: Manufacturer: syz [ 579.453816][T12988] usb 3-1: SerialNumber: syz [ 579.489471][T12988] usb 3-1: config 0 descriptor?? [ 579.506514][T12988] gspca_main: sq930x-2.14.0 probing 2770:930c [ 579.836771][ T37] audit: type=1326 audit(1756235935.559:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18746 comm="syz.5.4894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f368b4bebe9 code=0x0 [ 580.173795][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.326690][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.576662][T12988] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 580.576767][T12988] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 580.586008][T12988] usb 3-1: USB disconnect, device number 46 [ 581.322599][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.366167][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.035991][ T5930] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 582.185822][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 582.202654][ T5930] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 582.202682][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.202700][ T5930] usb 3-1: Product: syz [ 582.202713][ T5930] usb 3-1: Manufacturer: syz [ 582.202725][ T5930] usb 3-1: SerialNumber: syz [ 582.239865][ T5930] usb 3-1: config 0 descriptor?? [ 582.260088][ T5930] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 582.405647][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.086475][ T5930] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 583.087017][ T5930] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 583.113561][ T5930] usb 3-1: USB disconnect, device number 47 [ 583.445148][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.178536][T18863] netlink: 'syz.1.4936': attribute type 25 has an invalid length. [ 584.178557][T18863] netlink: 'syz.1.4936': attribute type 7 has an invalid length. [ 584.407834][T18869] program syz.1.4939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.484664][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.977645][T18883] program syz.2.4946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 585.348945][T18890] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 585.524098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.424859][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4958'. [ 586.564938][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 587.285110][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4964'. [ 587.606988][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.023865][ T5853] Bluetooth: hci2: Invalid handle: 0xffff > 0x0eff [ 588.027394][T18952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4976'. [ 588.030322][T18952] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4976'. [ 588.155351][T18956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4980'. [ 588.412897][T18967] tipc: Enabling of bearer rejected, failed to enable media [ 588.642548][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.060344][T18996] batadv_slave_1: entered promiscuous mode [ 589.061967][T18995] batadv_slave_1: left promiscuous mode [ 589.440323][ T5930] hid-generic 0000:0D17:0000.0036: unknown main item tag 0x0 [ 589.440358][ T5930] hid-generic 0000:0D17:0000.0036: unknown main item tag 0x0 [ 589.472480][ T5930] hid-generic 0000:0D17:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz1 [ 589.682026][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 589.722066][ T5930] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 589.879850][ T5930] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 589.879878][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.879896][ T5930] usb 2-1: Product: syz [ 589.879909][ T5930] usb 2-1: Manufacturer: syz [ 589.879922][ T5930] usb 2-1: SerialNumber: syz [ 589.891101][ T5930] usb 2-1: config 0 descriptor?? [ 590.212765][T19021] input: syz0 as /devices/virtual/input/input56 [ 590.721521][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.944647][ T5930] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 590.944909][ T5930] asix 2-1:0.0: probe with driver asix failed with error -71 [ 590.959242][ T5930] usb 2-1: USB disconnect, device number 44 [ 591.761012][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.352467][T19068] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5025'. [ 592.352502][T19068] netlink: 'syz.2.5025': attribute type 5 has an invalid length. [ 592.800491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.908894][T19082] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 592.909401][T12993] IPVS: starting estimator thread 0... [ 593.000760][T19086] IPVS: using max 7 ests per chain, 16800 per kthread [ 593.770585][T12993] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 593.839947][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 593.923616][T12993] usb 3-1: Using ep0 maxpacket: 32 [ 593.926217][T12993] usb 3-1: config index 0 descriptor too short (expected 95, got 59) [ 593.926240][T12993] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 593.926256][T12993] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 593.926272][T12993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.929450][T12993] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 593.929474][T12993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.929492][T12993] usb 3-1: Product: syz [ 593.929504][T12993] usb 3-1: Manufacturer: syz [ 593.929517][T12993] usb 3-1: SerialNumber: syz [ 593.950059][ T5930] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 594.170013][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 594.172639][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 594.172668][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.172691][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.172711][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.172750][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.172769][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.229560][T19100] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 594.254397][T12993] usb 3-1: 0:2 : does not exist [ 594.273245][T12993] usb 3-1: USB disconnect, device number 48 [ 594.441841][ T5930] usb 5-1: GET_CAPABILITIES returned 0 [ 594.441887][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 594.657412][T12993] usb 5-1: USB disconnect, device number 50 [ 594.879481][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.509327][ T990] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 595.700053][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.700086][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.700123][ T990] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 595.700144][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.714191][ T990] usb 5-1: config 0 descriptor?? [ 595.918966][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.161621][ T990] keytouch 0003:0926:3333.0037: fixing up Keytouch IEC report descriptor [ 596.182153][ T990] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0037/input/input57 [ 596.397566][ T990] keytouch 0003:0926:3333.0037: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 596.411830][ T990] usb 5-1: USB disconnect, device number 51 [ 596.578767][ T5930] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 596.741247][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.741271][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.742553][ T5930] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.742577][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.742594][ T5930] usb 3-1: SerialNumber: syz [ 596.958393][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.978439][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 596.998157][ T5930] usb 3-1: 0:2 : does not exist [ 597.035106][ T5930] usb 3-1: USB disconnect, device number 49 [ 597.123417][T19151] Invalid logical block size (3) [ 597.128297][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 597.130887][ T31] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 597.130910][ T31] usb 2-1: config 0 has no interface number 0 [ 597.135195][ T31] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 597.135220][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.135238][ T31] usb 2-1: Product: syz [ 597.135251][ T31] usb 2-1: Manufacturer: syz [ 597.135263][ T31] usb 2-1: SerialNumber: syz [ 597.143684][ T31] usb 2-1: config 0 descriptor?? [ 597.368970][ T31] kaweth 2-1:0.235: Firmware present in device. [ 597.514564][ C1] vkms_vblank_simulate: vblank timer overrun [ 597.559652][ T31] kaweth 2-1:0.235: Statistics collection: 0 [ 597.559672][ T31] kaweth 2-1:0.235: Multicast filter limit: 0 [ 597.559685][ T31] kaweth 2-1:0.235: MTU: 0 [ 597.559697][ T31] kaweth 2-1:0.235: Read MAC address 00:00:00:00:00:00 [ 597.963841][ T31] kaweth 2-1:0.235: Error setting SOFS wait [ 597.964126][ T31] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 597.985537][ T31] usb 2-1: USB disconnect, device number 45 [ 597.997860][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.730837][T19173] batadv_slave_1: entered promiscuous mode [ 598.752180][T19170] batadv_slave_1: left promiscuous mode [ 598.753578][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 598.770108][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 598.773521][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 598.775440][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 598.776227][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 599.030135][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.037374][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.086841][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 600.157570][T19174] chnl_net:caif_netlink_parms(): no params data found [ 600.778955][T19174] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.779189][T19174] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.779464][T19174] bridge_slave_0: entered allmulticast mode [ 600.812385][T19174] bridge_slave_0: entered promiscuous mode [ 600.827653][T19174] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.850011][T19174] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.850288][T19174] bridge_slave_1: entered allmulticast mode [ 600.868176][T19174] bridge_slave_1: entered promiscuous mode [ 600.876712][ T5853] Bluetooth: hci6: command tx timeout [ 601.090595][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5090'. [ 601.090620][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5090'. [ 601.116314][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.122436][T19174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.161824][T19174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.539887][T19174] team0: Port device team_slave_0 added [ 601.543547][T19174] team0: Port device team_slave_1 added [ 601.798207][T19174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.798218][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.798232][T19174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.799929][T19174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.799938][T19174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.799953][T19174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.057792][T19174] hsr_slave_0: entered promiscuous mode [ 602.059311][T19174] hsr_slave_1: entered promiscuous mode [ 602.060311][T19174] debugfs: 'hsr0' already exists in 'hsr' [ 602.060344][T19174] Cannot create hsr debugfs directory [ 602.169140][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.944377][T19265] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 602.957763][ T5853] Bluetooth: hci6: command tx timeout [ 603.043209][T19174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 603.110803][T19174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 603.164952][T19174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 603.195322][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 603.232600][T19174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 603.513037][T19285] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5115'. [ 603.536939][T19287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5116'. [ 603.537048][T19287] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5116'. [ 603.828743][T19296] devpts: Invalid uid '0x00000000ffffffff' [ 604.009915][T19174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.083140][T19174] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.118146][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.119017][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.167157][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.168714][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.234768][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 604.935047][T19174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.034726][ T5853] Bluetooth: hci6: command tx timeout [ 605.274321][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.944939][T19174] veth0_vlan: entered promiscuous mode [ 605.977580][T19174] veth1_vlan: entered promiscuous mode [ 606.067449][T19174] veth0_macvtap: entered promiscuous mode [ 606.073185][T19174] veth1_macvtap: entered promiscuous mode [ 606.122864][T19174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.147480][T19174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.164387][ T70] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.165661][ T70] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.166147][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.173996][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.320071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.911979][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.970538][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.970560][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.063416][ T7817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.063436][ T7817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.118365][ T5853] Bluetooth: hci6: command tx timeout [ 607.353286][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.569658][ T37] audit: type=1326 audit(1756235963.313:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19362 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870ce1ebe9 code=0x7ffc0000 [ 607.569933][ T37] audit: type=1326 audit(1756235963.313:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19362 comm="syz.4.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870ce1ebe9 code=0x7ffc0000 [ 608.145636][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 608.172482][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 608.181002][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 608.182410][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 608.198383][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 608.402659][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.572713][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 608.722602][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 608.725125][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.725182][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.725207][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 608.725233][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 608.742557][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 608.742576][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 608.742586][ T31] usb 2-1: SerialNumber: syz [ 608.844147][ T31] hub 2-1:1.0: bad descriptor, ignoring hub [ 608.844187][ T31] hub 2-1:1.0: probe with driver hub failed with error -5 [ 608.845708][ T31] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 609.282789][T19371] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11 [ 609.396363][T12993] usb 2-1: USB disconnect, device number 46 [ 609.436614][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 609.688586][T19372] chnl_net:caif_netlink_parms(): no params data found [ 609.803567][T19401] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 609.803663][T19399] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 610.009432][ T37] audit: type=1326 audit(1756235965.754:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19406 comm="syz.6.5157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8faa9ebe9 code=0x0 [ 610.249373][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'. [ 610.251564][T19372] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.252340][T19372] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.252586][T19372] bridge_slave_0: entered allmulticast mode [ 610.263113][T19372] bridge_slave_0: entered promiscuous mode [ 610.270173][T19372] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.271008][T19372] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.271240][T19372] bridge_slave_1: entered allmulticast mode [ 610.277759][T19372] bridge_slave_1: entered promiscuous mode [ 610.311762][ T5843] Bluetooth: hci7: command tx timeout [ 610.471617][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.699990][T19372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.716389][T19372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.103828][T19430] netlink: 'syz.6.5166': attribute type 1 has an invalid length. [ 611.103849][T19430] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5166'. [ 611.155950][T19372] team0: Port device team_slave_0 added [ 611.176046][T19372] team0: Port device team_slave_1 added [ 611.511523][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 611.573441][T19372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.573458][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.573482][T19372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.643573][T19372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.643589][T19372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.643613][T19372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.390785][ T5843] Bluetooth: hci7: command tx timeout [ 612.434298][T19372] hsr_slave_0: entered promiscuous mode [ 612.435823][T19372] hsr_slave_1: entered promiscuous mode [ 612.436803][T19372] debugfs: 'hsr0' already exists in 'hsr' [ 612.436826][T19372] Cannot create hsr debugfs directory [ 612.550622][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 613.011276][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5181'. [ 613.111728][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.590123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.146912][T19496] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b2f8bddb73e65c239a40942f00000000000000000000000000) [ 614.474081][ T5843] Bluetooth: hci7: command tx timeout [ 614.629548][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.671290][T19372] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 615.044019][T19372] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 615.161728][T19372] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.179406][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 615.340470][ T10] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 615.340499][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.340516][ T10] usb 3-1: Product: syz [ 615.340529][ T10] usb 3-1: Manufacturer: syz [ 615.340542][ T10] usb 3-1: SerialNumber: syz [ 615.384790][ T10] usb 3-1: config 0 descriptor?? [ 615.392466][T19372] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 615.530529][T19523] loop7: detected capacity change from 0 to 16384 [ 615.607960][T19523] loop7: detected capacity change from 16384 to 16383 [ 615.669059][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.696695][ T10] usb 3-1: USB disconnect, device number 50 [ 615.813719][T19372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.884536][T19372] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.916281][ T7801] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.916529][ T7801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.963772][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.964057][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.548823][ T5843] Bluetooth: hci7: command tx timeout [ 616.598809][T19372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.708523][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.531297][T19372] veth0_vlan: entered promiscuous mode [ 617.562857][T19372] veth1_vlan: entered promiscuous mode [ 617.735205][T19372] veth0_macvtap: entered promiscuous mode [ 617.748048][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.768659][T19372] veth1_macvtap: entered promiscuous mode [ 617.866005][T19372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.925945][T19372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.957293][ T7805] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.957339][ T7805] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.957372][ T7805] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.957406][ T7805] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.526924][ T7817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.526944][ T7817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.667791][T12988] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 618.670119][ T7805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.670136][ T7805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.797533][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 618.817583][T12988] usb 3-1: Using ep0 maxpacket: 32 [ 618.820810][T12988] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.820841][T12988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 618.835075][T12988] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 618.835103][T12988] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 618.835121][T12988] usb 3-1: Product: syz [ 618.864062][T12988] usb 3-1: config 0 descriptor?? [ 619.462270][T12988] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0 [ 619.462308][T12988] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0 [ 619.462331][T12988] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0 [ 619.462355][T12988] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0 [ 619.462379][T12988] waterforce 0003:1044:7A4D.0038: unknown main item tag 0x0 [ 619.500853][T12988] waterforce 0003:1044:7A4D.0038: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0 [ 619.560654][T12988] waterforce 0003:1044:7A4D.0038: fw version request failed with -38 [ 619.670402][T12988] usb 3-1: USB disconnect, device number 51 [ 619.830996][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 620.866410][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.033707][ T37] audit: type=1804 audit(1756235976.730:2734): pid=19658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.5255" name=2F6E6577726F6F742F313036362F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=65386 res=1 errno=0 [ 621.346562][T12993] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 621.530906][T12993] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 621.530934][T12993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.569476][T12993] usb 2-1: config 0 descriptor?? [ 621.609091][T12993] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 621.905902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 621.986760][T12993] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 622.223041][T19691] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 622.228168][T19692] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5269'. [ 622.228201][T19692] netlink: 'syz.2.5269': attribute type 7 has an invalid length. [ 622.228213][T19692] netlink: 'syz.2.5269': attribute type 8 has an invalid length. [ 622.228231][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'. [ 622.330753][T19692] gretap0: entered promiscuous mode [ 622.339524][T19692] batadv_slave_1: entered promiscuous mode [ 622.381242][T19692] gretap0: left promiscuous mode [ 622.391502][T12993] gspca_cpia1: usb_control_msg 02, error -32 [ 622.396404][T12993] gspca_cpia1: usb_control_msg 02, error -71 [ 622.396421][T12993] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 622.409425][T12993] usb 2-1: USB disconnect, device number 47 [ 622.450671][T19692] batadv_slave_1: left promiscuous mode [ 622.945390][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.204171][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.305782][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.365355][ T31] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 623.518006][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.518038][ T31] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.518191][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.518212][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.526374][T19719] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.542042][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.896323][ T31] usb 2-1: USB disconnect, device number 48 [ 623.986909][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.313292][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.704666][ T31] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 624.866327][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 624.868905][ T31] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.868934][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 624.871217][ T31] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 624.871240][ T31] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 624.871257][ T31] usb 5-1: Product: syz [ 624.877130][ T31] usb 5-1: config 0 descriptor?? [ 625.034354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 625.260030][T19768] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 625.457448][ T31] waterforce 0003:1044:7A4D.0039: unknown main item tag 0x0 [ 625.457488][ T31] waterforce 0003:1044:7A4D.0039: unknown main item tag 0x0 [ 625.457514][ T31] waterforce 0003:1044:7A4D.0039: unknown main item tag 0x0 [ 625.457538][ T31] waterforce 0003:1044:7A4D.0039: unknown main item tag 0x0 [ 625.457564][ T31] waterforce 0003:1044:7A4D.0039: unknown main item tag 0x0 [ 625.464646][ T31] waterforce 0003:1044:7A4D.0039: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 625.524775][ T31] waterforce 0003:1044:7A4D.0039: fw version request failed with -38 [ 625.858588][ T31] usb 5-1: USB disconnect, device number 52 [ 626.064915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 626.178861][ T37] audit: type=1326 audit(1756235981.932:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.7.5307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbea47ebe9 code=0x0 [ 626.695036][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 626.846140][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.846174][ T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 626.846197][ T31] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 626.846234][ T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 626.846254][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.872206][T19788] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 626.898307][ T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 626.903744][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5313'. [ 626.903774][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5313'. [ 627.103313][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.263839][ T5843] Bluetooth: hci0: command tx timeout [ 627.531967][ T31] usb 2-1: USB disconnect, device number 49 [ 627.543281][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5318'. [ 628.153016][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.826217][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5328'. [ 629.182258][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.886937][ T5889] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 629.896920][ T5889] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 630.221739][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.351783][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 630.524059][ T31] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 630.524089][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 630.531066][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.531094][ T31] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.531112][ T31] usb 2-1: Product: syz [ 630.531124][ T31] usb 2-1: Manufacturer: syz [ 630.531137][ T31] usb 2-1: SerialNumber: syz [ 630.600803][T19867] hid-generic 0000:0000:0000.003A: pid 19867 passed too large report [ 630.675307][ T31] usb 2-1: config 0 descriptor?? [ 630.702902][ T31] usb 2-1: selecting invalid altsetting 0 [ 630.956716][ T31] usb 2-1: USB disconnect, device number 50 [ 631.221317][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5349'. [ 631.261249][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 631.303602][T19897] loop8: detected capacity change from 0 to 7 [ 631.309713][T19897] Dev loop8: unable to read RDB block 7 [ 631.309756][T19897] loop8: unable to read partition table [ 631.310096][T19897] loop8: partition table beyond EOD, truncated [ 631.310113][T19897] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 632.046606][T19926] kernel read not supported for file /z (pid: 19926 comm: syz.1.5361) [ 632.063624][ T37] audit: type=1800 audit(1756235987.805:2736): pid=19926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5361" name=7ABF17 dev="mqueue" ino=67829 res=0 errno=0 [ 632.300720][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.060386][ T37] audit: type=1400 audit(1756235988.816:2737): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=19951 comm="syz.2.5374" path="/proc/2937/task/2938/attr/current" dev="proc" ino=67092 [ 633.060447][ T37] audit: type=1400 audit(1756235988.816:2738): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=19951 comm="syz.2.5374" path="/proc/2937/task/2938/attr/current" dev="proc" ino=67092 [ 633.190290][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 633.340178][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.341820][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 633.373284][ T31] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 633.373311][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.373329][ T31] usb 7-1: Product: syz [ 633.373342][ T31] usb 7-1: Manufacturer: syz [ 633.373354][ T31] usb 7-1: SerialNumber: syz [ 633.378897][ T31] usb 7-1: config 0 descriptor?? [ 633.421810][ T31] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 633.423609][ T31] usb 7-1: Detected FT232H [ 633.522295][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5387'. [ 633.592344][ T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 633.710032][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 633.865874][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 633.865902][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.865919][ T10] usb 5-1: Product: syz [ 633.865932][ T10] usb 5-1: Manufacturer: syz [ 633.865944][ T10] usb 5-1: SerialNumber: syz [ 633.872193][ T10] usb 5-1: config 0 descriptor?? [ 633.911496][ T5889] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 634.025010][ T31] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 634.079667][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.079930][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.079970][ T5889] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 634.079991][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.085360][ T5889] usb 2-1: config 0 descriptor?? [ 634.115130][T12988] usb 5-1: USB disconnect, device number 53 [ 634.224483][ T10] usb 7-1: USB disconnect, device number 2 [ 634.358407][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 634.359463][ T10] ftdi_sio 7-1:0.0: device disconnected [ 634.379781][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.498917][ T5889] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 634.503343][ T5889] cp2112 0003:10C4:EA90.003B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 634.697417][ T5889] cp2112 0003:10C4:EA90.003B: Part Number: 0x82 Device Version: 0xFE [ 635.121404][ T5889] cp2112 0003:10C4:EA90.003B: error setting SMBus config [ 635.127598][ T5889] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -71 [ 635.166636][ T5889] usb 2-1: USB disconnect, device number 51 [ 635.419155][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.931461][T19994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.215622][T20000] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.215651][T20000] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 636.215673][T20000] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 636.215688][T20000] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 636.459558][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.498164][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.257345][ T37] audit: type=1326 audit(1756235994.008:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.280491][ T37] audit: type=1326 audit(1756235994.038:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.284571][ T37] audit: type=1326 audit(1756235994.038:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.284620][ T37] audit: type=1326 audit(1756235994.038:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.285909][ T37] audit: type=1326 audit(1756235994.038:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.285954][ T37] audit: type=1326 audit(1756235994.038:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.285993][ T37] audit: type=1326 audit(1756235994.038:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20053 comm="syz.1.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b63febe9 code=0x7ffc0000 [ 638.319599][ T5889] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 638.476401][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.476426][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.478412][ T5889] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 638.478436][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 638.478454][ T5889] usb 5-1: SerialNumber: syz [ 638.530874][T20059] netlink: 'syz.1.5422': attribute type 29 has an invalid length. [ 638.531791][T20059] netlink: 'syz.1.5422': attribute type 29 has an invalid length. [ 638.532508][T20059] netlink: 508 bytes leftover after parsing attributes in process `syz.1.5422'. [ 638.537621][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.747081][ T5889] usb 5-1: 0:2 : does not exist [ 638.850619][ T5889] usb 5-1: USB disconnect, device number 54 [ 639.019661][ T990] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 639.202827][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.202859][ T990] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.202895][ T990] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 639.238675][ T990] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.238710][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.238729][ T990] usb 2-1: Product: syz [ 639.238742][ T990] usb 2-1: Manufacturer: syz [ 639.238755][ T990] usb 2-1: SerialNumber: syz [ 639.506589][T20063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 639.577077][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.964236][T20085] overlayfs: invalid origin (0000) [ 640.137775][T20063] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 640.341443][ T990] cdc_ncm 2-1:1.0: bind() failure [ 640.357097][ T990] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 640.364958][ T990] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 640.384142][ T990] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 640.421747][ T990] usb 2-1: USB disconnect, device number 52 [ 640.616545][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.659947][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5439'. [ 640.659981][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5439'. [ 641.326275][ T990] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 641.482196][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 641.484961][ T990] usb 5-1: config index 0 descriptor too short (expected 46642, got 72) [ 641.484986][ T990] usb 5-1: config 173 has too many interfaces: 131, using maximum allowed: 32 [ 641.485003][ T990] usb 5-1: config 173 contains an unexpected descriptor of type 0x1, skipping [ 641.485019][ T990] usb 5-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 641.485037][ T990] usb 5-1: config 173 has 0 interfaces, different from the descriptor's value: 131 [ 641.542363][ T990] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 641.542391][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.542410][ T990] usb 5-1: Product: syz [ 641.542422][ T990] usb 5-1: Manufacturer: syz [ 641.542434][ T990] usb 5-1: SerialNumber: syz [ 641.568848][T20140] sctp: [Deprecated]: syz.7.5457 (pid 20140) Use of int in maxseg socket option. [ 641.568848][T20140] Use struct sctp_assoc_value instead [ 641.656079][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.855986][ T990] usb 5-1: USB disconnect, device number 55 [ 642.025012][T20157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.695545][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.785726][T12988] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 642.827028][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.938611][T12988] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 642.938639][T12988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.952615][T12988] usb 3-1: config 0 descriptor?? [ 642.964549][T12988] gspca_main: spca508-2.14.0 probing 8086:0110 [ 643.215314][T12988] gspca_spca508: reg_read err -32 [ 643.219352][T12988] gspca_spca508: reg_read err -32 [ 643.223751][T12988] gspca_spca508: reg_read err -32 [ 643.427825][T12988] gspca_spca508: reg_read err -71 [ 643.428230][T12988] gspca_spca508: reg write: error -71 [ 643.428314][T12988] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 643.434422][T12988] usb 3-1: USB disconnect, device number 52 [ 643.585234][ T990] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 643.725097][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.735015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.755002][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 643.758044][ T990] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 643.758069][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.789249][ T990] usb 5-1: config 0 descriptor?? [ 644.014965][ T990] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 644.032809][T20198] netlink: 360 bytes leftover after parsing attributes in process `syz.1.5480'. [ 644.049548][ T990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 644.050573][ T990] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 644.050631][ T990] usb 5-1: media controller created [ 644.126636][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 644.223848][ T990] az6027: usb out operation failed. (-71) [ 644.224330][ T990] az6027: usb out operation failed. (-71) [ 644.224342][ T990] stb0899_attach: Driver disabled by Kconfig [ 644.224350][ T990] az6027: no front-end attached [ 644.224350][ T990] [ 644.252060][ T990] az6027: usb out operation failed. (-71) [ 644.252078][ T990] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 644.279930][ T990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input58 [ 644.296180][ T990] dvb-usb: schedule remote query interval to 400 msecs. [ 644.296200][ T990] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 644.299486][ T990] usb 5-1: USB disconnect, device number 56 [ 644.467782][ T990] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 644.774949][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.814016][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.803550][ T31] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 646.842949][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5517'. [ 646.842970][T20278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5517'. [ 646.853437][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.915099][ T7805] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.916081][ T7805] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.916129][ T7805] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.916162][ T7805] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.976959][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.977003][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 646.977025][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.015565][ T31] usb 2-1: config 0 descriptor?? [ 647.514148][T20293] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5523'. [ 647.673724][T12996] usb 2-1: USB disconnect, device number 53 [ 647.892895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.930377][T20296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.396648][T20296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.744887][T20296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.932388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.082143][T20296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.439016][ T7817] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.521261][ T7818] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.614479][ T7801] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.708294][ T7801] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.971873][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.030413][ T37] audit: type=1326 audit(1756236005.794:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20333 comm="syz.6.5540" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8faa9ebe9 code=0x0 [ 651.011362][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.410459][T20384] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5562'. [ 652.060820][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.090625][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.600248][ T990] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 653.764817][ T990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 653.764874][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.764897][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.764917][ T990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 653.768945][ T990] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 653.768972][ T990] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 653.768990][ T990] usb 5-1: Manufacturer: syz [ 653.783541][ T990] usb 5-1: config 0 descriptor?? [ 653.790047][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 653.999913][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 654.003279][ T10] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 654.003304][ T10] usb 7-1: config 1 has no interface number 0 [ 654.003350][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 654.003371][ T10] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 654.003393][ T10] usb 7-1: config 1 interface 105 has no altsetting 0 [ 654.009662][ T10] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 654.009694][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.009712][ T10] usb 7-1: Product: syz [ 654.057151][ T10] usb 7-1: Manufacturer: syz [ 654.057169][ T10] usb 7-1: SerialNumber: syz [ 654.107229][T20455] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 654.109159][T20455] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 654.129826][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.205476][ T990] appleir 0003:05AC:8243.003D: unknown main item tag 0x0 [ 654.231726][ T990] appleir 0003:05AC:8243.003D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 654.483012][ T990] usb 5-1: USB disconnect, device number 57 [ 654.554421][T20455] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 654.554532][T20455] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 655.167054][ T10] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 655.167582][ T10] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 655.179262][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.248113][ T10] aqc111 7-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 655.280691][ T10] usb 7-1: USB disconnect, device number 3 [ 655.284112][ T10] aqc111 7-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 655.429330][ T10] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 655.429493][ T10] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 655.429672][ T10] aqc111 7-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 656.168839][T12988] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 656.218740][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 656.344813][T12988] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 656.344841][T12988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.344859][T12988] usb 5-1: Product: syz [ 656.344872][T12988] usb 5-1: Manufacturer: syz [ 656.344885][T12988] usb 5-1: SerialNumber: syz [ 657.248240][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.420323][T12988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 657.420380][T12988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 657.425410][T12988] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 657.480219][T12988] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 657.512986][T12988] usb 5-1: USB disconnect, device number 58 [ 658.287708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.099360][T20580] netlink: 'syz.2.5638': attribute type 1 has an invalid length. [ 659.327223][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.551000][T20586] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5641'. [ 660.380074][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.380433][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.406741][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 660.556734][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 660.559498][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 660.559570][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.559591][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.559612][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.559633][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.559673][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 660.559693][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.796759][ T10] usb 3-1: usb_control_msg returned -32 [ 660.796804][ T10] usbtmc 3-1:16.0: can't read capabilities [ 661.406645][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.592696][T20629] loop8: detected capacity change from 0 to 8 [ 661.593806][T20629] Dev loop8: unable to read RDB block 8 [ 661.593845][T20629] loop8: unable to read partition table [ 661.594070][T20629] loop8: partition table beyond EOD, truncated [ 661.594087][T20629] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 662.445623][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.627455][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.135412][ T990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 663.212229][ T31] usb 3-1: USB disconnect, device number 53 [ 663.297432][ T990] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 663.297489][ T990] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.304262][ T990] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 663.304288][ T990] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 663.304306][ T990] usb 7-1: Manufacturer: syz [ 663.328846][ T990] usb 7-1: config 0 descriptor?? [ 663.485107][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.615166][ T990] rc_core: IR keymap rc-hauppauge not found [ 663.615185][ T990] Registered IR keymap rc-empty [ 663.616967][ T990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 663.619935][ T990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input59 [ 663.646714][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 663.704408][ T990] usb 7-1: USB disconnect, device number 4 [ 664.524599][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.759428][T20709] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 665.564081][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.024081][T20735] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 666.521862][T20759] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 666.604780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.715226][ C1] vkms_vblank_simulate: vblank timer overrun [ 667.323365][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 667.643028][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.790851][T20808] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 667.792180][T20808] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 668.429786][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5730'. [ 668.429810][T20825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5730'. [ 668.682519][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.743931][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.424060][T20845] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5739'. [ 669.732589][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.066735][T20860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5746'. [ 670.666131][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5749'. [ 670.761538][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.800981][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.089637][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.840435][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.845065][T20916] binder: 20915:20916 ioctl c018620b 200000000700 returned -14 [ 672.963756][T20920] netlink: 468 bytes leftover after parsing attributes in process `syz.2.5770'. [ 673.070753][T20920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5770'. [ 673.173821][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.365738][T20933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.631704][T20939] input: syz1 as /devices/virtual/input/input60 [ 673.651624][T20941] ALSA: mixer_oss: invalid OSS volume '' [ 673.879921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.333278][T20959] (syz.6.5789,20959,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 674.644920][T20965] pimreg: entered allmulticast mode [ 674.697167][T20965] pimreg: left allmulticast mode [ 674.919384][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.997224][T20979] netlink: 'syz.2.5796': attribute type 10 has an invalid length. [ 675.010811][T20979] team0: Device bond0 failed to register rx_handler [ 675.193749][T20986] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5800'. [ 675.215886][T20986] bridge0: port 3(vlan2) entered blocking state [ 675.216107][T20986] bridge0: port 3(vlan2) entered disabled state [ 675.216324][T20986] vlan2: entered allmulticast mode [ 675.216342][T20986] dummy0: entered allmulticast mode [ 675.246188][T20986] vlan2: entered promiscuous mode [ 675.246209][T20986] dummy0: entered promiscuous mode [ 675.338537][T20990] loop2: detected capacity change from 0 to 7 [ 675.340001][T20990] Dev loop2: unable to read RDB block 7 [ 675.340052][T20990] loop2: unable to read partition table [ 675.340267][T20990] loop2: partition table beyond EOD, truncated [ 675.340283][T20990] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 675.630947][ T37] audit: type=1326 audit(1756236031.407:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20996 comm="syz.6.5814" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8faa9ebe9 code=0x0 [ 675.958897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.998348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.038195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.184235][T21068] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.308520][T21073] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5835'. [ 678.325436][T21070] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5835'. [ 678.451897][T21075] netlink: 27 bytes leftover after parsing attributes in process `syz.7.5838'. [ 678.517725][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 678.683491][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.683516][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.685004][ T10] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 678.685029][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 678.685046][ T10] usb 7-1: SerialNumber: syz [ 678.737616][T12992] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 678.737812][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 678.907686][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 678.912072][T12992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 678.912101][T12992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.912191][T12992] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 678.912212][T12992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.918711][ T5889] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 678.918791][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.937375][ T5889] usb 2-1: config 0 descriptor?? [ 678.943156][T12992] usb 3-1: config 0 descriptor?? [ 678.986405][ T10] usb 7-1: 0:2 : does not exist [ 679.061796][ T10] usb 7-1: USB disconnect, device number 5 [ 679.077369][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.498919][T12992] savu 0003:1E7D:2D5A.003E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 679.699307][T12992] usb 3-1: USB disconnect, device number 54 [ 680.012287][ T5889] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 680.012570][ T5889] asix 2-1:0.0: probe with driver asix failed with error -71 [ 680.031210][ T5889] usb 2-1: USB disconnect, device number 54 [ 680.049679][T21095] serio: Serial port pty33 [ 680.116855][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.548572][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 680.575676][T21106] all (unregistering): Released all slaves [ 680.594393][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 680.596084][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 680.625977][T17109] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 680.634456][T17109] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 680.975875][T21119] loop8: detected capacity change from 0 to 8 [ 680.985408][T21119] Dev loop8: unable to read RDB block 8 [ 680.985452][T21119] loop8: unable to read partition table [ 680.985693][T21119] loop8: partition table beyond EOD, truncated [ 680.985710][T21119] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 681.156315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.198566][T21129] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 681.198990][T21129] syzkaller1: linktype set to 773 [ 682.150715][T21153] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5868'. [ 682.195976][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.243130][T21110] chnl_net:caif_netlink_parms(): no params data found [ 682.576445][T21110] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.576629][T21110] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.576865][T21110] bridge_slave_0: entered allmulticast mode [ 682.582330][T21110] bridge_slave_0: entered promiscuous mode [ 682.584898][T21110] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.585055][T21110] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.585207][T21110] bridge_slave_1: entered allmulticast mode [ 682.589562][T21110] bridge_slave_1: entered promiscuous mode [ 682.765580][ T5853] Bluetooth: hci8: command tx timeout [ 682.822290][T21110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.858059][T21110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.122882][T21110] team0: Port device team_slave_0 added [ 683.137580][T21110] team0: Port device team_slave_1 added [ 683.235479][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.560583][T21110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.560599][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.560621][T21110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.571975][T21110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.571990][T21110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.572013][T21110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.657076][T21177] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 683.778650][T21186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5883'. [ 683.916641][T21110] hsr_slave_0: entered promiscuous mode [ 683.918143][T21110] hsr_slave_1: entered promiscuous mode [ 683.923224][T21110] debugfs: 'hsr0' already exists in 'hsr' [ 683.923250][T21110] Cannot create hsr debugfs directory [ 684.274714][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.834634][ T5853] Bluetooth: hci8: command tx timeout [ 685.314195][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.416548][ T37] audit: type=1326 audit(1756236041.202:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21246 comm="syz.2.5909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f785a1bebe9 code=0x0 [ 685.496341][T21110] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 685.532781][T21110] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 685.590799][T21110] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 685.626790][T21110] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 685.726404][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.306662][T21110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.349681][T21110] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.353763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.374325][T20747] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.374468][T20747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.409046][T20747] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.409195][T20747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.913564][ T5853] Bluetooth: hci8: command tx timeout [ 687.165995][ T31] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 687.314587][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 687.317251][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.317304][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 687.317328][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 687.317347][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 687.317367][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 687.379551][ T31] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.379579][ T31] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.379597][ T31] usb 3-1: Manufacturer: syz [ 687.393242][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.420375][ T31] usb 3-1: config 0 descriptor?? [ 687.589797][T21110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.592103][T21294] program syz.7.5925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 687.733003][ T31] rc_core: IR keymap rc-hauppauge not found [ 687.733023][ T31] Registered IR keymap rc-empty [ 687.733169][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.753118][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.774444][ T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 687.800183][ T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 687.817678][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.833215][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.853290][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.873207][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.898413][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.912917][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.934791][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.956721][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.973054][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 687.995022][ T31] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 688.023102][ T31] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 688.023123][ T31] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.060380][T21279] usb 3-1: USB disconnect, device number 55 [ 688.432647][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 688.587277][T21110] veth0_vlan: entered promiscuous mode [ 688.621330][T21110] veth1_vlan: entered promiscuous mode [ 688.740370][T21110] veth0_macvtap: entered promiscuous mode [ 688.773773][T21110] veth1_macvtap: entered promiscuous mode [ 688.861649][T21110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.924804][T21110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.955170][T20747] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.956659][T20747] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.957248][T20747] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.957455][T20747] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.994603][ T5853] Bluetooth: hci8: command tx timeout [ 689.474900][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.627922][T20773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.627942][T20773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.740900][T20752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.740919][T20752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.999816][T21347] sctp: [Deprecated]: syz.6.5944 (pid 21347) Use of int in max_burst socket option deprecated. [ 689.999816][T21347] Use struct sctp_assoc_value instead [ 690.511588][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.201525][T12989] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 691.210342][T21381] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 691.351205][T12989] usb 7-1: Using ep0 maxpacket: 16 [ 691.353520][T12989] usb 7-1: config 159 has too many interfaces: 198, using maximum allowed: 32 [ 691.353542][T12989] usb 7-1: config 159 has an invalid descriptor of length 245, skipping remainder of the config [ 691.353560][T12989] usb 7-1: config 159 has 0 interfaces, different from the descriptor's value: 198 [ 691.353594][T12989] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 691.353615][T12989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.551081][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.551235][ T990] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 691.703748][ T990] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.703789][ T990] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.703824][ T990] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.703843][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.782857][T12989] usb 7-1: string descriptor 0 read error: -71 [ 691.802740][T12989] usb 7-1: USB disconnect, device number 6 [ 691.985904][ T990] usb 2-1: usb_control_msg returned -32 [ 691.985949][ T990] usbtmc 2-1:16.0: can't read capabilities [ 692.158070][T21409] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 692.221366][T21411] syzkaller1: entered promiscuous mode [ 692.221395][T21411] syzkaller1: entered allmulticast mode [ 692.245479][T21413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.590560][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.821959][ T5889] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 692.974525][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 692.974557][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 692.974582][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 692.974606][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.974645][ T5889] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.974665][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.991883][ T5889] usb 9-1: config 0 descriptor?? [ 692.992963][T21423] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 693.453827][ T5889] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 693.453862][ T5889] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 693.453888][ T5889] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 693.453919][ T5889] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 693.453943][ T5889] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 693.470786][ T5889] plantronics 0003:047F:FFFF.003F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 693.630042][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 693.672209][ T5889] usb 9-1: USB disconnect, device number 2 [ 693.852195][T21457] batadv_slave_1: entered promiscuous mode [ 693.853769][T21457] batadv_slave_1: left promiscuous mode [ 693.896394][T21459] macvlan1: entered promiscuous mode [ 693.898628][T21459] ipvlan0: entered promiscuous mode [ 693.915670][T21459] ipvlan0: left promiscuous mode [ 693.931586][T21459] macvlan1: left promiscuous mode [ 694.178263][T21465] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5992'. [ 694.423828][T12993] usb 2-1: USB disconnect, device number 55 [ 694.557041][T21484] netlink: 'syz.8.6001': attribute type 1 has an invalid length. [ 694.652029][T21484] bond1 (unregistering): Released all slaves [ 694.669514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.114197][ T37] audit: type=1326 audit(1756236050.897:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21492 comm="syz.8.6004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2c3a3ebe9 code=0x0 [ 695.469395][ T990] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 695.619241][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 695.622176][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.622204][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.622239][ T990] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 695.622259][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.628785][ T990] usb 2-1: config 0 descriptor?? [ 695.711043][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.990988][ T5845] kworker/1:3 (5845) used greatest stack depth: 15624 bytes left [ 696.111595][ T990] smartjoyplus 0003:0925:8866.0040: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0 [ 696.111626][ T990] smartjoyplus 0003:0925:8866.0040: Force feedback for SmartJoy PLUS PS2/USB adapter [ 696.279499][T12993] usb 2-1: USB disconnect, device number 56 [ 696.409944][T21523] netlink: 'syz.8.6016': attribute type 10 has an invalid length. [ 696.491446][T21523] team0: Port device team_slave_0 removed [ 696.748527][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 697.788008][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 698.048638][T21582] netlink: 'syz.6.6043': attribute type 1 has an invalid length. [ 698.192178][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.443076][T21582] bond1: entered promiscuous mode [ 698.443843][T21582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.559281][T21586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 698.579540][T21586] bond1: (slave bond2): making interface the new active one [ 698.579562][T21586] bond2: entered promiscuous mode [ 698.580916][T21586] bond1: (slave bond2): Enslaving as an active interface with an up link [ 698.827593][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.122443][T21615] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 699.122471][T21615] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 699.687220][ T5930] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 699.847236][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 699.850984][ T5930] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 699.851007][ T5930] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.851023][ T5930] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.859552][ T5930] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.859578][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.859595][ T5930] usb 7-1: Product: syz [ 699.859701][ T5930] usb 7-1: Manufacturer: syz [ 699.859715][ T5930] usb 7-1: SerialNumber: syz [ 699.866929][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.137365][ T5930] usb 7-1: 0:2 : does not exist [ 700.217093][ T5930] usb 7-1: USB disconnect, device number 7 [ 700.505068][T21647] syzkaller1: entered promiscuous mode [ 700.505094][T21647] syzkaller1: entered allmulticast mode [ 700.906536][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.816965][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6085'. [ 701.945880][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 702.449111][T21707] input: syz0 as /devices/virtual/input/input63 [ 702.560276][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.987424][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.024977][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 704.372633][T21716] syz.8.6097 (21716): drop_caches: 2 [ 704.514663][T12996] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 704.532632][T21750] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6113'. [ 704.665696][T12996] usb 7-1: Using ep0 maxpacket: 16 [ 704.670427][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.670458][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.670494][T12996] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 704.670515][T12996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.682411][T12996] usb 7-1: config 0 descriptor?? [ 705.064415][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.112588][T12996] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0 [ 705.112625][T12996] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0 [ 705.112651][T12996] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0 [ 705.112674][T12996] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0 [ 705.112697][T12996] mcp2221 0003:04D8:00DD.0041: unknown main item tag 0x0 [ 705.117118][T12996] mcp2221 0003:04D8:00DD.0041: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 705.309424][ T5889] usb 7-1: USB disconnect, device number 8 [ 706.103910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.143491][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 707.200021][ T37] audit: type=1800 audit(1756236062.983:2750): pid=21833 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.6148" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 707.438795][T21832] tmpfs: Too small a size for current use [ 708.183062][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.232346][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 709.802405][ T5889] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 709.855086][T21890] autofs: Bad value for 'fd' [ 709.951942][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 709.953818][ T5889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 709.953851][ T5889] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 709.953871][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.960094][ T5889] usb 9-1: config 0 descriptor?? [ 709.988201][ C1] vkms_vblank_simulate: vblank timer overrun [ 710.261833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.419998][ T5889] hid (null): unknown global tag 0xc [ 710.625657][T12993] usb 9-1: USB disconnect, device number 3 [ 711.301952][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.561485][T21921] loop7: detected capacity change from 0 to 7 [ 711.578979][T21921] Dev loop7: unable to read RDB block 7 [ 711.579036][T21921] loop7: unable to read partition table [ 711.579266][T21921] loop7: partition table beyond EOD, truncated [ 711.579282][T21921] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 712.340843][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.473415][T21934] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6192'. [ 712.589666][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 713.380276][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 714.169032][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.268764][T21972] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6208'. [ 714.419814][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 714.548691][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.688227][T21979] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 714.704761][T21978] tipc: Started in network mode [ 714.704788][T21978] tipc: Node identity ac1414aa, cluster identity 4711 [ 714.719550][T21978] tipc: Enabled bearer , priority 10 [ 714.809543][T12992] IPVS: starting estimator thread 0... [ 714.913966][ C1] vkms_vblank_simulate: vblank timer overrun [ 714.926638][T21982] IPVS: using max 7 ests per chain, 16800 per kthread [ 715.208293][T21993] loop8: detected capacity change from 0 to 8 [ 715.216027][T21993] Dev loop8: unable to read RDB block 8 [ 715.216077][T21993] loop8: unable to read partition table [ 715.216308][T21993] loop8: partition table beyond EOD, truncated [ 715.216325][T21993] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 715.459285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.819110][T12993] tipc: Node number set to 2886997162 [ 716.158862][T12996] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 716.323952][T12996] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.323978][T12996] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 716.323996][T12996] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.324049][T12996] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 716.324073][T12996] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 716.381059][T12996] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 716.381087][T12996] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 716.381104][T12996] usb 2-1: Product: syz [ 716.381117][T12996] usb 2-1: Manufacturer: syz [ 716.436576][T12996] cdc_wdm 2-1:1.0: skipping garbage [ 716.436594][T12996] cdc_wdm 2-1:1.0: skipping garbage [ 716.462938][T12996] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 716.462959][T12996] cdc_wdm 2-1:1.0: Unknown control protocol [ 716.498685][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.704937][T22034] netlink: 'syz.6.6237': attribute type 29 has an invalid length. [ 716.706490][T22034] netlink: 'syz.6.6237': attribute type 29 has an invalid length. [ 716.707419][T22034] netlink: 500 bytes leftover after parsing attributes in process `syz.6.6237'. [ 716.707891][T22034] unsupported nla_type 58 [ 716.883994][T12996] usb 2-1: USB disconnect, device number 57 [ 717.538166][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.577688][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 718.597654][T12992] kernel read not supported for file /dsp1 (pid: 12992 comm: kworker/0:13) [ 719.097549][T12996] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 719.249700][T12996] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 719.249758][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.249781][T12996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.249800][T12996] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 719.252959][T12996] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 719.252985][T12996] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 719.253004][T12996] usb 7-1: Manufacturer: syz [ 719.357523][T12996] usb 7-1: config 0 descriptor?? [ 719.557222][ T5889] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 719.617675][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 719.661226][ C1] vkms_vblank_simulate: vblank timer overrun [ 719.707166][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 719.725646][ T5889] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 719.725673][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.725699][ T5889] usb 9-1: Product: syz [ 719.725712][ T5889] usb 9-1: Manufacturer: syz [ 719.725723][ T5889] usb 9-1: SerialNumber: syz [ 719.731963][ T5889] usb 9-1: config 0 descriptor?? [ 719.801254][T12996] appleir 0003:05AC:8243.0043: unknown main item tag 0x0 [ 719.823822][T12996] appleir 0003:05AC:8243.0043: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 719.994423][ T5889] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 720.080934][T12996] usb 7-1: USB disconnect, device number 9 [ 720.656564][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.818710][ T5889] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 720.823100][ T5889] usb 9-1: USB disconnect, device number 4 [ 721.696035][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 721.846422][ T5889] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 722.008825][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 722.008867][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 722.008888][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.014066][ T5889] usb 2-1: config 0 descriptor?? [ 722.745588][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.059311][ T5889] video4linux radio48: keene_cmd_set failed (-71) [ 723.059335][ T5889] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 723.062333][ T5889] usb 2-1: USB disconnect, device number 58 [ 723.285359][ T5930] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 723.443966][ T5930] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 723.444024][ T5930] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.445690][ T5930] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 723.445715][ T5930] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 723.445732][ T5930] usb 9-1: Manufacturer: syz [ 723.490543][ T5930] usb 9-1: config 0 descriptor?? [ 723.615160][T17109] Bluetooth: hci6: command 0x0406 tx timeout [ 723.785000][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 723.805790][ T5930] rc_core: IR keymap rc-hauppauge not found [ 723.805809][ T5930] Registered IR keymap rc-empty [ 723.807591][ T5930] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 723.812231][T22215] atomic_op ffff888074a11a18 conn xmit_atomic 0000000000000000 [ 723.844501][ T5930] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input64 [ 723.873039][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 723.913122][ T5889] usb 9-1: USB disconnect, device number 5 [ 724.814468][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.048242][T22258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.854015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.893200][T22288] input: syz1 as /devices/virtual/input/input65 [ 725.983994][T12992] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 726.143997][T12992] usb 2-1: Using ep0 maxpacket: 32 [ 726.146391][T12992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 726.150979][T12992] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 726.151005][T12992] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 726.151023][T12992] usb 2-1: Product: syz [ 726.151035][T12992] usb 2-1: Manufacturer: syz [ 726.151048][T12992] usb 2-1: SerialNumber: syz [ 726.162145][T12992] usb 2-1: config 0 descriptor?? [ 726.184198][T22284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 726.187841][T12992] hub 2-1:0.0: bad descriptor, ignoring hub [ 726.187875][T12992] hub 2-1:0.0: probe with driver hub failed with error -5 [ 726.514020][T12992] usb 2-1: USB disconnect, device number 59 [ 726.863750][T12997] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 726.903929][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 727.013605][T12997] usb 2-1: Using ep0 maxpacket: 32 [ 727.063792][T12997] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 727.106848][T12997] usb 2-1: string descriptor 0 read error: -22 [ 727.107002][T12997] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 727.107023][T12997] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 727.138676][T12997] usb 2-1: config 0 descriptor?? [ 727.140656][T22284] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 727.157283][T12997] hub 2-1:0.0: bad descriptor, ignoring hub [ 727.157373][T12997] hub 2-1:0.0: probe with driver hub failed with error -5 [ 727.463768][T12993] usb 2-1: USB disconnect, device number 60 [ 727.649510][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6363'. [ 727.932957][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 728.913163][T22337] block nbd8: NBD_DISCONNECT [ 728.919969][T22336] block nbd8: Disconnected due to user request. [ 728.919991][T22336] block nbd8: shutting down sockets [ 728.972413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 729.206543][T22346] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 729.218567][ T38] INFO: task syz.3.4920:18827 blocked for more than 143 seconds. [ 729.218602][ T38] Not[ 729.218602][ T38] Not tainted syzkaller #0 [ 729.218612][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 729.218621][ T38] task:syz.3.4920 state:D stack:23528 pid:18827 tgid:18827 ppid:5839 task_flags:0x400040 flags:0x00004006 [ 729.218676][ T38] Call Trace: [ 729.218683][ T38] [ 729.218695][ T38] __schedule+0x16f3/0x4c20 [ 729.218749][ T38] ? __pfx___schedule+0x10/0x10 [ 729.218795][ T38] rt_mutex_schedule+0x77/0xf0 [ 729.218813][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 729.218845][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 729.218868][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 729.218888][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 729.218906][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 729.218936][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 729.218985][ T38] ? nfsd_shutdown_threads+0x4e/0xd0 [ 729.219000][ T38] mutex_lock_nested+0x16a/0x1d0 [ 729.219023][ T38] nfsd_shutdown_threads+0x4e/0xd0 [ 729.219048][ T38] nfsd_umount+0x42/0xd0 [ 729.219068][ T38] deactivate_locked_super+0xbc/0x130 [ 729.219091][ T38] cleanup_mnt+0x425/0x4c0 [ 729.219109][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.219133][ T38] task_work_run+0x1d4/0x260 [ 729.219154][ T38] ? __pfx_task_work_run+0x10/0x10 [ 729.219178][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 729.219204][ T38] exit_to_user_mode_loop+0xec/0x110 [ 729.219226][ T38] do_syscall_64+0x2bd/0x3b0 [ 729.219249][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.219265][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.219282][ T38] ? clear_bhb_loop+0x60/0xb0 [ 729.219303][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.219324][ T38] RIP: 0033:0x7f30fd0debe9 [ 729.219340][ T38] RSP: 002b:00007ffef1122c98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 729.219357][ T38] RAX: 0000000000000000 RBX: 000000000008e495 RCX: 00007f30fd0debe9 [ 729.219370][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 729.219380][ T38] RBP: 00007f30fd307da0 R08: 0000000000000001 R09: 00000005f1122f8f [ 729.219392][ T38] R10: 0000001b30c20000 R11: 0000000000000246 R12: 00007f30fd305fac [ 729.219404][ T38] R13: 00007f30fd305fa0 R14: ffffffffffffffff R15: 00007ffef1122db0 [ 729.219501][ T38] [ 729.219560][ T38] [ 729.219560][ T38] Showing all locks held in the system: [ 729.219569][ T38] 4 locks held by pr/legacy/17: [ 729.219580][ T38] 7 locks held by ktimers/1/29: [ 729.219590][ T38] #0: ffff8880b893aad8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 729.219633][ T38] #1: ffff8880b8924088 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 729.219671][ T38] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 729.219714][ T38] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 729.219755][ T38] #4: ffff8880b8927d78 (&lock->wait_lock){....}-{2:2}, at: rt_mutex_slowunlock+0xb0/0x8a0 [ 729.219794][ T38] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 729.219832][ T38] #6: ffff8880b8927d18 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_run_queues+0x628/0xd40 [ 729.219878][ T38] 1 lock held by khungtaskd/38: [ 729.219888][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 729.219951][ T38] 2 locks held by getty/5599: [ 729.219961][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 729.220006][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 729.220057][ T38] 2 locks held by kworker/u8:38/7814: [ 729.220067][ T38] #0: ffff888142320938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 729.220108][ T38] #1: ffffc9000699fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 729.220157][ T38] 2 locks held by syz.0.4358/17466: [ 729.220166][ T38] #0: ffffffff8ed37f40 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 729.220210][ T38] #1: ffffffff8dc7c658 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x134/0x1660 [ 729.220254][ T38] 2 locks held by syz.3.4920/18827: [ 729.220264][ T38] #0: ffff88806a1440d0 (&type->s_umount_key#92){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 729.220306][ T38] #1: ffffffff8dc7c658 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 729.220345][ T38] 2 locks held by syz.5.5014/19045: [ 729.220355][ T38] #0: ffffffff8ed37f40 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 729.220397][ T38] #1: ffffffff8dc7c658 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x134/0x1660 [ 729.220440][ T38] 2 locks held by kworker/u8:8/20535: [ 729.220451][ T38] 1 lock held by syz.4.5695/20707: [ 729.220461][ T38] #0: ffff88806a1440d0 (&type->s_umount_key#92){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 729.220509][ T38] 1 lock held by syz.2.6337/22259: [ 729.220519][ T38] #0: ffff88806a1440d0 (&type->s_umount_key#92){++++}-{4:4}, at: super_lock+0x2a9/0x3b0 [ 729.220563][ T38] 2 locks held by syz.8.6375/22344: [ 729.220573][ T38] #0: ffffffff8f1ef3e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 729.220620][ T38] #1: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 729.220661][ T38] [ 729.220665][ T38] ============================================= [ 729.220665][ T38] [ 729.220679][ T38] NMI backtrace for cpu 0 [ 729.220702][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.220721][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.220730][ T38] Call Trace: [ 729.220737][ T38] [ 729.220744][ T38] dump_stack_lvl+0x189/0x250 [ 729.220770][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.220793][ T38] ? __pfx__printk+0x10/0x10 [ 729.220823][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 729.220845][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 729.220866][ T38] ? __pfx__printk+0x10/0x10 [ 729.220887][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 729.220910][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 729.220930][ T38] watchdog+0xf93/0xfe0 [ 729.220956][ T38] ? watchdog+0x1de/0xfe0 [ 729.220981][ T38] kthread+0x711/0x8a0 [ 729.221007][ T38] ? __pfx_watchdog+0x10/0x10 [ 729.221026][ T38] ? __pfx_kthread+0x10/0x10 [ 729.221060][ T38] ? __pfx_kthread+0x10/0x10 [ 729.221083][ T38] ret_from_fork+0x3fc/0x770 [ 729.221108][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 729.221133][ T38] ? __switch_to_asm+0x39/0x70 [ 729.221148][ T38] ? __switch_to_asm+0x33/0x70 [ 729.221163][ T38] ? __pfx_kthread+0x10/0x10 [ 729.221186][ T38] ret_from_fork_asm+0x1a/0x30 [ 729.221218][ T38] [ 729.221224][ T38] Sending NMI from CPU 0 to CPUs 1: [ 729.221249][ C1] NMI backtrace for cpu 1 [ 729.221262][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.221286][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.221296][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 729.221314][ C1] Code: e8 9e b3 7f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 5f ea de fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 729.221328][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000202 [ 729.221343][ C1] RAX: 1ffffffff3274e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 729.221354][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 729.221364][ C1] RBP: ffffffff993a7850 R08: 0000000000000000 R09: 0000000000000000 [ 729.221375][ C1] R10: dffffc0000000000 R11: ffffffff853ea860 R12: dffffc0000000000 [ 729.221387][ C1] R13: 0000000000000000 R14: ffffffff993a75c0 R15: 0000000000000000 [ 729.221398][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 729.221412][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.221423][ C1] CR2: 000000110c261153 CR3: 00000000326e8000 CR4: 00000000003526f0 [ 729.221438][ C1] Call Trace: [ 729.221444][ C1] [ 729.221452][ C1] wait_for_lsr+0x1aa/0x2f0 [ 729.221478][ C1] serial8250_console_write+0x11bd/0x1b40 [ 729.221511][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 729.221534][ C1] ? console_flush_all+0x13a/0xcd0 [ 729.221554][ C1] ? console_flush_all+0x476/0xcd0 [ 729.221573][ C1] console_flush_all+0x695/0xcd0 [ 729.221592][ C1] ? console_flush_all+0x13a/0xcd0 [ 729.221611][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 729.221629][ C1] ? __lock_acquire+0xab9/0xd20 [ 729.221657][ C1] __console_flush_and_unlock+0xa4/0x240 [ 729.221677][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 729.221701][ C1] legacy_kthread_func+0x13b/0x1a0 [ 729.221721][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 729.221741][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 729.221761][ C1] ? __kthread_parkme+0x7b/0x200 [ 729.221782][ C1] ? __kthread_parkme+0x1a1/0x200 [ 729.221806][ C1] kthread+0x711/0x8a0 [ 729.221829][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 729.221849][ C1] ? __pfx_kthread+0x10/0x10 [ 729.221873][ C1] ? __pfx_kthread+0x10/0x10 [ 729.221895][ C1] ret_from_fork+0x3fc/0x770 [ 729.221917][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 729.221940][ C1] ? __switch_to_asm+0x39/0x70 [ 729.221955][ C1] ? __switch_to_asm+0x33/0x70 [ 729.221970][ C1] ? __pfx_kthread+0x10/0x10 [ 729.221991][ C1] ret_from_fork_asm+0x1a/0x30 [ 729.222016][ C1] [ 729.230912][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 729.230931][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 729.230952][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 729.230963][ T38] Call Trace: [ 729.230971][ T38] [ 729.230979][ T38] dump_stack_lvl+0x99/0x250 [ 729.231007][ T38] ? __asan_memcpy+0x40/0x70 [ 729.231034][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.231058][ T38] ? __pfx__printk+0x10/0x10 [ 729.231090][ T38] vpanic+0x281/0x750 [ 729.231115][ T38] ? __pfx_vpanic+0x10/0x10 [ 729.231137][ T38] ? preempt_schedule+0xae/0xc0 [ 729.231160][ T38] ? preempt_schedule_common+0x83/0xd0 [ 729.231186][ T38] panic+0xb9/0xc0 [ 729.231208][ T38] ? __pfx_panic+0x10/0x10 [ 729.231232][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 729.231258][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 729.231279][ T38] watchdog+0xfd2/0xfe0 [ 729.231306][ T38] ? watchdog+0x1de/0xfe0 [ 729.231332][ T38] kthread+0x711/0x8a0 [ 729.231359][ T38] ? __pfx_watchdog+0x10/0x10 [ 729.231379][ T38] ? __pfx_kthread+0x10/0x10 [ 729.231406][ T38] ? __pfx_kthread+0x10/0x10 [ 729.231430][ T38] ret_from_fork+0x3fc/0x770 [ 729.231455][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 729.231483][ T38] ? __switch_to_asm+0x39/0x70 [ 729.231498][ T38] ? __switch_to_asm+0x33/0x70 [ 729.231513][ T38] ? __pfx_kthread+0x10/0x10 [ 729.231538][ T38] ret_from_fork_asm+0x1a/0x30 [ 729.231570][ T38] [ 729.231816][ T38] Kernel Offset: disabled