last executing test programs: 2m20.598495223s ago: executing program 2 (id=279): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_irq_timer={0x0, 0x1, 0x0, 0x0}) 2m20.279412977s ago: executing program 2 (id=284): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000100)={0xe, 0x7, 0x1, {{0x1, '-'}, 0x207}}, 0xe) 2m19.324999874s ago: executing program 2 (id=289): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000380)=r1}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x2010}) 2m19.18589392s ago: executing program 2 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 2m19.082857443s ago: executing program 2 (id=293): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5fb8, 0x1, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {}, 0x0, 0x14, 0x0, 0x0, 0x8, 0x2, 0x85ce, 0x9, 0x9, 0x0}) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 2m18.436423426s ago: executing program 2 (id=297): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 2m18.262632923s ago: executing program 32 (id=297): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1m39.821105481s ago: executing program 0 (id=646): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 1m39.395957469s ago: executing program 0 (id=652): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) 1m39.283765489s ago: executing program 0 (id=654): sigaltstack(&(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffda6}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.307626964s ago: executing program 0 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00') 1m38.196547081s ago: executing program 0 (id=662): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m37.624273814s ago: executing program 0 (id=673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x20000, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m37.443126877s ago: executing program 33 (id=673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x5, @empty, 0x12800}}, 0xf, 0x5, 0x20000, 0x2, 0x54, 0x0, 0x4}, 0x9c) 1m1.482898442s ago: executing program 4 (id=1001): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r3, 0x4}, &(0x7f0000000400)=0x8) 1m1.176343659s ago: executing program 4 (id=1002): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040086, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback, 0x200}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x800000017e, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/226, 0xe2, 0x0, 0x0}, &(0x7f0000000340)=0x40) 1m0.935120862s ago: executing program 4 (id=1006): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0xc39c, 0x2, 0x3, 0x1000168}) 1m0.143953643s ago: executing program 4 (id=1015): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) 1m0.010297181s ago: executing program 4 (id=1017): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x8, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x1e0a}], 0x1, 0x40, 0x0) 59.191240602s ago: executing program 4 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x1c, 0x4}, {}, {0x9c5560271e6e948f, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) 58.816811484s ago: executing program 34 (id=1022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x1c, 0x4}, {}, {0x9c5560271e6e948f, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0) 16.301303358s ago: executing program 5 (id=1678): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000000ac0)=""/224, 0xe0}], 0x3}}], 0x1, 0x41, 0x0) 16.095640091s ago: executing program 5 (id=1682): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000014c0)=@newtfilter={0x130, 0x2c, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0xb, 0xffe0}, {0x6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x12}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x41}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xb4, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0xfff2}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0xa0, 0x1, [@m_ife={0x6c, 0x19, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x39, 0x6, "37dc0d75cfd825a4d6f98ef9e37f9d5e2eb9d72d914648e6fbddf1e2f64834a17ae9dba6545d139bd97d684e86456d6cd0f86ccb12"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_police={0x30, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}]}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.021657981s ago: executing program 5 (id=1684): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 15.926403085s ago: executing program 5 (id=1687): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1510d0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 15.837405507s ago: executing program 5 (id=1689): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 15.191788915s ago: executing program 5 (id=1705): ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 15.040769505s ago: executing program 35 (id=1705): ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 8.545412134s ago: executing program 6 (id=1824): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 8.254121375s ago: executing program 6 (id=1829): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="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", 0xfe1}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/29, 0x1d}], 0x1}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) 8.093784879s ago: executing program 1 (id=1833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442f"], 0xfdef) 7.397480388s ago: executing program 6 (id=1849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) 7.333245018s ago: executing program 6 (id=1852): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r2, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.219732933s ago: executing program 6 (id=1853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.699866247s ago: executing program 7 (id=1894): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) 5.656792639s ago: executing program 7 (id=1897): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.870426754s ago: executing program 1 (id=1946): syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3596, 0x0, 0x49, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 2.637839481s ago: executing program 6 (id=1951): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 2.523890421s ago: executing program 7 (id=1952): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x49) flock(r2, 0x1) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) 2.279311134s ago: executing program 7 (id=1955): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) flock(r1, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r2, &(0x7f0000000280)=""/191, 0xbf) 1.332239155s ago: executing program 3 (id=1962): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xa}, 0x50) close(0x3) 1.292685974s ago: executing program 1 (id=1963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x22, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}}}}}, 0x0) 1.269400641s ago: executing program 7 (id=1964): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2005}}, 0x10) 1.208252761s ago: executing program 3 (id=1965): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1.185503148s ago: executing program 3 (id=1966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0xe0, &(0x7f0000000040)=0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="6bf8b5b4b98699c3d3314cdcbd30b296", 0x10}], 0x1, 0x0, 0x0, 0x40881}, 0x404c804) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f00000004c0)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f00000002c0)="53c24d173ba6e9445ab279acc7ff9831", 0x10}]) 966.224164ms ago: executing program 3 (id=1967): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x30000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0x9362, 0x0) 896.42502ms ago: executing program 1 (id=1968): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) modify_ldt$write(0x1, &(0x7f00000000c0)={0x8, 0x20000800, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, 0xffffffffffffff2a) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 863.744342ms ago: executing program 7 (id=1969): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 699.452166ms ago: executing program 3 (id=1970): r0 = gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x5) r1 = open(&(0x7f0000000040)='./file4\x00', 0x62142, 0xcc) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x400, r1, &(0x7f0000000200)='=', 0x1, 0x0, 0x0, 0x2}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 695.05073ms ago: executing program 1 (id=1971): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x914fe6b2d24f13bc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xef10, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 508.090077ms ago: executing program 1 (id=1972): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) mmap(&(0x7f0000a53000/0x4000)=nil, 0x4000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x1000) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f000003d000/0x4000)=nil, 0x4000, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1973): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) sendmmsg$sock(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="b7c4e9", 0x3}], 0x1}}], 0x1, 0x40) kernel console output (not intermixed with test programs): : Port device team_slave_1 added [ 73.370054][ T5126] Bluetooth: hci4: command tx timeout [ 73.370149][ T5816] Bluetooth: hci3: command tx timeout [ 73.404594][ T5812] hsr_slave_0: entered promiscuous mode [ 73.405842][ T5812] hsr_slave_1: entered promiscuous mode [ 73.489222][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.489235][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.489259][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.490792][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.490804][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.490827][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.521033][ T5813] hsr_slave_0: entered promiscuous mode [ 73.522456][ T5813] hsr_slave_1: entered promiscuous mode [ 73.523334][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 73.523428][ T5813] Cannot create hsr debugfs directory [ 73.524351][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.524362][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.524385][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.534858][ T5821] hsr_slave_0: entered promiscuous mode [ 73.536015][ T5821] hsr_slave_1: entered promiscuous mode [ 73.537232][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 73.537252][ T5821] Cannot create hsr debugfs directory [ 73.568350][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.568363][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.568386][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.751745][ T5827] hsr_slave_0: entered promiscuous mode [ 73.752447][ T5827] hsr_slave_1: entered promiscuous mode [ 73.752944][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 73.752963][ T5827] Cannot create hsr debugfs directory [ 73.830773][ T5826] hsr_slave_0: entered promiscuous mode [ 73.832198][ T5826] hsr_slave_1: entered promiscuous mode [ 73.832695][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 73.832714][ T5826] Cannot create hsr debugfs directory [ 74.650818][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.697659][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.713803][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.764049][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.854738][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.879200][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.915062][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.965781][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.063631][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.097479][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.146737][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.197951][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.210116][ T5816] Bluetooth: hci2: command tx timeout [ 75.210124][ T5126] Bluetooth: hci1: command tx timeout [ 75.290913][ T5126] Bluetooth: hci0: command tx timeout [ 75.298356][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.342924][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.379772][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.437703][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.450151][ T5126] Bluetooth: hci3: command tx timeout [ 75.450174][ T5816] Bluetooth: hci4: command tx timeout [ 75.509024][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.559132][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.598576][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.642925][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.682600][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.722931][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.757345][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.758138][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.788787][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.788989][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.815387][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.879880][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.909215][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.909335][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.932576][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.959864][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.960585][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.016472][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.035606][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.065878][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.066066][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.113890][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.114046][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.161813][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.213808][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.226061][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.227113][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.271004][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.271092][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.340783][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.379061][ T1430] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.379250][ T1430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.434114][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.434356][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.442244][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.603931][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.701717][ T5812] veth0_vlan: entered promiscuous mode [ 76.771475][ T5812] veth1_vlan: entered promiscuous mode [ 76.852092][ T5827] veth0_vlan: entered promiscuous mode [ 76.879866][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.886453][ T5827] veth1_vlan: entered promiscuous mode [ 76.918653][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.927741][ T5812] veth0_macvtap: entered promiscuous mode [ 76.958930][ T5812] veth1_macvtap: entered promiscuous mode [ 77.024886][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.063649][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.065293][ T5827] veth0_macvtap: entered promiscuous mode [ 77.104974][ T5827] veth1_macvtap: entered promiscuous mode [ 77.107528][ T1430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.126550][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.136133][ T1430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.152387][ T1430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.173725][ T1430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.178302][ T5821] veth0_vlan: entered promiscuous mode [ 77.250577][ T5826] veth0_vlan: entered promiscuous mode [ 77.291351][ T5816] Bluetooth: hci2: command tx timeout [ 77.291375][ T5816] Bluetooth: hci1: command tx timeout [ 77.333426][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.336962][ T5821] veth1_vlan: entered promiscuous mode [ 77.371791][ T5126] Bluetooth: hci0: command tx timeout [ 77.387646][ T5826] veth1_vlan: entered promiscuous mode [ 77.399255][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.477616][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480882][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.485162][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.492831][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.530371][ T5816] Bluetooth: hci3: command tx timeout [ 77.530446][ T5126] Bluetooth: hci4: command tx timeout [ 77.638522][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.638543][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.711357][ T5821] veth0_macvtap: entered promiscuous mode [ 77.720986][ T5826] veth0_macvtap: entered promiscuous mode [ 77.741587][ T5821] veth1_macvtap: entered promiscuous mode [ 77.758296][ T5826] veth1_macvtap: entered promiscuous mode [ 77.833946][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.833962][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.865795][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.867338][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.895426][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.895442][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.908857][ T5813] veth0_vlan: entered promiscuous mode [ 77.916842][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.922841][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.961468][ T1298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.983672][ T1298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.985633][ T5813] veth1_vlan: entered promiscuous mode [ 77.992983][ T1298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003472][ T1298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004552][ T1298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.008190][ T1298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.008229][ T1298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.008262][ T1298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.084227][ T4022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.084243][ T4022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.800363][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.800380][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.861291][ T5813] veth0_macvtap: entered promiscuous mode [ 78.921674][ T5813] veth1_macvtap: entered promiscuous mode [ 78.924000][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.924015][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.069243][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.069260][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.098029][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.152867][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.154493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.154508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.258291][ T1430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258335][ T1430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258369][ T1430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.258401][ T1430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.331275][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 79.370458][ T5816] Bluetooth: hci2: command tx timeout [ 79.370500][ T5126] Bluetooth: hci1: command tx timeout [ 79.450297][ T5126] Bluetooth: hci0: command tx timeout [ 79.539008][ T5942] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.619818][ T5816] Bluetooth: hci3: command tx timeout [ 79.619852][ T5126] Bluetooth: hci4: command tx timeout [ 79.868477][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.868496][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.155513][ T5954] ======================================================= [ 80.155513][ T5954] WARNING: The mand mount option has been deprecated and [ 80.155513][ T5954] and is ignored by this kernel. Remove the mand [ 80.155513][ T5954] option from the mount to silence this warning. [ 80.155513][ T5954] ======================================================= [ 80.217468][ T5954] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 80.457592][ T5951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.563464][ T5955] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.564603][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.564620][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.665359][ T5955] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 80.867059][ T5951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.153077][ T5951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.361946][ T5975] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 81.491561][ T5951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.559098][ T994] cfg80211: failed to load regulatory.db [ 81.682047][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.883796][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 81.883822][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 81.883840][ T9] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 81.883861][ T9] usb 5-1: config 220 has no interface number 1 [ 81.883930][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 81.883948][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 81.887496][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 81.887524][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.887544][ T9] usb 5-1: Product: syz [ 81.887558][ T9] usb 5-1: Manufacturer: syz [ 81.887572][ T9] usb 5-1: SerialNumber: syz [ 82.313042][ T5977] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 82.393598][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 82.393639][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 82.433545][ T9] usb 5-1: USB disconnect, device number 2 [ 82.687167][ T1129] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726808][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.731504][ T12] wlan1: Trigger new scan to find an IBSS to join [ 82.791728][ T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853991][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.548654][ T6008] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 83.570290][ T5917] IPVS: starting estimator thread 0... [ 83.681924][ T6010] IPVS: using max 8 ests per chain, 19200 per kthread [ 84.270321][ T807] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.402226][ T56] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.474207][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.474236][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.474258][ T807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.474298][ T807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.474321][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.496962][ T807] usb 1-1: config 0 descriptor?? [ 84.555601][ T56] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.555616][ T56] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 84.555626][ T56] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.555653][ T56] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.555666][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 84.555680][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.583463][ T56] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.583490][ T56] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.583509][ T56] usb 5-1: Product: syz [ 84.583522][ T56] usb 5-1: Manufacturer: syz [ 84.653937][ T6027] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.701016][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 84.701033][ T56] cdc_wdm 5-1:1.0: skipping garbage [ 84.857300][ T56] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.857327][ T56] cdc_wdm 5-1:1.0: Unknown control protocol [ 85.014964][ T807] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.015000][ T807] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 85.056118][ T5815] usb 5-1: USB disconnect, device number 3 [ 85.162076][ T807] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 85.189439][ T807] usb 1-1: USB disconnect, device number 2 [ 85.296147][ T6041] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.542189][ T6042] fido_id[6042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 85.772204][ T1129] wlan1: Trigger new scan to find an IBSS to join [ 86.339375][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 86.339431][ T6062] bond0: ARP target 128.0.0.0 is already present [ 86.339450][ T6062] bond0: option arp_ip_target: invalid value (128) [ 87.109666][ T6081] Bluetooth: MGMT ver 1.23 [ 87.810133][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.845045][ T6100] netlink: 'syz.1.67': attribute type 12 has an invalid length. [ 87.845064][ T6100] netlink: 'syz.1.67': attribute type 29 has an invalid length. [ 87.845076][ T6100] netlink: 148 bytes leftover after parsing attributes in process `syz.1.67'. [ 87.845108][ T6100] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 87.845121][ T6100] netlink: 23 bytes leftover after parsing attributes in process `syz.1.67'. [ 88.381356][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.531633][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.533905][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.533931][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.533950][ T31] usb 2-1: Product: syz [ 88.533964][ T31] usb 2-1: Manufacturer: syz [ 88.533977][ T31] usb 2-1: SerialNumber: syz [ 88.720062][ T5815] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 88.732489][ T1316] wlan1: Creating new IBSS network, BSSID 26:91:c5:c3:35:87 [ 88.874300][ T5815] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.874329][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.919483][ T5815] usb 5-1: config 0 descriptor?? [ 88.934920][ T5815] cp210x 5-1:0.0: cp210x converter detected [ 89.341109][ T5815] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 89.589244][ T5815] usb 5-1: cp210x converter now attached to ttyUSB0 [ 89.637492][ T31] cdc_ncm 2-1:1.0: bind() failure [ 89.660194][ T31] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 89.666591][ T31] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 89.668086][ T31] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 89.684613][ T31] usb 2-1: USB disconnect, device number 2 [ 89.759450][ T5815] usb 5-1: USB disconnect, device number 4 [ 89.803783][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.922208][ T5815] cp210x 5-1:0.0: device disconnected [ 90.804887][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e823400: rx timeout, send abort [ 90.806512][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e823400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.051790][ T6187] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 91.054362][ T5996] IPVS: starting estimator thread 0... [ 91.151898][ T6193] IPVS: using max 9 ests per chain, 21600 per kthread [ 91.468715][ T5996] kernel write not supported for file /slabinfo (pid: 5996 comm: kworker/0:6) [ 91.561422][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.104'. [ 91.837512][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 91.837729][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 91.837849][ T6226] Zero length message leads to an empty skb [ 92.479038][ T6246] syz.2.116 uses obsolete (PF_INET,SOCK_PACKET) [ 92.901378][ T6258] batadv_slave_1: entered promiscuous mode [ 92.902856][ T6257] batadv_slave_1: left promiscuous mode [ 94.136096][ T6306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.930950][ T6335] netlink: 176 bytes leftover after parsing attributes in process `syz.2.140'. [ 95.302723][ T6349] netlink: 428 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.302770][ T6349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.145'. [ 95.519392][ T37] audit: type=1326 audit(1769217343.325:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.519439][ T37] audit: type=1326 audit(1769217343.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.519477][ T37] audit: type=1326 audit(1769217343.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.519593][ T37] audit: type=1326 audit(1769217343.325:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.519630][ T37] audit: type=1326 audit(1769217343.325:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.554951][ T37] audit: type=1326 audit(1769217343.325:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.556964][ T37] audit: type=1326 audit(1769217343.365:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.557004][ T37] audit: type=1326 audit(1769217343.365:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.557040][ T37] audit: type=1326 audit(1769217343.365:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.557272][ T37] audit: type=1326 audit(1769217343.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6353 comm="syz.0.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1b0962acb9 code=0x7ffc0000 [ 95.876283][ T6362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.922284][ T6030] kernel write not supported for file bpf-map (pid: 6030 comm: kworker/1:8) [ 96.924986][ T6382] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.014375][ T6396] netlink: 116 bytes leftover after parsing attributes in process `syz.3.166'. [ 97.370383][ T6382] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.778862][ T6382] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.800262][ T6415] capability: warning: `syz.2.173' uses 32-bit capabilities (legacy support in use) [ 97.907710][ T6418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.184378][ T6382] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.750497][ T2167] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.800208][ T1298] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.840545][ T1316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.879615][ T4071] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.029341][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.192'. [ 99.087650][ T6460] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.194'. [ 99.199801][ T6457] bond1: entered promiscuous mode [ 99.236999][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.366872][ T6462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.378801][ T6462] bond2: entered promiscuous mode [ 99.379391][ T6462] bond1: (slave bond2): Enslaving as an active interface with an up link [ 99.564644][ T6474] capability: warning: `syz.4.200' uses deprecated v2 capabilities in a way that may be insecure [ 99.567395][ T6474] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 99.567425][ T6474] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off. [ 99.568182][ T6474] overlayfs: overlapping lowerdir path [ 99.660119][ T1234] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.820058][ T1234] usb 1-1: Using ep0 maxpacket: 8 [ 99.823763][ T1234] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 99.823817][ T1234] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.823840][ T1234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.823864][ T1234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.823887][ T1234] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.823926][ T1234] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.823948][ T1234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.119155][ T1234] usb 1-1: usb_control_msg returned -32 [ 100.119203][ T1234] usbtmc 1-1:16.0: can't read capabilities [ 100.478304][ T6498] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 100.850513][ T994] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.000038][ T994] usb 5-1: Using ep0 maxpacket: 8 [ 101.003441][ T994] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 101.003465][ T994] usb 5-1: config 179 has no interface number 0 [ 101.003508][ T994] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 101.003534][ T994] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 101.003561][ T994] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 101.003587][ T994] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 101.003614][ T994] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 101.003641][ T994] usb 5-1: config 179 interface 65 has no altsetting 0 [ 101.003673][ T994] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 101.003696][ T994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.236350][ T994] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 101.408042][ T5161] input input6: unable to receive magic message: -110 [ 101.522480][ T5161] input input6: unable to receive magic message: -71 [ 101.671837][ T5161] input input6: unable to receive magic message: -71 [ 101.786344][ T994] usb 5-1: USB disconnect, device number 5 [ 101.786441][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 102.456941][ T6030] usb 1-1: USB disconnect, device number 3 [ 103.140624][ T6030] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.300050][ T6030] usb 1-1: Using ep0 maxpacket: 16 [ 103.306233][ T6030] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.306264][ T6030] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.306287][ T6030] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.306319][ T6030] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 103.306342][ T6030] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.315962][ T6554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.349337][ T6030] usb 1-1: config 0 descriptor?? [ 103.735246][ T6561] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 103.793435][ T6030] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 103.793468][ T6030] nzxt-smart2 0003:1E71:2009.0002: unknown main item tag 0x0 [ 103.793494][ T6030] nzxt-smart2 0003:1E71:2009.0002: item fetching failed at offset 2/5 [ 103.794301][ T6030] nzxt-smart2 0003:1E71:2009.0002: probe with driver nzxt-smart2 failed with error -22 [ 103.840038][ T1234] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.002056][ T1234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.002089][ T1234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.002132][ T1234] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 104.002156][ T1234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.008561][ T1234] usb 2-1: config 0 descriptor?? [ 104.057347][ T6030] usb 1-1: USB disconnect, device number 4 [ 104.177237][ T31] libceph: connect (1)[c::]:6789 error -101 [ 104.177973][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 104.422917][ T1234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 104.422940][ T1234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 104.422956][ T1234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 104.422971][ T1234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 104.424953][ T1234] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 104.431971][ T6030] libceph: connect (1)[c::]:6789 error -101 [ 104.432135][ T6030] libceph: mon0 (1)[c::]:6789 connect error [ 104.487281][ T1234] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 104.819508][ T1234] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 32: -71 [ 104.819542][ T1234] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -71 [ 104.819587][ T1234] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense [ 104.819605][ T1234] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 104.838365][ T6567] ceph: No mds server is up or the cluster is laggy [ 104.872199][ T1234] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 104.877076][ T1234] usb 2-1: USB disconnect, device number 3 [ 104.943275][ T31] libceph: connect (1)[c::]:6789 error -101 [ 104.943453][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 105.131097][ T6591] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.548577][ T6605] loop8: detected capacity change from 0 to 8 [ 105.586937][ T6605] Dev loop8: unable to read RDB block 8 [ 105.586987][ T6605] loop8: unable to read partition table [ 105.587192][ T6605] loop8: partition table beyond EOD, truncated [ 105.587225][ T6605] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 106.080084][ T6618] netlink: 'syz.4.263': attribute type 4 has an invalid length. [ 106.323884][ T6630] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 106.323884][ T6630] The task syz.0.266 (6630) triggered the difference, watch for misbehavior. [ 106.469108][ T6636] loop8: detected capacity change from 0 to 8 [ 106.487198][ T6636] Dev loop8: unable to read RDB block 8 [ 106.487238][ T6636] loop8: unable to read partition table [ 106.487429][ T6636] loop8: partition table beyond EOD, truncated [ 106.487453][ T6636] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 106.767764][ T6641] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 106.905471][ T6641] netlink: 830 bytes leftover after parsing attributes in process `syz.4.272'. [ 108.729186][ T6687] input: syz1 as /devices/virtual/input/input7 [ 109.781327][ T5126] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.804414][ T1129] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.921665][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.931349][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.932812][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.944744][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.955405][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.065485][ T1129] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.238411][ T1129] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.578531][ T1129] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.619455][ T6715] syz.1.303 (6715) used greatest stack depth: 17528 bytes left [ 110.880521][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 111.369466][ T1129] bridge_slave_1: left allmulticast mode [ 111.369547][ T1129] bridge_slave_1: left promiscuous mode [ 111.391823][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.511151][ T1129] bridge_slave_0: left allmulticast mode [ 111.511176][ T1129] bridge_slave_0: left promiscuous mode [ 111.511409][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.010476][ T5126] Bluetooth: hci3: command tx timeout [ 113.443035][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.691918][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.714432][ T1129] bond0 (unregistering): Released all slaves [ 113.937004][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.937201][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.937356][ T6704] bridge_slave_0: entered allmulticast mode [ 113.964135][ T6704] bridge_slave_0: entered promiscuous mode [ 113.969454][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.969638][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.969789][ T6704] bridge_slave_1: entered allmulticast mode [ 114.004361][ T6704] bridge_slave_1: entered promiscuous mode [ 114.090111][ T5126] Bluetooth: hci3: command tx timeout [ 114.131004][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.143911][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.322239][ T6704] team0: Port device team_slave_0 added [ 115.037397][ T6704] team0: Port device team_slave_1 added [ 115.373877][ T6799] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.418178][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.418191][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.418208][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.438851][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.438864][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.438888][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.831231][ T6809] netlink: 68 bytes leftover after parsing attributes in process `syz.1.333'. [ 116.155348][ T6816] input: syz1 as /devices/virtual/input/input8 [ 116.170079][ T5126] Bluetooth: hci3: command tx timeout [ 116.332916][ T6818] sch_fq: defrate 6 ignored. [ 116.446377][ T6704] hsr_slave_0: entered promiscuous mode [ 116.468489][ T6704] hsr_slave_1: entered promiscuous mode [ 116.468998][ T6704] debugfs: 'hsr0' already exists in 'hsr' [ 116.469019][ T6704] Cannot create hsr debugfs directory [ 116.536236][ T6823] can0: slcan on ptm0. [ 116.690105][ T1129] hsr_slave_0: left promiscuous mode [ 116.710157][ T1129] hsr_slave_1: left promiscuous mode [ 116.719915][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.720782][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.777880][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.777902][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.779244][ T4141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.858943][ T1129] veth1_macvtap: left promiscuous mode [ 116.859089][ T1129] veth0_macvtap: left promiscuous mode [ 116.859503][ T1129] veth1_vlan: left promiscuous mode [ 116.863312][ T1129] veth0_vlan: left promiscuous mode [ 118.250153][ T5126] Bluetooth: hci3: command tx timeout [ 119.180469][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 119.371039][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 121.781324][ T6820] can0 (unregistered): slcan off ptm0. [ 121.921857][ T6850] input: syz1 as /devices/virtual/input/input9 [ 121.929110][ T6849] netlink: 104 bytes leftover after parsing attributes in process `syz.0.356'. [ 122.493665][ T6871] netlink: 'syz.4.353': attribute type 30 has an invalid length. [ 122.581511][ T4141] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.584547][ T4141] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.584588][ T4141] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.584622][ T4141] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.668912][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.768955][ T6704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.920239][ T6704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.039813][ T6704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.436944][ T6704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.601788][ T6902] netlink: 'syz.4.363': attribute type 8 has an invalid length. [ 123.601808][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 123.666476][ T6902] bond0: entered promiscuous mode [ 123.666490][ T6902] bond_slave_0: entered promiscuous mode [ 123.666619][ T6902] bond_slave_1: entered promiscuous mode [ 123.667685][ T6902] gretap0: entered promiscuous mode [ 123.668856][ T6902] hsr1: entered promiscuous mode [ 124.187301][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.227626][ T6704] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.248227][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.248546][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.336927][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.350074][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.597951][ T6934] netlink: 63 bytes leftover after parsing attributes in process `syz.0.372'. [ 125.200738][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.525441][ T6962] netlink: 136 bytes leftover after parsing attributes in process `syz.1.378'. [ 125.525464][ T6962] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 126.040490][ T5815] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.114314][ T6704] veth0_vlan: entered promiscuous mode [ 126.147514][ T6704] veth1_vlan: entered promiscuous mode [ 126.192925][ T5815] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.192952][ T5815] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.192971][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.193020][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.193047][ T5815] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.195039][ T5815] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.195066][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.195086][ T5815] usb 5-1: Product: syz [ 126.195100][ T5815] usb 5-1: Manufacturer: syz [ 126.285764][ T6704] veth0_macvtap: entered promiscuous mode [ 126.285801][ T5815] cdc_wdm 5-1:1.0: skipping garbage [ 126.285816][ T5815] cdc_wdm 5-1:1.0: skipping garbage [ 126.310352][ T5815] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 126.310370][ T5815] cdc_wdm 5-1:1.0: Unknown control protocol [ 126.321774][ T6704] veth1_macvtap: entered promiscuous mode [ 126.429198][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.448323][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.504470][ T1430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.504528][ T1430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.504576][ T1430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.504608][ T1430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.631336][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 126.877516][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -EPIPE [ 126.899801][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.899818][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.971510][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.971526][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.106132][ T6030] usb 5-1: USB disconnect, device number 6 [ 128.204301][ T7026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.514573][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.401'. [ 128.572523][ T7039] netlink: 'syz.5.401': attribute type 1 has an invalid length. [ 128.572541][ T7039] netlink: 'syz.5.401': attribute type 2 has an invalid length. [ 129.010090][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.175141][ T5888] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 129.175171][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.190641][ T5888] usb 5-1: config 0 descriptor?? [ 129.211021][ T5888] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 129.407825][ T5888] gp8psk: usb in 128 operation failed. [ 129.408442][ T5888] gp8psk: usb in 137 operation failed. [ 129.408468][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.409641][ T5888] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 129.409732][ T5888] usb 5-1: media controller created [ 129.559412][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.711191][ T5888] gp8psk_fe: Frontend attached [ 129.711555][ T5888] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 129.712601][ T5888] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 129.972502][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 129.972518][ T5888] gp8psk: found Genpix USB device pID = 203 (hex) [ 130.223386][ T5888] usb 5-1: USB disconnect, device number 7 [ 130.408346][ T5888] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 131.307173][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 131.469247][ T7107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.359915][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 132.366971][ T37] audit: type=1800 audit(1769217380.165:22): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.439" name="bus" dev="tmpfs" ino=553 res=0 errno=0 [ 132.736934][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736992][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319517][ T7163] netlink: 80 bytes leftover after parsing attributes in process `syz.1.452'. [ 133.998953][ T5875] IPVS: starting estimator thread 0... [ 134.006383][ T7179] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 134.082342][ T7183] IPVS: using max 8 ests per chain, 19200 per kthread [ 135.230907][ T31] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 135.430624][ T31] usb 5-1: config 4 has an invalid interface number: 116 but max is 0 [ 135.430652][ T31] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 135.430669][ T31] usb 5-1: config 4 has no interface number 0 [ 135.430712][ T31] usb 5-1: config 4 interface 116 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 135.430740][ T31] usb 5-1: config 4 interface 116 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 135.436655][ T31] usb 5-1: New USB device found, idVendor=257a, idProduct=260b, bcdDevice=84.8c [ 135.436675][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.436685][ T31] usb 5-1: Product: syz [ 135.436693][ T31] usb 5-1: Manufacturer: syz [ 135.436700][ T31] usb 5-1: SerialNumber: syz [ 136.073070][ T31] option 5-1:4.116: GSM modem (1-port) converter detected [ 136.090918][ T5917] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.106446][ T31] usb 5-1: USB disconnect, device number 8 [ 136.139061][ T31] option 5-1:4.116: device disconnected [ 136.241065][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 136.246764][ T5917] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 136.246788][ T5917] usb 2-1: config 0 has no interface number 0 [ 136.273641][ T5917] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 136.273667][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.273687][ T5917] usb 2-1: Product: syz [ 136.273701][ T5917] usb 2-1: Manufacturer: syz [ 136.273713][ T5917] usb 2-1: SerialNumber: syz [ 136.314978][ T5917] usb 2-1: config 0 descriptor?? [ 136.328832][ T5917] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 136.612693][ T5917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 136.685561][ T5917] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 136.965943][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 136.966698][ T5895] usb 2-1: USB disconnect, device number 4 [ 136.992454][ T5895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 137.030960][ T5895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 137.042889][ T5895] quatech2 2-1:0.51: device disconnected [ 137.598277][ T7291] input: syz1 as /devices/virtual/input/input10 [ 137.754235][ T6877] udevd[6877]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 138.009075][ T7309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.512'. [ 138.009095][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 138.009114][ T7309] netlink: 3 bytes leftover after parsing attributes in process `syz.3.512'. [ 138.686200][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.522'. [ 138.865050][ T7335] binder: 7334:7335 ioctl c0306201 0 returned -14 [ 138.865515][ T7335] binder: 7334:7335 ioctl 89e0 0 returned -22 [ 139.501995][ T7357] sctp: [Deprecated]: syz.5.532 (pid 7357) Use of int in max_burst socket option deprecated. [ 139.501995][ T7357] Use struct sctp_assoc_value instead [ 139.673967][ T7365] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 140.384786][ T7401] netlink: 27 bytes leftover after parsing attributes in process `syz.3.550'. [ 141.025431][ T7424] 9pnet: p9_errstr2errno: server reported unknown error [ 143.024530][ T7501] loop8: detected capacity change from 0 to 7 [ 143.043471][ T6843] Dev loop8: unable to read RDB block 7 [ 143.043512][ T6843] loop8: unable to read partition table [ 143.043736][ T6843] loop8: partition table beyond EOD, truncated [ 143.077221][ T7501] Dev loop8: unable to read RDB block 7 [ 143.077249][ T7501] loop8: unable to read partition table [ 143.077364][ T7501] loop8: partition table beyond EOD, truncated [ 143.077385][ T7501] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 143.840171][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.990138][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 143.997654][ T5888] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 143.997678][ T5888] usb 5-1: config 0 has no interface number 0 [ 143.997721][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 143.997744][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 143.997769][ T5888] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.997794][ T5888] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.997834][ T5888] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 143.997856][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.041230][ T5888] usb 5-1: config 0 descriptor?? [ 144.120825][ T5888] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 144.261412][ T5815] usb 5-1: USB disconnect, device number 9 [ 144.265927][ T5815] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 144.311137][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.462370][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.462416][ T5917] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 144.462439][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.503021][ T5917] usb 4-1: config 0 descriptor?? [ 144.640031][ T5815] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 144.800104][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 144.816662][ T5815] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.816686][ T5815] usb 5-1: config 0 has no interface number 0 [ 144.818545][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.818574][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.818600][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.818679][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.818722][ T5815] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.818745][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.930178][ T5815] usb 5-1: config 0 descriptor?? [ 144.974561][ T5888] kernel read not supported for file /vcs (pid: 5888 comm: kworker/1:5) [ 144.988738][ T5815] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 145.101851][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 145.101965][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 145.124544][ T5917] usb 4-1: USB disconnect, device number 2 [ 145.136027][ T5888] usb 5-1: USB disconnect, device number 10 [ 145.162218][ T5888] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 145.964649][ T7598] mmap: syz.5.616 (7598) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.191025][ T37] audit: type=1326 audit(1769217394.005:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7604 comm="syz.5.620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694356acb9 code=0x0 [ 146.669546][ T7629] : renamed from wg2 (while UP) [ 146.843498][ T7635] netlink: 9 bytes leftover after parsing attributes in process `syz.0.632'. [ 146.850360][ T7635] 0: renamed from hsr0 (while UP) [ 146.957567][ T7635] 0: entered allmulticast mode [ 146.957587][ T7635] hsr_slave_0: entered allmulticast mode [ 146.957604][ T7635] hsr_slave_1: entered allmulticast mode [ 146.959472][ T7635] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 147.343557][ T7652] Illegal XDP return value 841601360 on prog (id 61) dev N/A, expect packet loss! [ 147.785288][ T810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 148.600110][ T5888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.750086][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 148.753470][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.753499][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.753521][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.753560][ T5888] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 148.753656][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.830262][ T5888] usb 5-1: config 0 descriptor?? [ 149.276813][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276848][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276876][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276902][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276928][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276955][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.276981][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.277007][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.277033][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.277059][ T5888] hid-multitouch 0003:0457:07DA.0004: unknown main item tag 0x0 [ 149.380094][ T5888] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 149.680335][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 150.390048][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.540009][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 150.555680][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 150.555708][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 150.555729][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 150.555750][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 150.555774][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 150.567603][ T5888] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 150.567629][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.567648][ T5888] usb 2-1: Product: syz [ 150.567661][ T5888] usb 2-1: Manufacturer: syz [ 150.567675][ T5888] usb 2-1: SerialNumber: syz [ 150.660544][ T5888] usb 2-1: config 0 descriptor?? [ 150.706449][ T1316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.782283][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.805466][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.818359][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.821558][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.824200][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.957769][ T1316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.085924][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.086369][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.086791][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.087224][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.087693][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.089240][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.090620][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.105782][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.143469][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.143876][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.144331][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.149410][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.149845][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.183311][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.183911][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.190109][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.190606][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.191038][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.191476][ T5888] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 151.191529][ T5888] input input11: Timeout waiting for response from device. [ 151.243857][ T5888] usb 2-1: USB disconnect, device number 5 [ 151.387966][ T5917] usb 5-1: USB disconnect, device number 11 [ 151.426616][ T1316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.834984][ T1316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.004943][ T7762] Invalid source name [ 152.226583][ T7742] chnl_net:caif_netlink_parms(): no params data found [ 152.398467][ T37] audit: type=1326 audit(1769217400.205:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.422889][ T37] audit: type=1326 audit(1769217400.235:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.424610][ T37] audit: type=1326 audit(1769217400.235:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.425525][ T37] audit: type=1326 audit(1769217400.235:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.425569][ T37] audit: type=1326 audit(1769217400.235:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.428501][ T37] audit: type=1326 audit(1769217400.235:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.451289][ T37] audit: type=1326 audit(1769217400.265:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.454003][ T37] audit: type=1326 audit(1769217400.265:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.454043][ T37] audit: type=1326 audit(1769217400.235:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.454086][ T37] audit: type=1326 audit(1769217400.265:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7774 comm="syz.1.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06a31dacb9 code=0x7ffc0000 [ 152.890505][ T5816] Bluetooth: hci0: command tx timeout [ 153.007733][ T1316] bridge_slave_1: left allmulticast mode [ 153.007759][ T1316] bridge_slave_1: left promiscuous mode [ 153.007988][ T1316] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.111660][ T1316] bridge_slave_0: left allmulticast mode [ 153.111682][ T1316] bridge_slave_0: left promiscuous mode [ 153.111849][ T1316] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.970188][ T5816] Bluetooth: hci0: command tx timeout [ 155.523213][ T1316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.601399][ T1316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.645249][ T1316] bond0 (unregistering): Released all slaves [ 155.662527][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.662651][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.662812][ T7742] bridge_slave_0: entered allmulticast mode [ 155.665015][ T7742] bridge_slave_0: entered promiscuous mode [ 155.688275][ T7825] netlink: 52 bytes leftover after parsing attributes in process `syz.5.708'. [ 155.774806][ T7854] input: syz1 as /devices/virtual/input/input12 [ 155.852777][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.853050][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.853285][ T7742] bridge_slave_1: entered allmulticast mode [ 155.855614][ T7742] bridge_slave_1: entered promiscuous mode [ 156.475266][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.524605][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.593942][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.801556][ T7888] 9pnet: p9_errstr2errno: server reported unknown error  [ 157.013951][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.738'. [ 157.051382][ T5816] Bluetooth: hci0: command tx timeout [ 157.067250][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.4.738'. [ 157.559387][ T7742] team0: Port device team_slave_0 added [ 157.579119][ T7742] team0: Port device team_slave_1 added [ 157.831263][ T1316] hsr_slave_0: left promiscuous mode [ 157.870037][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.870341][ T1316] hsr_slave_1: left promiscuous mode [ 157.873121][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.873144][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.908565][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.908587][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.022868][ T5917] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 158.022896][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.022911][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.022922][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 158.023803][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 158.023818][ T5917] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 158.023829][ T5917] usb 6-1: Manufacturer: syz [ 158.038946][ T5917] usb 6-1: config 0 descriptor?? [ 158.158844][ T1316] veth1_macvtap: left promiscuous mode [ 158.158941][ T1316] veth0_macvtap: left promiscuous mode [ 158.159179][ T1316] veth1_vlan: left promiscuous mode [ 158.159341][ T1316] veth0_vlan: left promiscuous mode [ 158.463019][ T5917] hid_parser_main: 24 callbacks suppressed [ 158.463034][ T5917] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 158.468720][ T5917] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 158.744697][ T56] usb 6-1: USB disconnect, device number 2 [ 159.130290][ T5816] Bluetooth: hci0: command tx timeout [ 159.238428][ T7937] input: syz1 as /devices/virtual/input/input13 [ 159.552243][ T7948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.758'. [ 160.730091][ T1234] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 160.894318][ T1234] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.894343][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.894356][ T1234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.894368][ T1234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.894391][ T1234] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.894403][ T1234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.906116][ T1234] usb 5-1: config 0 descriptor?? [ 160.969020][ T1316] team0 (unregistering): Port device team_slave_1 removed [ 161.184155][ T1316] team0 (unregistering): Port device team_slave_0 removed [ 161.334664][ T1234] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.334699][ T1234] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.334728][ T1234] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.334754][ T1234] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.334781][ T1234] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 161.349376][ T1234] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 161.612980][ T5917] usb 5-1: USB disconnect, device number 12 [ 163.071120][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.071136][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.071161][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.126598][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.126607][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.126621][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.344027][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 163.344044][ T37] audit: type=1326 audit(1769217411.155:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7980 comm="syz.4.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b2a1facb9 code=0x7fc00000 [ 163.354587][ T7742] hsr_slave_0: entered promiscuous mode [ 163.358646][ T7742] hsr_slave_1: entered promiscuous mode [ 163.525866][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 163.690047][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 163.693208][ T5917] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 163.693232][ T5917] usb 6-1: config 0 has no interface number 0 [ 163.693263][ T5917] usb 6-1: config 0 interface 88 has no altsetting 0 [ 163.699908][ T5917] usb 6-1: New USB device found, idVendor=0856, idProduct=bc01, bcdDevice=48.e7 [ 163.700146][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.700167][ T5917] usb 6-1: Product: syz [ 163.700180][ T5917] usb 6-1: Manufacturer: syz [ 163.700201][ T5917] usb 6-1: SerialNumber: syz [ 163.773318][ T5917] usb 6-1: config 0 descriptor?? [ 164.434455][ T5917] mos7840 6-1:0.88: required endpoints missing [ 164.466396][ T5917] usb 6-1: USB disconnect, device number 3 [ 164.493679][ T1316] IPVS: stop unused estimator thread 0... [ 165.033006][ T7742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 165.174040][ T7742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 165.280648][ T7742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 165.359076][ T7742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 165.825231][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.909131][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.994313][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.994501][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.023277][ T810] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.029080][ T810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.307909][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 166.307923][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 166.307945][ T8083] netlink: 'syz.3.803': attribute type 7 has an invalid length. [ 166.382830][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 166.382850][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 166.382874][ T8083] netlink: 'syz.3.803': attribute type 7 has an invalid length. [ 166.391264][ T1298] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.407573][ T810] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.407614][ T810] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.407648][ T810] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.475504][ T56] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.622820][ T56] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 166.622851][ T56] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 166.622876][ T56] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 166.622893][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.671298][ T8079] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 167.047726][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.619089][ T8113] block nbd3: NBD_DISCONNECT [ 167.628977][ T8113] block nbd3: Send disconnect failed -107 [ 167.641691][ T8111] block nbd3: Disconnected due to user request. [ 167.641710][ T8111] block nbd3: shutting down sockets [ 167.827357][ T7742] veth0_vlan: entered promiscuous mode [ 167.885467][ T7742] veth1_vlan: entered promiscuous mode [ 168.023495][ T7742] veth0_macvtap: entered promiscuous mode [ 168.045799][ T7742] veth1_macvtap: entered promiscuous mode [ 168.050988][ T56] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 168.063503][ T56] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input15 [ 168.123852][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.322864][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.420772][ T810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.425194][ T1298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.450191][ T1298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.450223][ T1298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.629742][ T56] usb 6-1: USB disconnect, device number 4 [ 168.629816][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 169.035854][ T8128] Bluetooth: MGMT ver 1.23 [ 169.108650][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.108668][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.672962][ T4141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.672983][ T4141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.234516][ T8154] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 170.720111][ T8170] sock: sock_set_timeout: `syz.3.822' (pid 8170) tries to set negative timeout [ 171.530077][ T5917] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 171.690303][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 171.694473][ T5917] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.694503][ T5917] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.694543][ T5917] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 171.694565][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.761943][ T5917] usb 7-1: config 0 descriptor?? [ 172.192811][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192847][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192874][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192900][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192926][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192953][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.192979][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.193005][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.193031][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.193057][ T5917] dragonrise 0003:0079:0011.0007: unknown main item tag 0x0 [ 172.193082][ T5917] dragonrise 0003:0079:0011.0007: item fetching failed at offset 10/11 [ 172.193842][ T5917] dragonrise 0003:0079:0011.0007: parse failed [ 172.193908][ T5917] dragonrise 0003:0079:0011.0007: probe with driver dragonrise failed with error -22 [ 172.405828][ T56] usb 7-1: USB disconnect, device number 2 [ 172.508170][ T8229] loop8: detected capacity change from 0 to 8 [ 172.524799][ T8229] Dev loop8: unable to read RDB block 8 [ 172.524841][ T8229] loop8: unable to read partition table [ 172.525049][ T8229] loop8: partition table beyond EOD, truncated [ 172.525066][ T8229] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 173.100822][ T5895] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.250189][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 173.260210][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.260258][ T5895] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.260285][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 173.260315][ T5895] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 173.260337][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.274836][ T5895] usb 2-1: config 0 descriptor?? [ 173.316813][ T5895] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 173.501910][ T8240] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.848'. [ 173.517350][ T5917] usb 2-1: USB disconnect, device number 6 [ 175.250044][ T5815] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.418200][ T5815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 175.418231][ T5815] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 175.426031][ T5815] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 175.426066][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.426085][ T5815] usb 5-1: Product: syz [ 175.426100][ T5815] usb 5-1: Manufacturer: syz [ 175.426114][ T5815] usb 5-1: SerialNumber: syz [ 175.493516][ T5815] usb 5-1: config 0 descriptor?? [ 175.496008][ T8289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.496121][ T8289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.607014][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 175.728900][ T8289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.729023][ T8289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.140447][ T5815] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 176.542058][ T5815] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 176.647262][ T5815] usb 5-1: USB disconnect, device number 13 [ 177.607956][ T8360] overlay: Bad value for 'workdir' [ 178.118012][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.5.905'. [ 178.132773][ T8376] sctp: [Deprecated]: syz.3.904 (pid 8376) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.132773][ T8376] Use struct sctp_sack_info instead [ 178.894237][ T8397] overlay: filesystem on ./file0 not supported [ 179.930145][ T1234] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.094181][ T1234] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.094211][ T1234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.094281][ T1234] usb 2-1: Product: syz [ 180.094296][ T1234] usb 2-1: Manufacturer: syz [ 180.094310][ T1234] usb 2-1: SerialNumber: syz [ 180.136884][ T1234] usb 2-1: config 0 descriptor?? [ 180.570814][ T5888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 180.601956][ T1234] usb 2-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (88) [ 180.722161][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 180.722194][ T5888] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 180.722233][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 180.722269][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.775779][ T8463] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 180.805360][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.811050][ T1234] usb 2-1: no permanent extended address found, random address set [ 180.811150][ T1234] usb 2-1: atusb_probe: initialization failed, error = -524 [ 180.811663][ T1234] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 181.017766][ T10] usb 2-1: USB disconnect, device number 7 [ 181.030041][ T1234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 181.105379][ T5888] usb 5-1: USB disconnect, device number 14 [ 181.192339][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.192369][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.192399][ T1234] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.192419][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.311131][ T1234] usb 4-1: config 0 descriptor?? [ 181.536877][ T8487] loop8: detected capacity change from 0 to 8 [ 181.552689][ T8487] Dev loop8: unable to read RDB block 8 [ 181.552731][ T8487] loop8: unable to read partition table [ 181.553024][ T8487] loop8: partition table beyond EOD, truncated [ 181.553041][ T8487] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 181.751286][ T1234] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 181.768914][ T1234] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input16 [ 182.269452][ T1234] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 182.322598][ T1234] usb 4-1: USB disconnect, device number 3 [ 182.629384][ T8517] fido_id[8517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 183.083844][ T8548] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.049573][ T8570] netlink: 9 bytes leftover after parsing attributes in process `syz.5.975'. [ 184.095689][ T8570] gretap0: entered promiscuous mode [ 184.161028][ T8573] gretap0: left promiscuous mode [ 184.251346][ T8573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.970551][ T56] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 185.120038][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 185.123887][ T56] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 185.123911][ T56] usb 2-1: config 0 has no interface number 0 [ 185.126208][ T56] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 185.126236][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.126255][ T56] usb 2-1: Product: syz [ 185.126270][ T56] usb 2-1: Manufacturer: syz [ 185.126284][ T56] usb 2-1: SerialNumber: syz [ 185.196711][ T56] usb 2-1: config 0 descriptor?? [ 185.213589][ T56] asix 2-1:0.251: probe with driver asix failed with error -22 [ 185.325610][ T8628] loop8: detected capacity change from 0 to 8 [ 185.342171][ T8628] Dev loop8: unable to read RDB block 8 [ 185.342213][ T8628] loop8: unable to read partition table [ 185.342418][ T8628] loop8: partition table beyond EOD, truncated [ 185.342452][ T8628] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 185.482595][ T8634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.494636][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.495125][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.521368][ T1234] usb 2-1: USB disconnect, device number 8 [ 186.020043][ T1234] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 186.174868][ T1234] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 186.174897][ T1234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.209214][ T1234] usb 2-1: config 0 descriptor?? [ 186.222021][ T1234] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 186.428026][ T1234] gp8psk: usb in 128 operation failed. [ 186.428493][ T1234] gp8psk: usb in 137 operation failed. [ 186.428508][ T1234] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 186.428546][ T1234] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 186.537800][ T1234] usb 2-1: USB disconnect, device number 9 [ 186.886424][ T37] audit: type=1326 audit(1769217434.695:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8681 comm="syz.3.1004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd17c6cacb9 code=0x0 [ 187.685105][ T8709] input: syz1 as /devices/virtual/input/input17 [ 187.810191][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.844375][ T5888] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 187.891375][ T5888] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.962002][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.964584][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 187.964612][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 187.964632][ T31] usb 2-1: Product: syz [ 187.964646][ T31] usb 2-1: Manufacturer: syz [ 187.964660][ T31] usb 2-1: SerialNumber: syz [ 188.130511][ T8716] futex_wake_op: syz.6.1018 tries to shift op by 32; fix this program [ 188.216318][ T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.591293][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 188.653839][ T8724] macvtap1: entered promiscuous mode [ 188.656228][ T8724] macvtap1: entered allmulticast mode [ 188.656296][ T8724] veth1_vlan: entered allmulticast mode [ 188.771864][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.771893][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.773155][ T31] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 188.773180][ T31] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 188.773199][ T31] usb 6-1: Manufacturer: syz [ 188.779069][ T31] usb 6-1: config 0 descriptor?? [ 189.422317][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.435074][ T1234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.447786][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.466459][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.476508][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.477510][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.612695][ T1234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.612739][ T1234] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.612806][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.671907][ T31] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 189.672014][ T31] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 189.672031][ T31] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 189.672080][ T31] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 189.672166][ T31] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 189.686813][ T31] usb 6-1: USB disconnect, device number 5 [ 189.767236][ T1234] usb 4-1: config 0 descriptor?? [ 190.191833][ T1234] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 190.237842][ T1234] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input18 [ 190.307929][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.307956][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.677618][ T1234] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 190.718451][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.718483][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.796239][ T5888] usb 4-1: USB disconnect, device number 4 [ 190.907568][ T8756] fido_id[8756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 191.241142][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.241176][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.560812][ T8775] loop8: detected capacity change from 0 to 8 [ 191.586252][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.586283][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.590698][ T8775] Dev loop8: unable to read RDB block 8 [ 191.590745][ T8775] loop8: unable to read partition table [ 191.590942][ T8775] loop8: partition table beyond EOD, truncated [ 191.592005][ T8775] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 191.693087][ T5816] Bluetooth: hci1: command tx timeout [ 192.087156][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 192.545014][ T37] audit: type=1326 audit(1769217440.355:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8801 comm="syz.5.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f6943564ad7 code=0x0 [ 192.867645][ T58] bridge_slave_1: left allmulticast mode [ 192.867671][ T58] bridge_slave_1: left promiscuous mode [ 192.867889][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.941672][ T58] bridge_slave_0: left allmulticast mode [ 192.941697][ T58] bridge_slave_0: left promiscuous mode [ 192.941902][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.780925][ T5816] Bluetooth: hci1: command tx timeout [ 194.176902][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176967][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.443966][ T8837] Bluetooth: hci0: unsupported parameter 255 [ 194.443988][ T8837] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 194.652030][ T58] gretap0 (unregistering): left promiscuous mode [ 194.995482][ T5888] usb 2-1: USB disconnect, device number 10 [ 195.004323][ T5888] usblp0: removed [ 195.301403][ T6578] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.459144][ T58] bond0 (unregistering): left promiscuous mode [ 195.459165][ T58] bond_slave_0: left promiscuous mode [ 195.459369][ T58] bond_slave_1: left promiscuous mode [ 195.494129][ T6578] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.494160][ T6578] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.494198][ T6578] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.494220][ T6578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.555331][ T8848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.559857][ T6578] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.562345][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 195.562365][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 195.695494][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.773436][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.788337][ T5888] usb 4-1: USB disconnect, device number 5 [ 195.815285][ T58] bond0 (unregistering): Released all slaves [ 195.860575][ T5823] Bluetooth: hci1: command tx timeout [ 196.268525][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 196.268558][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 196.614401][ T58] bond1 (unregistering): (slave bond2): Releasing backup interface [ 196.651371][ T58] bond2 (unregistering): left promiscuous mode [ 196.653277][ T8883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.654570][ T58] bond1 (unregistering): Released all slaves [ 197.080074][ T1234] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.251258][ T1234] usb 4-1: Using ep0 maxpacket: 32 [ 197.252933][ T1234] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.252956][ T1234] usb 4-1: config 0 has no interface number 0 [ 197.255132][ T1234] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.255152][ T1234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.255162][ T1234] usb 4-1: Product: syz [ 197.255170][ T1234] usb 4-1: Manufacturer: syz [ 197.255177][ T1234] usb 4-1: SerialNumber: syz [ 197.258872][ T1234] usb 4-1: config 0 descriptor?? [ 197.318435][ T1234] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 197.478961][ T58] bond2 (unregistering): Released all slaves [ 197.497163][ T1234] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 197.530045][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 197.531082][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 197.561664][ T1234] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 197.622984][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.623149][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.624323][ T8734] bridge_slave_0: entered allmulticast mode [ 197.668539][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 197.678891][ T8734] bridge_slave_0: entered promiscuous mode [ 197.820751][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.824919][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.825078][ T8734] bridge_slave_1: entered allmulticast mode [ 197.830508][ T8734] bridge_slave_1: entered promiscuous mode [ 197.906424][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 197.909091][ T5888] usb 4-1: USB disconnect, device number 6 [ 197.918353][ T5888] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 197.930350][ T5820] Bluetooth: hci1: command tx timeout [ 197.945478][ T5888] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.946382][ T5888] quatech2 4-1:0.51: device disconnected [ 198.173221][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 198.320482][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 198.323320][ T31] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 198.323373][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.323395][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.323418][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.323441][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.323481][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.323503][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.452454][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.456605][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.547332][ T31] usb 2-1: usb_control_msg returned -32 [ 198.547376][ T31] usbtmc 2-1:16.0: can't read capabilities [ 198.629041][ T8734] team0: Port device team_slave_0 added [ 198.642570][ T8734] team0: Port device team_slave_1 added [ 199.376194][ T8940] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 199.539167][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.539182][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.539206][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.580466][ T5895] usb 2-1: USB disconnect, device number 11 [ 199.615658][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.615671][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.615696][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.863892][ T58] hsr_slave_0: left promiscuous mode [ 199.922574][ T58] hsr_slave_1: left promiscuous mode [ 199.923400][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.923422][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.951798][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.951819][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.209619][ T58] veth1_macvtap: left promiscuous mode [ 200.226320][ T58] veth0_macvtap: left promiscuous mode [ 200.226504][ T58] veth1_vlan: left promiscuous mode [ 200.226596][ T58] veth0_vlan: left promiscuous mode [ 200.970053][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.970245][ T5820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.239632][ T9001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'. [ 201.910146][ T6578] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 202.079593][ T6578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.079626][ T6578] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.079663][ T6578] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 202.079686][ T6578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.086176][ T6578] usb 2-1: config 0 descriptor?? [ 202.528743][ T6578] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 202.528862][ T6578] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 202.557967][ T6578] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000C/input/input19 [ 202.618805][ T6578] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 202.789999][ T6578] usb 2-1: USB disconnect, device number 12 [ 203.090091][ T5888] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 203.240008][ T5888] usb 7-1: Using ep0 maxpacket: 16 [ 203.241924][ T5888] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.241952][ T5888] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.241964][ T5888] usb 7-1: config 0 interface 0 has no altsetting 0 [ 203.241983][ T5888] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 203.241995][ T5888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.245313][ T5888] usb 7-1: config 0 descriptor?? [ 203.668847][ T5888] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 203.668881][ T5888] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 203.668906][ T5888] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 203.675053][ T9058] loop8: detected capacity change from 0 to 8 [ 203.678959][ T9058] Dev loop8: unable to read RDB block 8 [ 203.679000][ T9058] loop8: unable to read partition table [ 203.679202][ T9058] loop8: partition table beyond EOD, truncated [ 203.679219][ T9058] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 203.783466][ T5888] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 203.906220][ T6578] usb 7-1: USB disconnect, device number 3 [ 203.968403][ T9061] fido_id[9061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 204.070815][ T58] team0 (unregistering): Port device team_slave_1 removed [ 204.117193][ T9069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 204.307049][ T9072] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1161'. [ 204.381342][ T58] team0 (unregistering): Port device team_slave_0 removed [ 204.848308][ T31] libceph: connect (1)[c::]:6789 error -101 [ 204.849470][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 204.855216][ T31] libceph: connect (1)[c::]:6789 error -101 [ 204.855379][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 204.876762][ T9085] ceph: No mds server is up or the cluster is laggy [ 206.796594][ T9097] wg2: entered promiscuous mode [ 206.796620][ T9097] wg2: entered allmulticast mode [ 206.835536][ T9110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1177'. [ 207.245434][ T8734] hsr_slave_0: entered promiscuous mode [ 207.246241][ T8734] hsr_slave_1: entered promiscuous mode [ 207.246748][ T8734] debugfs: 'hsr0' already exists in 'hsr' [ 207.246764][ T8734] Cannot create hsr debugfs directory [ 207.269777][ T9124] bridge0: port 3(netdevsim0) entered blocking state [ 207.272820][ T9124] bridge0: port 3(netdevsim0) entered disabled state [ 207.275126][ T9124] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 207.286819][ T9124] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 207.293622][ T9124] bridge0: port 3(netdevsim0) entered blocking state [ 207.299169][ T9124] bridge0: port 3(netdevsim0) entered forwarding state [ 207.660047][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 207.810147][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 207.814246][ T5888] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.814276][ T5888] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.814298][ T5888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 207.814329][ T5888] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 207.814351][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.878261][ T5888] usb 4-1: config 0 descriptor?? [ 208.424853][ T5888] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 208.424890][ T5888] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 208.424917][ T5888] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 208.424943][ T5888] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 208.424969][ T5888] nzxt-smart2 0003:1E71:2009.000E: unknown main item tag 0x0 [ 208.445447][ T5888] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 208.637266][ T1234] usb 4-1: USB disconnect, device number 7 [ 208.748955][ T9164] fido_id[9164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.872462][ T8734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.942716][ T8734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 209.026128][ T8734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 209.123060][ T8734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 209.170085][ T9180] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.1198'. [ 209.515227][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.632575][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.649506][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.662107][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.693354][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.693637][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.458042][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.543708][ T37] audit: type=1326 audit(1769217458.355:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.546044][ T37] audit: type=1326 audit(1769217458.355:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.546193][ T37] audit: type=1326 audit(1769217458.355:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.546351][ T37] audit: type=1326 audit(1769217458.355:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.546683][ T37] audit: type=1326 audit(1769217458.355:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.546821][ T37] audit: type=1326 audit(1769217458.355:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.550834][ T37] audit: type=1326 audit(1769217458.365:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.550876][ T37] audit: type=1326 audit(1769217458.365:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.554250][ T37] audit: type=1326 audit(1769217458.365:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 210.554519][ T37] audit: type=1326 audit(1769217458.365:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9247 comm="syz.6.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb51c54acb9 code=0x7ffc0000 [ 211.459422][ T8734] veth0_vlan: entered promiscuous mode [ 211.488970][ T8734] veth1_vlan: entered promiscuous mode [ 211.526535][ T8734] veth0_macvtap: entered promiscuous mode [ 211.566805][ T8734] veth1_macvtap: entered promiscuous mode [ 211.605646][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1229'. [ 211.650678][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.697331][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.719360][ T1113] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.729884][ T1113] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.734314][ T1113] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.734353][ T1113] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.405143][ T9334] loop2: detected capacity change from 0 to 7 [ 212.442577][ T9334] loop2: [POWERTEC] p1 p2 p3 [ 212.442819][ T9334] loop2: p1 start 2858112850 is beyond EOD, truncated [ 212.442941][ T9334] loop2: p2 size 8453689 extends beyond EOD, truncated [ 212.467509][ T9334] loop2: p3 start 89211202 is beyond EOD, truncated [ 212.649838][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.649857][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.657090][ T6843] udevd[6843]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 212.729451][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.729466][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.754589][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 212.843588][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 213.017426][ T9355] veth0: entered promiscuous mode [ 213.018081][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1256'. [ 213.280098][ T5895] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 213.450187][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 213.456556][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 213.456592][ T5895] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.456614][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.468631][ T5895] usb 7-1: config 0 descriptor?? [ 214.099699][ T5895] usb 7-1: USB disconnect, device number 4 [ 214.880914][ T1113] nci: nci_ntf_packet: unknown ntf opcode 0x139 [ 216.414645][ T9557] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1350'. [ 216.485037][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 216.485051][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1353'. [ 216.485066][ T9562] netlink: 'syz.5.1353': attribute type 18 has an invalid length. [ 216.797636][ T1113] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.797721][ T1113] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.797792][ T1113] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.797861][ T1113] Bluetooth: hci5: Frame reassembly failed (-84) [ 216.797938][ T1113] Bluetooth: hci5: Frame reassembly failed (-84) [ 218.099317][ T9645] binder: 9644:9645 ioctl c0306201 200000000640 returned -22 [ 218.670083][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.810303][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 218.811668][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 218.842526][ T5888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.860516][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.860541][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.860560][ T5888] usb 6-1: Product: syz [ 218.860573][ T5888] usb 6-1: Manufacturer: syz [ 218.860587][ T5888] usb 6-1: SerialNumber: syz [ 218.879741][ T5888] usb 6-1: selecting invalid altsetting 1 [ 218.890098][ T5820] Bluetooth: hci0: command 0x0c1a tx timeout [ 218.890165][ T9581] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 219.288389][ T5888] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 219.288468][ T5888] cdc_ncm 6-1:1.0: bind() failure [ 219.316306][ T5888] usb 6-1: USB disconnect, device number 6 [ 220.051299][ T6578] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 220.200051][ T6578] usb 7-1: Using ep0 maxpacket: 8 [ 220.202321][ T6578] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 220.202426][ T6578] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.236153][ T6578] usb 7-1: config 0 descriptor?? [ 220.481022][ T5875] usb 7-1: USB disconnect, device number 5 [ 221.167800][ T9815] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1472'. [ 221.255899][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 221.255913][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 221.520059][ T5895] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 221.673251][ T5895] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.673280][ T5895] usb 7-1: config 0 has no interface number 0 [ 221.673325][ T5895] usb 7-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.673352][ T5895] usb 7-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.673374][ T5895] usb 7-1: config 0 interface 1 has no altsetting 0 [ 221.673406][ T5895] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 221.673430][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.683025][ T5895] usb 7-1: config 0 descriptor?? [ 222.093216][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093240][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093256][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093272][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093287][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093306][ T5895] holtek_mouse 0003:04D9:A067.0010: unknown main item tag 0x0 [ 222.093331][ T5895] holtek_mouse 0003:04D9:A067.0010: item fetching failed at offset 6/8 [ 222.093827][ T5895] holtek_mouse 0003:04D9:A067.0010: hid parse failed: -22 [ 222.093867][ T5895] holtek_mouse 0003:04D9:A067.0010: probe with driver holtek_mouse failed with error -22 [ 222.291667][ T6578] usb 7-1: USB disconnect, device number 6 [ 222.740105][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 222.892612][ T5895] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 222.892640][ T5895] usb 2-1: config 0 has no interface number 0 [ 222.895248][ T5895] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=e6.9c [ 222.895277][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.895297][ T5895] usb 2-1: Product: syz [ 222.895311][ T5895] usb 2-1: Manufacturer: syz [ 222.895326][ T5895] usb 2-1: SerialNumber: syz [ 222.910472][ T5895] usb 2-1: config 0 descriptor?? [ 223.120958][ T10] usb 2-1: USB disconnect, device number 13 [ 223.509534][ T9936] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.600195][ T9993] /dev/nullb0: Can't open blockdev [ 224.830029][ T6578] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 224.987879][ T6578] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 224.987904][ T6578] usb 6-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 224.987951][ T6578] usb 6-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.987979][ T6578] usb 6-1: config 1 interface 0 has no altsetting 0 [ 224.990272][ T6578] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.990302][ T6578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.990323][ T6578] usb 6-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 224.990349][ T6578] usb 6-1: SerialNumber: syz [ 225.242660][ T6578] cdc_ether 6-1:1.0: skipping garbage [ 225.242680][ T6578] cdc_ether 6-1:1.0: skipping garbage [ 225.242927][ T6578] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 225.282457][ T6578] usb 6-1: USB disconnect, device number 7 [ 225.843282][T10044] overlayfs: failed lookup in lower (newroot/292, name='file1', err=-40): overlapping layers [ 227.303924][T10119] Invalid ELF header magic: != ELF [ 227.675717][T10136] loop6: detected capacity change from 0 to 524287999 [ 228.491817][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 229.520131][ T807] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 229.670088][ T807] usb 7-1: Using ep0 maxpacket: 32 [ 229.674991][ T807] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 229.675016][ T807] usb 7-1: config 0 has no interface number 0 [ 229.677349][ T807] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 229.677376][ T807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.677395][ T807] usb 7-1: Product: syz [ 229.677407][ T807] usb 7-1: Manufacturer: syz [ 229.679537][ T807] usb 7-1: SerialNumber: syz [ 229.703189][ T807] usb 7-1: config 0 descriptor?? [ 229.732549][ T807] smsc95xx v2.0.0 [ 229.732568][ T807] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 229.732819][ T807] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 229.805371][T10238] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1640'. [ 231.916860][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 232.092963][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 232.304769][ T5888] usb 7-1: USB disconnect, device number 7 [ 232.994185][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.998683][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.001748][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.026873][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.027569][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.095831][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.375480][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.695160][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.978541][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.346759][T10383] chnl_net:caif_netlink_parms(): no params data found [ 234.938593][ T58] bridge_slave_1: left allmulticast mode [ 234.938621][ T58] bridge_slave_1: left promiscuous mode [ 234.938870][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.062540][ T58] bridge_slave_0: left allmulticast mode [ 235.062566][ T58] bridge_slave_0: left promiscuous mode [ 235.062792][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.134692][ T5820] Bluetooth: hci3: command tx timeout [ 236.059118][ T6578] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 236.069129][ T6578] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.210378][ T5820] Bluetooth: hci3: command tx timeout [ 237.582254][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.640497][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.683221][ T58] bond0 (unregistering): Released all slaves [ 237.756165][T10565] veth2: entered promiscuous mode [ 237.756187][T10565] veth2: entered allmulticast mode [ 237.947762][T10383] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.957225][T10383] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.957389][T10383] bridge_slave_0: entered allmulticast mode [ 237.959639][T10383] bridge_slave_0: entered promiscuous mode [ 238.185413][T10585] fuse: root generation should be zero [ 238.401549][T10383] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.401861][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.402040][T10383] bridge_slave_1: entered allmulticast mode [ 238.404478][T10383] bridge_slave_1: entered promiscuous mode [ 238.497904][T10383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.514989][T10383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.049181][T10383] team0: Port device team_slave_0 added [ 239.200274][T10383] team0: Port device team_slave_1 added [ 239.290581][ T5820] Bluetooth: hci3: command tx timeout [ 239.431465][ T58] hsr_slave_0: left promiscuous mode [ 239.483244][ T58] hsr_slave_1: left promiscuous mode [ 239.485027][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.485050][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.511473][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.511496][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.643729][ T58] veth1_macvtap: left promiscuous mode [ 239.643786][ T58] veth0_macvtap: left promiscuous mode [ 239.643873][ T58] veth1_vlan: left promiscuous mode [ 239.643961][ T58] veth0_vlan: left promiscuous mode [ 241.370295][ T5820] Bluetooth: hci3: command tx timeout [ 242.540717][ T58] team0 (unregistering): Port device team_slave_1 removed [ 242.780777][ T58] team0 (unregistering): Port device team_slave_0 removed [ 244.753856][T10383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.753872][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.753897][T10383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.100972][T10383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.100990][T10383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.101015][T10383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.254408][T10383] hsr_slave_0: entered promiscuous mode [ 245.273821][T10383] hsr_slave_1: entered promiscuous mode [ 245.274720][T10383] debugfs: 'hsr0' already exists in 'hsr' [ 245.274744][T10383] Cannot create hsr debugfs directory [ 245.660065][ T5875] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.811889][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.811941][ T5875] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.811965][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.818020][ T5875] usb 7-1: config 0 descriptor?? [ 245.946368][T10383] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 246.017106][T10383] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 246.044286][ T5875] usbhid 7-1:0.0: can't add hid device: -71 [ 246.044401][ T5875] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 246.077851][ T5875] usb 7-1: USB disconnect, device number 8 [ 246.148411][T10383] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 246.199389][T10383] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 246.345846][ T58] IPVS: stop unused estimator thread 0... [ 246.554173][ T5875] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 246.675545][T10383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.700503][ T5875] usb 7-1: Using ep0 maxpacket: 16 [ 246.705932][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.705977][ T5875] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.706000][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.754654][ T5875] usb 7-1: config 0 descriptor?? [ 246.845713][T10383] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.875005][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.875134][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.933594][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.933765][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.387385][ T5875] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 247.864954][ C1] ================================================================== [ 247.864970][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x106a/0x1240 [ 247.865112][ C1] Read of size 1 at addr ffff88804229ffff by task ktimers/1/29 [ 247.865145][ C1] [ 247.865186][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 247.865241][ C1] Tainted: [L]=SOFTLOCKUP [ 247.865247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 247.865300][ C1] Call Trace: [ 247.865307][ C1] [ 247.865319][ C1] dump_stack_lvl+0xe8/0x150 [ 247.865395][ C1] print_report+0xba/0x230 [ 247.865446][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 247.865515][ C1] kasan_report+0x117/0x150 [ 247.865600][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 247.865678][ C1] mcp2221_raw_event+0x106a/0x1240 [ 247.865756][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.865812][ C1] ? down_trylock+0x50/0xb0 [ 247.865938][ C1] hid_input_report+0x420/0x580 [ 247.866003][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 247.866073][ C1] hid_irq_in+0x47e/0x6d0 [ 247.866126][ C1] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 247.866202][ C1] dummy_timer+0x8a6/0x4710 [ 247.866305][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 247.866373][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.866441][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 247.866508][ C1] __hrtimer_run_queues+0x54c/0xd10 [ 247.866565][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 247.866598][ C1] ? read_tsc+0x9/0x20 [ 247.866653][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 247.866716][ C1] handle_softirqs+0x1de/0x640 [ 247.866772][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 247.866837][ C1] run_ktimerd+0x69/0x100 [ 247.866889][ C1] smpboot_thread_fn+0x541/0xa50 [ 247.866961][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 247.867030][ C1] kthread+0x726/0x8b0 [ 247.867081][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 247.867146][ C1] ? __pfx_kthread+0x10/0x10 [ 247.867211][ C1] ? rt_spin_unlock+0x14f/0x200 [ 247.867264][ C1] ? rt_spin_unlock+0x160/0x200 [ 247.867313][ C1] ? __pfx_kthread+0x10/0x10 [ 247.867384][ C1] ret_from_fork+0x51b/0xa40 [ 247.867436][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 247.867495][ C1] ? __switch_to+0xc82/0x1410 [ 247.867526][ C1] ? __pfx_kthread+0x10/0x10 [ 247.867596][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.867676][ C1] [ 247.867701][ C1] [ 247.867704][ C1] The buggy address belongs to the physical page: [ 247.867738][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804229fdc0 pfn:0x4229f [ 247.867770][ C1] flags: 0x80000000000000(node=0|zone=1) [ 247.867822][ C1] raw: 0080000000000000 dead000000000100 dead000000000122 0000000000000000 [ 247.867868][ C1] raw: ffff88804229fdc0 00000000000c0000 00000000ffffffff 0000000000000000 [ 247.867894][ C1] page dumped because: kasan: bad access detected [ 247.867907][ C1] page_owner tracks the page as freed [ 247.867929][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8797, tgid 8795 (syz.3.1048), ts 192426180161, free_ts 203767662158 [ 247.868009][ C1] post_alloc_hook+0x228/0x280 [ 247.868065][ C1] get_page_from_freelist+0x28bb/0x2950 [ 247.868111][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 247.868142][ C1] alloc_pages_mpol+0xd1/0x380 [ 247.868172][ C1] allocate_slab+0x86/0x3a0 [ 247.868220][ C1] ___slab_alloc+0xaf8/0x13d0 [ 247.868264][ C1] __slab_alloc+0xc5/0x1f0 [ 247.868316][ C1] kmem_cache_alloc_node_noprof+0x1ad/0x6d0 [ 247.868369][ C1] __alloc_skb+0x1d7/0x390 [ 247.868432][ C1] alloc_skb_with_frags+0xca/0x890 [ 247.868481][ C1] sock_alloc_send_pskb+0x884/0x9a0 [ 247.868530][ C1] llc_ui_sendmsg+0x487/0xea0 [ 247.868562][ C1] __sock_sendmsg+0x21c/0x270 [ 247.868640][ C1] sock_sendmsg+0x192/0x290 [ 247.868689][ C1] splice_to_socket+0xae5/0x11f0 [ 247.868720][ C1] direct_splice_actor+0x104/0x160 [ 247.868769][ C1] page last free pid 5888 tgid 5888 stack trace: [ 247.868794][ C1] __free_frozen_pages+0xfc1/0x1130 [ 247.868859][ C1] __put_partials+0x149/0x170 [ 247.868892][ C1] __slab_free+0x2af/0x330 [ 247.868956][ C1] qlist_free_all+0x97/0x100 [ 247.869002][ C1] kasan_quarantine_reduce+0x148/0x160 [ 247.869066][ C1] __kasan_slab_alloc+0x22/0x80 [ 247.869148][ C1] __kmalloc_cache_noprof+0x188/0x6b0 [ 247.869220][ C1] device_create+0x13d/0x300 [ 247.869253][ C1] hidraw_connect+0x219/0x430 [ 247.869300][ C1] hid_connect+0x5bf/0x19d0 [ 247.869351][ C1] hid_hw_start+0xa8/0x120 [ 247.869399][ C1] nzxt_smart2_hid_probe+0x13b/0x3b0 [ 247.869452][ C1] hid_device_probe+0x416/0x7a0 [ 247.869500][ C1] really_probe+0x26d/0xac0 [ 247.869548][ C1] __driver_probe_device+0x18c/0x320 [ 247.869613][ C1] driver_probe_device+0x4f/0x240 [ 247.869664][ C1] [ 247.869668][ C1] Memory state around the buggy address: [ 247.869692][ C1] ffff88804229fe80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.869717][ C1] ffff88804229ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.869744][ C1] >ffff88804229ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 247.869770][ C1] ^ [ 247.869794][ C1] ffff8880422a0000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.869821][ C1] ffff8880422a0080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 247.869844][ C1] ================================================================== [ 247.874055][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.874115][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 247.874177][ C1] Tainted: [L]=SOFTLOCKUP [ 247.874200][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 247.874230][ C1] Call Trace: [ 247.874253][ C1] [ 247.874263][ C1] vpanic+0x1e0/0x670 [ 247.874338][ C1] panic+0xc5/0xd0 [ 247.874396][ C1] ? __pfx_panic+0x10/0x10 [ 247.874469][ C1] ? preempt_schedule_common+0x82/0xd0 [ 247.874543][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 247.874624][ C1] check_panic_on_warn+0x89/0xb0 [ 247.874715][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 247.874789][ C1] end_report+0x6f/0x140 [ 247.874862][ C1] kasan_report+0x128/0x150 [ 247.874936][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 247.875048][ C1] mcp2221_raw_event+0x106a/0x1240 [ 247.875122][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 247.875194][ C1] ? down_trylock+0x50/0xb0 [ 247.875266][ C1] hid_input_report+0x420/0x580 [ 247.875322][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 247.875412][ C1] hid_irq_in+0x47e/0x6d0 [ 247.875458][ C1] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 247.875533][ C1] dummy_timer+0x8a6/0x4710 [ 247.875647][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 247.875720][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 247.875810][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 247.875884][ C1] __hrtimer_run_queues+0x54c/0xd10 [ 247.875942][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 247.875994][ C1] ? read_tsc+0x9/0x20 [ 247.876047][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 247.876102][ C1] handle_softirqs+0x1de/0x640 [ 247.876160][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 247.876217][ C1] run_ktimerd+0x69/0x100 [ 247.876287][ C1] smpboot_thread_fn+0x541/0xa50 [ 247.876343][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 247.876415][ C1] kthread+0x726/0x8b0 [ 247.876487][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 247.876544][ C1] ? __pfx_kthread+0x10/0x10 [ 247.876622][ C1] ? rt_spin_unlock+0x14f/0x200 [ 247.876693][ C1] ? rt_spin_unlock+0x160/0x200 [ 247.876743][ C1] ? __pfx_kthread+0x10/0x10 [ 247.876815][ C1] ret_from_fork+0x51b/0xa40 [ 247.876868][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 247.876920][ C1] ? __switch_to+0xc82/0x1410 [ 247.876972][ C1] ? __pfx_kthread+0x10/0x10 [ 247.877043][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.877122][ C1] [ 247.877458][ C1] Kernel Offset: disabled