last executing test programs: 1m23.270512845s ago: executing program 2 (id=72): syz_usb_connect(0x0, 0x43, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x3c) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r6, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) 1m20.032692934s ago: executing program 2 (id=90): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 1m19.801304909s ago: executing program 2 (id=92): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0xd0, 0x4c, 0x232, 0xd0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'gretap0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0xd0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff, 0x0, 0xffffff], 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x3ff, 0xf2, 0x1, 0xb, 0x8ef1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 1m19.571571902s ago: executing program 2 (id=93): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1fffffffffffffd, 0x0, 0x3, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m18.550507807s ago: executing program 2 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0xa00}}]}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 1m18.226270188s ago: executing program 2 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x6000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 1m17.673607067s ago: executing program 32 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x6000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 17.850621437s ago: executing program 5 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0x1) 16.682288708s ago: executing program 4 (id=362): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x101000, 0x74, 0x28}, 0x18) fchmodat(r0, &(0x7f0000000200)='./file0\x00', 0x194) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb81000200080045000028000000000006907864010101ac1414aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780003"], 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000480)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000440)={@broadcast, @empty, 0x0, "ff4d307d2a3a2c6dd2f517f3408a9c0c000000000200ff00002000", 0x20}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000240)=""/254, &(0x7f0000000040)=0xfe) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x1, 0x1, 0xfffffffffffffffc}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x2, 0x1, 0x10, 0x6}) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x17, &(0x7f0000000400)=[{&(0x7f0000000580)="1400000016004163d25a80648c2594e70fa55360", 0x14}], 0x1}, 0x0) 15.604523433s ago: executing program 0 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000009b00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a636"], 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000206010200000000000000002000fdff140007800800134001a576ea08000640000000010500010006000000050005000a00000005000400000000000900020073797a310000000016000300686173683a6e65742c706f7274"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x4, 0x18020028, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x28, 0x5, 0x8c0020, 0x0, 0xfff9, 0x80000000, 0x8000}}, 0x50) unlink(&(0x7f0000000200)='./file0/file0\x00') statfs(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000005c0)=""/173) 15.262563188s ago: executing program 0 (id=366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000001d40)={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "93c9691928972925723d55c712e63c92b492a3c50c9c3d27093a79585e8b73b3", "8aa4c506a2ba17a29171ce08a1e0f09d", {"c952a7f1f0443ce3114cee3518bfb345"}}}}}}}, 0x0) 15.206017113s ago: executing program 3 (id=367): syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @empty, @void, {@llc={0x4, {@snap={0xaa, 0xff, "af", "0522b4", 0xf6}}}}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) 15.009559154s ago: executing program 5 (id=369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000060000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 14.962463093s ago: executing program 0 (id=370): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x2d, 0x0, 0x1}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x100, @void}}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$loop(&(0x7f0000000040), 0x2dcf032f, 0x8a8480) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 14.655906569s ago: executing program 5 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000efffffff000800050000fcffff08000900fc000000080011000700000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14.486226047s ago: executing program 3 (id=373): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x11a542, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000600)=""/155, 0x9b}], 0x1, 0x4000d, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r0, 0x1004000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x800, 0x1000000, 0x20000}, &(0x7f00000003c0), &(0x7f0000000240)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000006c0)="d4", 0x1}], 0x1}}], 0x2, 0x4000) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x2445, 0x4000, 0x2, 0xcf, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mq_open(&(0x7f00005a1ffb)='[t\xa2\xa7\x1b', 0x40, 0x0, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x58f01) syz_io_uring_submit(r6, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd_index=0x7, 0x1, 0x0, 0x0, 0x3, 0x1, {0x2}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_complete(r6) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 14.465835621s ago: executing program 1 (id=374): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x26) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xfffffffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 14.254637976s ago: executing program 5 (id=375): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}, {0x0, 0x0, 0x0, 0x5, 0xc6, 0x0, 0x20000000}, {0x4, 0xfef2}, 0xfffffffd, 0xfffffffe, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x32}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x40, 0xb}}, 0xe8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x5, 0x0) 12.903667418s ago: executing program 1 (id=376): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) 12.603586372s ago: executing program 5 (id=377): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r3 = mq_open(&(0x7f00000004c0)='!sez\x00\x01\x00\x00\x00,\x9enc.\xd5Z\xeb\xe3\x00\x00\x00\xd7^P\xc1\xde.O\xcb]0y\x00\x00\xd3\x00\x00\x00\x00\x00[?\x1a\xa3\xb7y\xe2q\xe0\x1b&|\x91$G\x1b\t\xae\xe2s\x197\tjy\xbf\x80\xdb\xff\xa1\xed\xa2\xeb>T\xfa\xec}e\x82\xd4`\xea\xce\xdf\"\xb5\x13\x90\xcd_o\xbc\xf1\xb0\xa8\xb0\x1f\xd9\xec8', 0x80, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x81, 0x56, 0x1ff}) syz_clone(0x82809800, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x6a, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r4) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000240)={0x0, 0x8, 0x101, 0xfffff000, 0x10001, 0x4, 0x8000}) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x14, &(0x7f0000000080)=[{&(0x7f00000006c0)=""/240, 0x102}], 0x1, &(0x7f0000000a00)=""/196, 0xff0a}, 0x400001}], 0x1, 0x80, 0x0) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="ab", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x0, 0x0, 0x0, 0x98, 0x220, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@rand_addr=0x64010102, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x6, 0x4}, {0xffffffffffffffff, 0x3}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0xded0ea6186f257ad}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 10.609461925s ago: executing program 3 (id=378): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0xc8, 0x8, 0x1d0, 0x5803, 0x350, 0x2e8, 0x2e8, 0x350, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf, 0x2, "a1f223ccf08101fbc4759f2ae15f10fadf5f0a869512cab6c7b363071794"}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'syz_tun\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x3, 0x5], 0xfe}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 10.033627421s ago: executing program 3 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000040)=0x1) 9.317185446s ago: executing program 1 (id=380): syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300fff5000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}}, 0x0) 7.702951787s ago: executing program 4 (id=381): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x1200, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe106660e6444ef3c3a19c11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d418dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 7.701026965s ago: executing program 1 (id=382): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000040)=""/13, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r1) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xb1e0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 6.794291154s ago: executing program 0 (id=383): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x80105014, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) syz_io_uring_setup(0x404e, &(0x7f0000000180)={0x0, 0x8611, 0x4, 0x4, 0xef}, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) (async, rerun: 64) open(&(0x7f0000000200)='./bus\x00', 0xaa583, 0x1eb) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="8280", 0x2}, {&(0x7f0000000200)="e5000a03d847879268683cf525db15416a954cb1d7e22717396355a22ca2a25b914f8bf220d27f18a620c5d9c70716b98d2b7f5d069ee36231bd5567ec77bc0e087bdd9a6c16a09b5d65a0cdcf67b766", 0x50}], 0x2) r4 = socket(0xc, 0x800, 0x1) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) (async, rerun: 32) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) (async, rerun: 32) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x5, 0x9, 0x3, 0x4, 0x96, 0x5, 0xd5, 0x7, 0x4, 0x10, 0x9, 0x7, 0xb, 0x0, 0x9, 0xa}}) (async, rerun: 32) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ff0f000028"]) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 3.923154674s ago: executing program 0 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="010026bd7400000000d03b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000003b05330000a81000080211000001080211"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.580333761s ago: executing program 4 (id=385): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x80fe) 2.796440519s ago: executing program 3 (id=386): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x26) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xfffffffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 1.985273091s ago: executing program 0 (id=387): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x800, 0x48524742, 0x9, 0x0, [{0x2}, {0x0, 0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x3}], 0x0, 0x0, 0x2, 0x1, 0x9a5102c82c44df4}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000200)={0x4, 0x3, &(0x7f00000001c0)=[0x8, 0x6, 0xe53], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000000000000000100114000b00000000000000000000000000008265396fb803fe81357d43ba19"], 0x20}, 0x0) socket$netlink(0x10, 0x3, 0x14) 1.88284568s ago: executing program 1 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000f50000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1.850786659s ago: executing program 4 (id=389): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0xd0, 0x4c, 0x232, 0xd0, 0x0, 0x1d8, 0x2e8, 0x2e8, 0x1d8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'gretap0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0xa8, 0xd0, 0x600}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff, 0x0, 0xffffff], 0x4e23, 0x4e24, 0x4e20, 0x4e20, 0x3ff, 0xf2, 0x1, 0xb, 0x8ef1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 1.335883959s ago: executing program 5 (id=390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) epoll_create1(0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000021000100000000000000f8f78d4bdd001b73000004000100240015"], 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000009, 0xffffffff, 0x0, 0x0, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r1, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.233566025s ago: executing program 4 (id=391): r0 = userfaultfd(0x80801) (async) mremap(&(0x7f0000392000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) (async) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb5}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x0) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) syz_io_uring_submit(r1, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x88) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0x8000000000008, 0x0, 0x10000000000002, 0x2, 0x800000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffe], 0x1, 0x45212}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) (async) landlock_create_ruleset(&(0x7f00000000c0)={0x1, 0x1, 0x2}, 0x18, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.132929848s ago: executing program 3 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000000}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000001200000188"], 0xffe) 882.956571ms ago: executing program 1 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x633a, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x80000) read$FUSE(r2, &(0x7f0000002c00)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x801) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/17, 0x11}, 0x3}], 0x1, 0x12141, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x38) shutdown(r0, 0x1) 0s ago: executing program 4 (id=394): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2402, 0x0) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x8002, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001400)) read$dsp(r4, &(0x7f0000000180)=""/208, 0xd0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r6 = dup3(r5, r0, 0x0) (rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 83.524489][ T5834] cgroup: Unknown subsys name 'net' [ 83.645210][ T5834] cgroup: Unknown subsys name 'cpuset' [ 83.654277][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.402585][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.665493][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.680399][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.688914][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.702344][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.752057][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.767470][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.768141][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.776557][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.783571][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.792736][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.798499][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.804675][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.818311][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.826245][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.835187][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.898141][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.906989][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.914872][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.916758][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.930161][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.937584][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.950971][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.963614][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.977375][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.994252][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.659417][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 90.701051][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 90.898539][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 90.965433][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 90.998499][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 91.064610][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.073224][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.080708][ T5866] bridge_slave_0: entered allmulticast mode [ 91.089822][ T5866] bridge_slave_0: entered promiscuous mode [ 91.113330][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.120524][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.128097][ T5865] bridge_slave_0: entered allmulticast mode [ 91.135693][ T5865] bridge_slave_0: entered promiscuous mode [ 91.165990][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.173375][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.180618][ T5866] bridge_slave_1: entered allmulticast mode [ 91.188716][ T5866] bridge_slave_1: entered promiscuous mode [ 91.216613][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.224065][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.231315][ T5865] bridge_slave_1: entered allmulticast mode [ 91.238649][ T5865] bridge_slave_1: entered promiscuous mode [ 91.366239][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.379678][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.423178][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.430399][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.438391][ T5867] bridge_slave_0: entered allmulticast mode [ 91.446363][ T5867] bridge_slave_0: entered promiscuous mode [ 91.457418][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.524357][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.532204][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.539420][ T5868] bridge_slave_0: entered allmulticast mode [ 91.547935][ T5868] bridge_slave_0: entered promiscuous mode [ 91.559393][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.567520][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.576079][ T5867] bridge_slave_1: entered allmulticast mode [ 91.583542][ T5867] bridge_slave_1: entered promiscuous mode [ 91.594827][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.619068][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.626471][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.634241][ T5863] bridge_slave_0: entered allmulticast mode [ 91.642581][ T5863] bridge_slave_0: entered promiscuous mode [ 91.659760][ T5866] team0: Port device team_slave_0 added [ 91.666980][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.674672][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.682441][ T5868] bridge_slave_1: entered allmulticast mode [ 91.689727][ T5868] bridge_slave_1: entered promiscuous mode [ 91.724961][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.732698][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.739900][ T5863] bridge_slave_1: entered allmulticast mode [ 91.748738][ T5863] bridge_slave_1: entered promiscuous mode [ 91.757543][ T5866] team0: Port device team_slave_1 added [ 91.806763][ T5865] team0: Port device team_slave_0 added [ 91.841105][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.848310][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.874341][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.908985][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.909606][ T5855] Bluetooth: hci1: command tx timeout [ 91.924678][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.925783][ T977] cfg80211: failed to load regulatory.db [ 91.942783][ T5865] team0: Port device team_slave_1 added [ 91.963636][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.970773][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.997254][ T5855] Bluetooth: hci0: command tx timeout [ 92.002713][ T5850] Bluetooth: hci4: command tx timeout [ 92.008432][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.023181][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.061699][ T5855] Bluetooth: hci2: command tx timeout [ 92.061754][ T5850] Bluetooth: hci3: command tx timeout [ 92.069276][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.094581][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.152834][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.196023][ T5868] team0: Port device team_slave_0 added [ 92.205019][ T5867] team0: Port device team_slave_0 added [ 92.211986][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.218968][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.246522][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.290363][ T5868] team0: Port device team_slave_1 added [ 92.298464][ T5867] team0: Port device team_slave_1 added [ 92.307761][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.315139][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.341207][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.355384][ T5863] team0: Port device team_slave_0 added [ 92.417295][ T5863] team0: Port device team_slave_1 added [ 92.432453][ T5866] hsr_slave_0: entered promiscuous mode [ 92.439031][ T5866] hsr_slave_1: entered promiscuous mode [ 92.475379][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.482572][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.509005][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.549104][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.558943][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.585736][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.611668][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.618648][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.648043][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.659869][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.666925][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.693029][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.717353][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.724885][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.751190][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.793135][ T5865] hsr_slave_0: entered promiscuous mode [ 92.799619][ T5865] hsr_slave_1: entered promiscuous mode [ 92.805997][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.813878][ T5865] Cannot create hsr debugfs directory [ 92.820214][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.827699][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.854204][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.022766][ T5868] hsr_slave_0: entered promiscuous mode [ 93.029260][ T5868] hsr_slave_1: entered promiscuous mode [ 93.035686][ T5868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.043658][ T5868] Cannot create hsr debugfs directory [ 93.054856][ T5867] hsr_slave_0: entered promiscuous mode [ 93.061938][ T5867] hsr_slave_1: entered promiscuous mode [ 93.068103][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.075766][ T5867] Cannot create hsr debugfs directory [ 93.192186][ T5863] hsr_slave_0: entered promiscuous mode [ 93.198563][ T5863] hsr_slave_1: entered promiscuous mode [ 93.205385][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.213822][ T5863] Cannot create hsr debugfs directory [ 93.677421][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.693909][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.705832][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.727093][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.792863][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.825987][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.846473][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.868050][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.917197][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.943140][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.955095][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.972173][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.981848][ T5850] Bluetooth: hci1: command tx timeout [ 94.062607][ T5855] Bluetooth: hci4: command tx timeout [ 94.062595][ T5850] Bluetooth: hci0: command tx timeout [ 94.102634][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.138118][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.141840][ T5855] Bluetooth: hci2: command tx timeout [ 94.145304][ T5850] Bluetooth: hci3: command tx timeout [ 94.161002][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.174800][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.258684][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.276654][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.302893][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.323465][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.340551][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.400214][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.465374][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.472700][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.482944][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.490092][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.532816][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.558555][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.630882][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.665768][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.673067][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.691933][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.723417][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.736943][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.744134][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.766272][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.773447][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.808802][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.816044][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.839557][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.871116][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.878341][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.956916][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.964090][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.001065][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.084649][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.109843][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.148823][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.219721][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.226881][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.257505][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.264721][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.284006][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.295764][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.341274][ T5866] veth0_vlan: entered promiscuous mode [ 95.378412][ T5866] veth1_vlan: entered promiscuous mode [ 95.390159][ T5865] veth0_vlan: entered promiscuous mode [ 95.439520][ T5865] veth1_vlan: entered promiscuous mode [ 95.496765][ T5866] veth0_macvtap: entered promiscuous mode [ 95.514781][ T5863] veth0_vlan: entered promiscuous mode [ 95.545592][ T5866] veth1_macvtap: entered promiscuous mode [ 95.588855][ T5863] veth1_vlan: entered promiscuous mode [ 95.605347][ T5867] veth0_vlan: entered promiscuous mode [ 95.615799][ T5865] veth0_macvtap: entered promiscuous mode [ 95.628490][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.649364][ T5865] veth1_macvtap: entered promiscuous mode [ 95.663792][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.676919][ T5867] veth1_vlan: entered promiscuous mode [ 95.698927][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708397][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718164][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728134][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.772379][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.787825][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.823176][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.870998][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.881009][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.890867][ T5865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.899855][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.951237][ T5867] veth0_macvtap: entered promiscuous mode [ 95.964501][ T5867] veth1_macvtap: entered promiscuous mode [ 95.988996][ T5863] veth0_macvtap: entered promiscuous mode [ 96.012931][ T5863] veth1_macvtap: entered promiscuous mode [ 96.029165][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.039922][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.044125][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.062683][ T5850] Bluetooth: hci1: command tx timeout [ 96.089838][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.105366][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.134440][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.144781][ T5850] Bluetooth: hci4: command tx timeout [ 96.145463][ T5855] Bluetooth: hci0: command tx timeout [ 96.155888][ T5868] veth0_vlan: entered promiscuous mode [ 96.164772][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.173921][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.183341][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192364][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.224081][ T5850] Bluetooth: hci2: command tx timeout [ 96.233480][ T5855] Bluetooth: hci3: command tx timeout [ 96.248254][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.258245][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.267897][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.278864][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.318817][ T5868] veth1_vlan: entered promiscuous mode [ 96.327007][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.335391][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.354984][ T989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.372496][ T989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.449543][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.525515][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.558447][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.594383][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.617013][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.636178][ T5868] veth0_macvtap: entered promiscuous mode [ 96.695916][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.717409][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.769940][ T5868] veth1_macvtap: entered promiscuous mode [ 96.777584][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.805404][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.853501][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.907888][ T5944] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 96.949901][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.956507][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.971621][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.023377][ T5868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.069147][ T5868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.090011][ T5868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.108132][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.125043][ T5868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.205681][ T5953] fuse: Unknown parameter 'group_id00000000000000000000' [ 97.217029][ T5953] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.9'. [ 97.535795][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.592332][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.698247][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.739162][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.781473][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.181222][ T5855] Bluetooth: hci1: command tx timeout [ 98.223168][ T5855] Bluetooth: hci0: command tx timeout [ 98.223502][ T5850] Bluetooth: hci4: command tx timeout [ 98.253101][ T5977] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.289703][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 98.299734][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 98.311990][ T5850] Bluetooth: hci3: command tx timeout [ 98.317428][ T5850] Bluetooth: hci2: command tx timeout [ 98.323595][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 98.336941][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.372182][ T5977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 98.431607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.440548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.474366][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 98.487503][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 98.521598][ T24] usb 5-1: Product: syz [ 98.539023][ T24] usb 5-1: Manufacturer: syz [ 98.575289][ T24] usb 5-1: SerialNumber: syz [ 98.763506][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 98.975817][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10'. [ 99.292650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.306440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.341268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 99.811502][ T6002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.941603][ T5957] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.139237][ T5957] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 100.157730][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.213016][ T5957] usb 3-1: Product: syz [ 100.234936][ T5957] usb 3-1: Manufacturer: syz [ 100.272670][ T5957] usb 3-1: SerialNumber: syz [ 100.348553][ T5957] usb 3-1: config 0 descriptor?? [ 100.492913][ T5957] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 100.946104][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 101.033088][ T5957] gspca_sunplus: reg_r err -110 [ 101.038298][ T5957] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 101.174693][ T5936] usb 5-1: USB disconnect, device number 2 [ 101.222499][ T5936] appletouch 5-1:1.0: input: appletouch disconnected [ 101.481726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.736918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.751965][ T5935] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.888903][ T6030] mmap: syz.1.22 (6030) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.902502][ T5935] usb 5-1: Using ep0 maxpacket: 32 [ 101.909812][ T5935] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 101.918781][ T5935] usb 5-1: config 0 has no interface number 0 [ 101.947136][ T6030] pim6reg: entered allmulticast mode [ 101.982668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.991438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.061784][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.109470][ T5935] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 102.118837][ T5957] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.149655][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.180411][ T5935] usb 5-1: Product: syz [ 102.199359][ T5935] usb 5-1: Manufacturer: syz [ 102.209961][ T5935] usb 5-1: SerialNumber: syz [ 102.252537][ T5935] usb 5-1: config 0 descriptor?? [ 102.327424][ T6026] pim6reg: left allmulticast mode [ 102.359835][ T5957] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 102.373874][ T5935] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 102.391941][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 102.399668][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 102.426591][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 102.442871][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 102.463961][ T5935] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 102.475851][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.491629][ T5935] usb 5-1: media controller created [ 102.502630][ T5957] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 102.521313][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.559992][ T5957] usb 4-1: Product: syz [ 102.574605][ T6025] cxusb: i2c rd: len=133 is too big! [ 102.574605][ T6025] [ 102.574951][ T5957] usb 4-1: Manufacturer: syz [ 102.593498][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.604282][ T5957] usb 4-1: SerialNumber: syz [ 102.753362][ T5957] usb 4-1: config 0 descriptor?? [ 102.863733][ T5936] usb 3-1: USB disconnect, device number 2 [ 102.936816][ T5957] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 102.955268][ T5935] cxusb: set interface failed [ 102.970407][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 102.994984][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.177457][ T5957] usb 4-1: USB disconnect, device number 2 [ 103.254840][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.306937][ T5853] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 103.341042][ T5853] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 103.405277][ T5853] usb 1-1: config 63 has no interface number 0 [ 103.423572][ T5853] usb 1-1: config 63 interface 66 has no altsetting 0 [ 103.456816][ T5853] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 103.474146][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.531316][ T5853] usb 1-1: Product: syz [ 103.596382][ T5935] DVB: Unable to find symbol lgdt330x_attach() [ 103.630169][ T5853] usb 1-1: Manufacturer: syz [ 103.637916][ T5935] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 103.646027][ T5853] usb 1-1: SerialNumber: syz [ 103.807166][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 103.922140][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 104.017204][ T6038] fuse: Unknown parameter 'subj_type' [ 104.436943][ T6051] dummy0: entered promiscuous mode [ 104.493199][ T6051] batadv_slave_1: entered promiscuous mode [ 104.514615][ T6053] dummy0: entered promiscuous mode [ 104.522957][ T6053] batadv_slave_1: entered promiscuous mode [ 104.530823][ T6053] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 104.541847][ T5935] rc_core: IR keymap rc-dvico-portable not found [ 104.548303][ T5935] Registered IR keymap rc-empty [ 104.555787][ T6058] syz.4.29 uses obsolete (PF_INET,SOCK_PACKET) [ 104.580102][ T6053] Cannot create hsr debugfs directory [ 104.594877][ T5935] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 104.619490][ T5935] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 104.665822][ T5935] dvb-usb: schedule remote query interval to 100 msecs. [ 104.682319][ T5935] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 104.719325][ T5935] usb 5-1: USB disconnect, device number 3 [ 105.025826][ T5935] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 105.953536][ T5853] usb 1-1: Found UVC 0.07 device syz (174f:8a31) [ 105.960184][ T5853] usb 1-1: No valid video chain found. [ 106.031304][ T5853] usb 1-1: USB disconnect, device number 2 [ 106.301786][ T5980] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.365358][ T6092] kvm: pic: non byte write [ 106.451243][ T5853] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.474740][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 106.486992][ T5980] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 106.501858][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.519589][ T5980] usb 2-1: Product: syz [ 106.523848][ T977] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.551660][ T5980] usb 2-1: Manufacturer: syz [ 106.556792][ T5980] usb 2-1: SerialNumber: syz [ 106.569434][ T5980] usb 2-1: config 0 descriptor?? [ 106.637269][ T5853] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 106.654868][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 106.667476][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 106.686360][ T977] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.701382][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.709436][ T977] usb 4-1: Product: syz [ 106.710485][ T5853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 106.735194][ T5853] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 106.749032][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.749540][ T977] usb 4-1: Manufacturer: syz [ 106.779249][ T5853] usb 1-1: Product: syz [ 106.779337][ T977] usb 4-1: SerialNumber: syz [ 106.789280][ T5980] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 106.802530][ T5853] usb 1-1: Manufacturer: syz [ 106.807177][ T5853] usb 1-1: SerialNumber: syz [ 106.809143][ T977] usb 4-1: config 0 descriptor?? [ 106.817737][ T6104] fuse: Unknown parameter 'group_id00000000000000000000' [ 106.841591][ T5853] usb 1-1: config 0 descriptor?? [ 106.867193][ T5853] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 106.874692][ T6107] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.45'. [ 107.076897][ T5936] usb 1-1: USB disconnect, device number 3 [ 107.110999][ T6091] tipc: Started in network mode [ 107.129491][ T6091] tipc: Node identity , cluster identity 4711 [ 107.146102][ T6091] tipc: Failed to obtain node identity [ 107.154603][ T6091] tipc: Enabling of bearer rejected, failed to enable media [ 107.171754][ T6113] syzkaller0: entered promiscuous mode [ 107.177832][ T6113] syzkaller0: entered allmulticast mode [ 107.227836][ T5853] usb 4-1: USB disconnect, device number 3 [ 107.329300][ T6111] netlink: 'syz.4.48': attribute type 29 has an invalid length. [ 107.356095][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.48'. [ 107.580873][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 107.850015][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 107.915645][ T6137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.031858][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 108.073757][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 108.470787][ T6151] FAULT_INJECTION: forcing a failure. [ 108.470787][ T6151] name failslab, interval 1, probability 0, space 0, times 1 [ 108.531121][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.4.61 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 108.531150][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.531169][ T6151] Call Trace: [ 108.531178][ T6151] [ 108.531187][ T6151] dump_stack_lvl+0x189/0x250 [ 108.531221][ T6151] ? __pfx____ratelimit+0x10/0x10 [ 108.531242][ T6151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.531264][ T6151] ? __pfx__printk+0x10/0x10 [ 108.531290][ T6151] ? __pfx___might_resched+0x10/0x10 [ 108.531312][ T6151] ? fs_reclaim_acquire+0x7d/0x100 [ 108.531353][ T6151] should_fail_ex+0x414/0x560 [ 108.531380][ T6151] should_failslab+0xa8/0x100 [ 108.531411][ T6151] __kmalloc_noprof+0xcb/0x4f0 [ 108.531438][ T6151] ? sock_kmalloc+0xd6/0x160 [ 108.531462][ T6151] sock_kmalloc+0xd6/0x160 [ 108.531485][ T6151] ____sys_sendmsg+0x1b5/0x830 [ 108.531520][ T6151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.531561][ T6151] ? import_iovec+0x74/0xa0 [ 108.531593][ T6151] ___sys_sendmsg+0x21f/0x2a0 [ 108.531626][ T6151] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.531693][ T6151] ? __fget_files+0x2a/0x420 [ 108.531710][ T6151] ? __fget_files+0x3a0/0x420 [ 108.531738][ T6151] __x64_sys_sendmsg+0x19b/0x260 [ 108.531778][ T6151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.531819][ T6151] ? __pfx_ksys_write+0x10/0x10 [ 108.531842][ T6151] ? rcu_is_watching+0x15/0xb0 [ 108.531871][ T6151] ? do_syscall_64+0xbe/0x3b0 [ 108.531897][ T6151] do_syscall_64+0xfa/0x3b0 [ 108.531919][ T6151] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.531939][ T6151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.531959][ T6151] ? clear_bhb_loop+0x60/0xb0 [ 108.531982][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.532002][ T6151] RIP: 0033:0x7f4e66f8e9a9 [ 108.532024][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.532040][ T6151] RSP: 002b:00007f4e67d50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.532061][ T6151] RAX: ffffffffffffffda RBX: 00007f4e671b6080 RCX: 00007f4e66f8e9a9 [ 108.532075][ T6151] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 108.532087][ T6151] RBP: 00007f4e67d50090 R08: 0000000000000000 R09: 0000000000000000 [ 108.532099][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.532109][ T6151] R13: 0000000000000000 R14: 00007f4e671b6080 R15: 00007f4e672dfa28 [ 108.532139][ T6151] [ 108.771762][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.134703][ T5980] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 109.146651][ T5980] usb 2-1: USB disconnect, device number 2 [ 110.083259][ T6152] pim6reg: entered allmulticast mode [ 110.091450][ T6162] futex_wake_op: syz.0.64 tries to shift op by 32; fix this program [ 110.443077][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 111.103995][ T5957] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.120841][ T6186] netlink: 8 bytes leftover after parsing attributes in process `//('. [ 111.163597][ T6186] netlink: 12 bytes leftover after parsing attributes in process `//('. [ 111.341962][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 111.375655][ T5957] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.394935][ T5957] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 111.424669][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.459290][ T6192] netlink: 'syz.3.75': attribute type 29 has an invalid length. [ 111.479719][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 111.493638][ T5957] usb 3-1: config 0 descriptor?? [ 111.499147][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 111.511225][ T5957] usb 3-1: bad CDC descriptors [ 111.516912][ T5957] cdc_acm 3-1:0.0: Control and data interfaces are not separated! [ 111.528892][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.556633][ T5957] cdc_acm 3-1:0.0: This needs exactly 3 endpoints [ 111.564227][ T5957] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 111.882029][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 112.141459][ T977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.352850][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.426337][ T977] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 12335, setting to 1024 [ 112.478748][ T977] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 112.497117][ T977] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.508560][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.581219][ T5980] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 112.602840][ T6212] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.614709][ T977] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.751476][ T5853] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.759326][ T5980] usb 5-1: Using ep0 maxpacket: 8 [ 112.782658][ T5980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.845464][ T6212] fuse: Invalid rootmode [ 112.865023][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.875003][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.887845][ T5980] usb 5-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 112.916813][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.932002][ T5980] usb 5-1: config 0 descriptor?? [ 112.949775][ T5980] usb 5-1: bad CDC descriptors [ 112.956618][ T5980] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 112.969323][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 112.996506][ T5980] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 113.007674][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 113.024934][ T5980] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 113.034452][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 113.056118][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 113.069567][ T5853] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 113.079070][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.088102][ T5853] usb 2-1: Product: syz [ 113.093664][ T5853] usb 2-1: Manufacturer: syz [ 113.098311][ T5853] usb 2-1: SerialNumber: syz [ 113.119228][ T5853] usb 2-1: config 0 descriptor?? [ 113.135077][ T5853] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 113.151494][ T5957] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.301463][ T5957] usb 1-1: device descriptor read/64, error -71 [ 113.331744][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.340511][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.362316][ T977] usb 2-1: USB disconnect, device number 3 [ 113.605227][ T5957] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.751347][ T5957] usb 1-1: device descriptor read/64, error -71 [ 113.867482][ T5853] usb 3-1: USB disconnect, device number 3 [ 113.877758][ T5957] usb usb1-port1: attempt power cycle [ 114.078018][ T6239] capability: warning: `syz.2.90' uses deprecated v2 capabilities in a way that may be insecure [ 114.252861][ T5957] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 114.316704][ T5980] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.341966][ T5957] usb 1-1: device descriptor read/8, error -71 [ 114.485120][ T5980] usb 2-1: Using ep0 maxpacket: 8 [ 114.509097][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 114.559910][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.570760][ T5980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.587647][ T5980] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 114.601422][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.610377][ T5980] usb 2-1: Product: syz [ 114.615194][ T5957] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 114.623137][ T5980] usb 2-1: Manufacturer: syz [ 114.628726][ T5980] usb 2-1: SerialNumber: syz [ 114.638027][ T5980] usb 2-1: config 0 descriptor?? [ 114.648115][ T5957] usb 1-1: device descriptor read/8, error -71 [ 114.763388][ T5957] usb usb1-port1: unable to enumerate USB device [ 114.871090][ T6237] Zero length message leads to an empty skb [ 115.409328][ T5936] usb 5-1: USB disconnect, device number 4 [ 115.737599][ T5936] usb 4-1: USB disconnect, device number 4 [ 115.856081][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.060729][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.238114][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.391838][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.568377][ T6261] ptrace attach of "./syz-executor exec"[5863] was attempted by "   /dev/snd/seq G\x0b \x09    [ 116.661287][ T5971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.151630][ T36] bridge_slave_1: left allmulticast mode [ 117.213534][ T36] bridge_slave_1: left promiscuous mode [ 117.220259][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.286567][ T36] bridge_slave_0: left allmulticast mode [ 117.313998][ T5936] usb 2-1: USB disconnect, device number 4 [ 117.335700][ T36] bridge_slave_0: left promiscuous mode [ 117.359583][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.361432][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.375958][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.384891][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.395982][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.404746][ T5971] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 117.416386][ T977] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 117.428798][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.429233][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 117.532470][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 117.561326][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 117.571575][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 117.586460][ T5971] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 117.596828][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.606800][ T977] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 117.616848][ T5971] usb 5-1: Product: syz [ 117.621029][ T5971] usb 5-1: Manufacturer: syz [ 117.625754][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.633968][ T5971] usb 5-1: SerialNumber: syz [ 117.640631][ T977] usb 1-1: Product: syz [ 117.645048][ T977] usb 1-1: Manufacturer: syz [ 117.649853][ T977] usb 1-1: SerialNumber: syz [ 117.661976][ T5971] usb 5-1: config 0 descriptor?? [ 117.675273][ T5971] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 117.689201][ T977] usb 1-1: config 0 descriptor?? [ 117.886120][ T5936] usb 5-1: USB disconnect, device number 5 [ 117.907318][ T6267] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.952123][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 118.673916][ T6285] binder: BINDER_SET_CONTEXT_MGR already set [ 118.695444][ T6285] binder: 6284:6285 ioctl 4018620d 200000000040 returned -16 [ 118.770802][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.794297][ T977] airspy 1-1:0.0: usb_control_msg() failed -110 request 09 [ 118.823040][ T977] airspy 1-1:0.0: Could not detect board [ 118.828863][ T977] airspy 1-1:0.0: probe with driver airspy failed with error -110 [ 118.831593][ T5957] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.838978][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.866488][ T36] bond0 (unregistering): Released all slaves [ 118.933506][ T5935] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.976404][ T6267] vlan2: entered promiscuous mode [ 118.992928][ T6267] team0: entered promiscuous mode [ 118.998311][ T6267] team_slave_0: entered promiscuous mode [ 119.005880][ T6267] team_slave_1: entered promiscuous mode [ 119.061614][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 119.072260][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.083536][ T5957] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 119.099515][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.123890][ T5957] usb 4-1: config 0 descriptor?? [ 119.130262][ T5935] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 119.148959][ T5935] usb 2-1: config 150 has no interface number 0 [ 119.158305][ T5957] usb 4-1: bad CDC descriptors [ 119.187599][ T5957] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 119.195721][ T5935] usb 2-1: config 150 interface 204 has no altsetting 0 [ 119.207198][ T5935] usb 2-1: config 150 interface 1 has no altsetting 0 [ 119.213273][ T5971] usb 1-1: USB disconnect, device number 8 [ 119.236238][ T5957] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 119.260827][ T5935] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 119.272936][ T5957] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 119.280980][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.295744][ T5935] usb 2-1: Product: syz [ 119.300283][ T5935] usb 2-1: Manufacturer: syz [ 119.305859][ T5935] usb 2-1: SerialNumber: syz [ 119.582262][ T5855] Bluetooth: hci3: command tx timeout [ 119.669518][ T6309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.750988][ T6309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.897768][ T36] hsr_slave_0: left promiscuous mode [ 119.921348][ T36] hsr_slave_1: left promiscuous mode [ 119.941869][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.958309][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.976863][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.000361][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.118289][ T36] veth1_macvtap: left promiscuous mode [ 120.142126][ T36] veth0_macvtap: left promiscuous mode [ 120.155254][ T36] veth1_vlan: left promiscuous mode [ 120.161083][ T36] veth0_vlan: left promiscuous mode [ 120.292068][ T6330] netlink: 'syz.0.113': attribute type 11 has an invalid length. [ 120.980996][ T36] team0 (unregistering): Port device team_slave_1 removed [ 121.024745][ T36] team0 (unregistering): Port device team_slave_0 removed [ 121.661777][ T5855] Bluetooth: hci3: command tx timeout [ 121.735357][ T5935] xr_serial 2-1:150.204: xr_serial converter detected [ 121.774693][ T5935] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 121.792073][ T5935] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 121.844830][ T5935] usb 2-1: USB disconnect, device number 5 [ 121.875996][ T6270] chnl_net:caif_netlink_parms(): no params data found [ 121.889754][ T5935] xr_serial 2-1:150.204: device disconnected [ 122.080709][ T6348] fuse: Bad value for 'user_id' [ 122.089454][ T5980] usb 4-1: USB disconnect, device number 5 [ 122.101645][ T6348] fuse: Bad value for 'user_id' [ 122.469985][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.513812][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.595462][ T6270] bridge_slave_0: entered allmulticast mode [ 122.641847][ T6270] bridge_slave_0: entered promiscuous mode [ 122.687155][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.701906][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.738830][ T6270] bridge_slave_1: entered allmulticast mode [ 122.762655][ T6270] bridge_slave_1: entered promiscuous mode [ 122.821839][ T6369] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 122.823084][ T6373] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 123.185759][ T6270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.219503][ T5936] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.280034][ T6270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.403609][ T5936] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 123.423135][ T5936] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 123.464980][ T5936] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.514623][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.655922][ T6270] team0: Port device team_slave_0 added [ 123.715497][ T6270] team0: Port device team_slave_1 added [ 123.768012][ T5855] Bluetooth: hci3: command tx timeout [ 123.836863][ T5980] usb 4-1: USB disconnect, device number 6 [ 123.959999][ T6378] delete_channel: no stack [ 124.174738][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.201261][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.261248][ T5971] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.300949][ T6270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.353053][ T6270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.360057][ T6270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.461278][ T5971] usb 1-1: device descriptor read/64, error -71 [ 124.511275][ T6270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.711446][ T5971] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.829843][ T6270] hsr_slave_0: entered promiscuous mode [ 124.844207][ T6270] hsr_slave_1: entered promiscuous mode [ 124.850611][ T6270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.864986][ T6270] Cannot create hsr debugfs directory [ 124.873401][ T5971] usb 1-1: device descriptor read/64, error -71 [ 125.021644][ T5971] usb usb1-port1: attempt power cycle [ 125.163323][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 125.339747][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 125.404830][ T6425] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 125.422629][ T5971] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.437267][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.446589][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.463432][ T5971] usb 1-1: device descriptor read/8, error -71 [ 125.732028][ T5971] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.746940][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'. [ 125.795576][ T5971] usb 1-1: device descriptor read/8, error -71 [ 125.829068][ T5855] Bluetooth: hci3: command tx timeout [ 125.958701][ T5971] usb usb1-port1: unable to enumerate USB device [ 126.027993][ T6270] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.070664][ T6270] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.140361][ T6270] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.255568][ T6270] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.728808][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.779010][ T6270] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.819857][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.827120][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.866499][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.873797][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.995585][ T5971] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.103462][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.173810][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 127.198548][ T5971] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 127.225383][ T5971] usb 2-1: config 0 has no interface number 0 [ 127.246143][ T5971] usb 2-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.268811][ T5971] usb 2-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 127.294820][ T5971] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 127.319379][ T5971] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 127.340176][ T5971] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.388564][ T5971] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 127.413223][ T6270] veth0_vlan: entered promiscuous mode [ 127.426157][ T5971] usb 2-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.470574][ T5971] usb 2-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 127.496717][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.500163][ T6270] veth1_vlan: entered promiscuous mode [ 127.527790][ T5971] usb 2-1: Product: syz [ 127.537693][ T5971] usb 2-1: Manufacturer: syz [ 127.560015][ T5971] usb 2-1: SerialNumber: syz [ 127.584686][ T6270] veth0_macvtap: entered promiscuous mode [ 127.590611][ T5971] usb 2-1: config 0 descriptor?? [ 127.607369][ T6463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 127.616579][ T6270] veth1_macvtap: entered promiscuous mode [ 127.617250][ T5971] ums-usbat 2-1:0.29: USB Mass Storage device detected [ 127.668820][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.686996][ T6270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.707503][ T6270] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.718023][ T6270] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.726933][ T6270] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.737933][ T6270] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.761342][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.781259][ T5853] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.908587][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.915323][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.937599][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 127.960164][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.967930][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 127.968079][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.992874][ T9] usb 1-1: Product: syz [ 127.997297][ T9] usb 1-1: Manufacturer: syz [ 128.002620][ T9] usb 1-1: SerialNumber: syz [ 128.023961][ T5853] usb 5-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 128.027468][ T9] usb 1-1: config 0 descriptor?? [ 128.048519][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.090205][ T5853] usb 5-1: Product: syz [ 128.099933][ T5853] usb 5-1: Manufacturer: syz [ 128.110049][ T5853] usb 5-1: SerialNumber: syz [ 128.145251][ T5853] usb 5-1: config 0 descriptor?? [ 128.151123][ T6297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.200597][ T5853] ipw 5-1:0.0: IPWireless converter converter detected [ 128.208455][ T6297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.287783][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 128.304514][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz.3.143'. [ 128.458638][ T5853] usb 5-1: USB disconnect, device number 6 [ 128.517719][ T5853] ipw 5-1:0.0: device disconnected [ 128.834675][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 129.242185][ T5853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.356809][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 129.395643][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 129.407835][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 129.421373][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 129.434285][ T5853] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.451492][ T5935] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 129.464260][ T5853] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 129.492329][ T5853] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 129.510995][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.529549][ T5853] usb 6-1: Product: syz [ 129.545373][ T5853] usb 6-1: Manufacturer: syz [ 129.561937][ T5853] usb 6-1: SerialNumber: syz [ 129.631210][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 129.640775][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.652744][ T5935] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 129.667892][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.684202][ T5935] usb 4-1: config 0 descriptor?? [ 129.709180][ T5935] usb 4-1: bad CDC descriptors [ 129.729862][ T5935] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 129.751771][ T5935] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 129.768757][ T5935] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 129.797303][ T5853] usb 6-1: Limiting number of CPorts to U8_MAX [ 129.837205][ T5853] usb 6-1: Not enough endpoints found in device, aborting! [ 129.896665][ T5971] ums-usbat 2-1:0.29: probe with driver ums-usbat failed with error -5 [ 129.938730][ T5971] usb 2-1: USB disconnect, device number 6 [ 130.005795][ T5853] usb 6-1: USB disconnect, device number 2 [ 130.032183][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 130.125507][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.134749][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.150701][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.182489][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.471824][ T5853] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.553108][ T5980] usb 1-1: USB disconnect, device number 13 [ 130.663405][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 130.704079][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 130.741025][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 41447, setting to 1024 [ 130.785960][ T6546] tipc: Failed to obtain node identity [ 130.799605][ T5853] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 130.800841][ T6546] tipc: Enabling of bearer rejected, failed to enable media [ 130.847696][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.884500][ T5853] usb 2-1: config 0 descriptor?? [ 131.088046][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 131.137042][ T5853] ath6kl: Failed to submit usb control message: -71 [ 131.156816][ T5853] ath6kl: unable to send the bmi data to the device: -71 [ 131.170718][ T5853] ath6kl: Unable to send get target info: -71 [ 131.186592][ T5853] ath6kl: Failed to init ath6kl core: -71 [ 131.199879][ T5853] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 131.222399][ T5853] usb 2-1: USB disconnect, device number 7 [ 131.263321][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 131.275379][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 131.290291][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 31, changing to 8 [ 131.305198][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 41293, setting to 1024 [ 131.326689][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 131.342570][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.359008][ T9] usb 1-1: config 0 descriptor?? [ 131.380655][ T9] hub 1-1:0.0: USB hub found [ 131.411796][ T5980] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.675083][ T5980] usb 6-1: Using ep0 maxpacket: 8 [ 131.750086][ T9] hub 1-1:0.0: 2 ports detected [ 131.756348][ T5980] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.820259][ T5980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 131.918101][ T5980] usb 6-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 131.935274][ T6568] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 131.958138][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.035821][ T6568] team0: Device ipvlan1 failed to register rx_handler [ 132.073581][ T6568] syz.1.162 (6568) used greatest stack depth: 19896 bytes left [ 132.103844][ T5980] usb 6-1: config 0 descriptor?? [ 132.261847][ T5971] usb 4-1: USB disconnect, device number 7 [ 132.420909][ T6573] fuse: Unknown parameter 'group_id00000000000000000000' [ 132.477929][ T6573] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.163'. [ 132.548230][ T5980] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 132.569456][ T9] usb 1-1: USB disconnect, device number 14 [ 132.597380][ T5980] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 132.636875][ T5980] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 132.672752][ T5980] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 132.679833][ T5980] elecom 0003:056E:00FB.0001: unknown main item tag 0x0 [ 132.701641][ T977] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 132.763538][ T6557] syzkaller0: entered promiscuous mode [ 132.769211][ T6557] syzkaller0: entered allmulticast mode [ 132.781782][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.783918][ T5980] elecom 0003:056E:00FB.0001: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.5-1/input0 [ 132.816974][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.870637][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.879495][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.888666][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.901309][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 132.924577][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.948248][ T977] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 132.971061][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.046058][ T977] usb 2-1: Product: syz [ 133.051047][ T977] usb 2-1: Manufacturer: syz [ 133.059065][ T977] usb 2-1: SerialNumber: syz [ 133.066680][ T5936] usb 6-1: USB disconnect, device number 3 [ 133.118316][ T977] usb 2-1: config 0 descriptor?? [ 133.153640][ T6575] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 133.180466][ T977] usb 2-1: ucan: probing device on interface #0 [ 133.217935][ T977] usb 2-1: ucan: invalid EP count (1) [ 133.234378][ T977] usb 2-1: ucan: probe failed; try to update the device firmware [ 133.246356][ T6580] fido_id[6580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 133.731667][ T5980] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 133.943138][ T5980] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 134.012819][ T5980] usb 1-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 134.039624][ T5980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.073847][ T5980] usb 1-1: Product: syz [ 134.085056][ T5980] usb 1-1: Manufacturer: syz [ 134.110101][ T5980] usb 1-1: SerialNumber: syz [ 134.121559][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.171'. [ 134.138155][ T5980] usb 1-1: config 0 descriptor?? [ 134.167612][ T6606] dummy0: entered promiscuous mode [ 134.195884][ T6606] batadv_slave_1: entered promiscuous mode [ 134.204682][ T6606] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 134.212705][ T6606] Cannot create hsr debugfs directory [ 134.436848][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 134.581362][ T977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 134.751253][ T977] usb 6-1: Using ep0 maxpacket: 8 [ 134.758576][ T977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.883937][ T977] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 134.926022][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.995666][ T977] usb 6-1: config 0 descriptor?? [ 135.043802][ T977] usb 6-1: bad CDC descriptors [ 135.054233][ T977] cdc_acm 6-1:0.0: Control and data interfaces are not separated! [ 135.067135][ T977] cdc_acm 6-1:0.0: This needs exactly 3 endpoints [ 135.080753][ T977] cdc_acm 6-1:0.0: probe with driver cdc_acm failed with error -22 [ 135.161350][ T5936] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.438267][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.453837][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.485731][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.533290][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.552299][ T5936] usb 5-1: config 0 has no interfaces? [ 135.570949][ T5936] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.612927][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.641950][ T5936] usb 5-1: Product: syz [ 135.646271][ T5936] usb 5-1: Manufacturer: syz [ 135.677305][ T5936] usb 5-1: SerialNumber: syz [ 135.683861][ T9] usb 2-1: USB disconnect, device number 8 [ 135.747350][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 135.767115][ T5936] usb 5-1: config 0 descriptor?? [ 136.105501][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 136.199656][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 136.431255][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 136.561279][ T5980] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.593834][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.635327][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.645228][ T9] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 136.656508][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.720073][ T9] usb 2-1: config 0 descriptor?? [ 136.731387][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 136.731495][ T977] usb 1-1: USB disconnect, device number 15 [ 136.750806][ T5980] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 136.786301][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.800771][ T5980] usb 4-1: Product: syz [ 136.805919][ T5980] usb 4-1: Manufacturer: syz [ 136.818053][ T5980] usb 4-1: SerialNumber: syz [ 136.853838][ T5980] usb 4-1: config 0 descriptor?? [ 137.099094][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.181'. [ 137.135157][ T6651] vlan2: entered promiscuous mode [ 137.140470][ T6651] team0: entered promiscuous mode [ 137.152302][ T6651] team_slave_0: entered promiscuous mode [ 137.158648][ T6651] team_slave_1: entered promiscuous mode [ 137.177930][ T9] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 137.188642][ T9] pantherlord 0003:0E8F:0003.0002: unknown main item tag 0x0 [ 137.209127][ T9] pantherlord 0003:0E8F:0003.0002: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.1-1/input0 [ 137.221254][ T9] pantherlord 0003:0E8F:0003.0002: no output reports found [ 137.325638][ T5980] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 137.358064][ T24] usb 2-1: USB disconnect, device number 9 [ 137.368851][ T5980] airspy 4-1:0.0: Could not detect board [ 137.390987][ T5980] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 137.445903][ T5980] usb 4-1: USB disconnect, device number 8 [ 137.523500][ T9] usb 6-1: USB disconnect, device number 4 [ 137.882570][ T977] usb 5-1: USB disconnect, device number 7 [ 138.721918][ T5980] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 138.941325][ T5980] usb 1-1: Using ep0 maxpacket: 32 [ 139.015118][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.046452][ T5980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.069787][ T5980] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 139.089602][ T5980] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 139.139754][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.226578][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 139.281215][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 139.282342][ T5980] usb 1-1: config 0 descriptor?? [ 139.541347][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 139.594990][ T977] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 139.659037][ T977] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.684605][ T6685] sctp: [Deprecated]: syz.3.191 (pid 6685) Use of int in maxseg socket option. [ 139.684605][ T6685] Use struct sctp_assoc_value instead [ 139.790558][ T6679] vivid-000: disconnect [ 139.840039][ T5980] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input11 [ 139.902138][ T977] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 139.912466][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.920580][ T977] usb 5-1: Product: syz [ 140.049017][ T977] usb 5-1: Manufacturer: syz [ 140.084698][ T5980] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0003/input/input12 [ 140.085222][ T977] usb 5-1: SerialNumber: syz [ 140.224750][ T6704] random: crng reseeded on system resumption [ 140.442493][ T5980] kye 0003:0458:5011.0003: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 140.636643][ T6707] kvm: vcpu 0: requested 56 ns lapic timer period limited to 200000 ns [ 141.201610][ T5980] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 141.381498][ T5980] usb 1-1: device descriptor read/64, error -32 [ 141.646203][ T5980] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 141.804013][ T6679] vivid-000: reconnect [ 141.825178][ T5980] usb 1-1: device descriptor read/64, error -32 [ 141.874393][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.198'. [ 142.342534][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 143.027473][ T24] usb 1-1: USB disconnect, device number 16 [ 143.072432][ T5844] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 143.303093][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 143.347626][ T5844] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 143.394512][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.471221][ T5844] usb 4-1: Product: syz [ 143.475508][ T5844] usb 4-1: Manufacturer: syz [ 143.565200][ T5844] usb 4-1: SerialNumber: syz [ 143.615697][ T5844] usb 4-1: config 0 descriptor?? [ 143.795238][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 143.874995][ T6742] vlan2: entered promiscuous mode [ 143.885538][ T977] usbhid 5-1:1.0: can't add hid device: -71 [ 143.906401][ T977] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 143.934371][ T977] usb 5-1: USB disconnect, device number 8 [ 143.944722][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 144.088587][ T5844] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 144.109082][ T5844] airspy 4-1:0.0: Could not detect board [ 144.130089][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 144.137134][ T5844] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 144.165036][ T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 144.179706][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.196212][ T5844] usb 4-1: USB disconnect, device number 9 [ 144.207717][ T9] usb 1-1: Product: syz [ 144.213880][ T9] usb 1-1: Manufacturer: syz [ 144.233170][ T9] usb 1-1: SerialNumber: syz [ 144.262405][ T9] usb 1-1: config 0 descriptor?? [ 144.390875][ T6781] FAULT_INJECTION: forcing a failure. [ 144.390875][ T6781] name failslab, interval 1, probability 0, space 0, times 0 [ 144.413290][ T6781] CPU: 1 UID: 0 PID: 6781 Comm: syz.4.214 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 144.413317][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.413328][ T6781] Call Trace: [ 144.413337][ T6781] [ 144.413346][ T6781] dump_stack_lvl+0x189/0x250 [ 144.413388][ T6781] ? __pfx____ratelimit+0x10/0x10 [ 144.413410][ T6781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.413445][ T6781] ? __pfx__printk+0x10/0x10 [ 144.413473][ T6781] ? __pfx___might_resched+0x10/0x10 [ 144.413496][ T6781] ? fs_reclaim_acquire+0x7d/0x100 [ 144.413521][ T6781] should_fail_ex+0x414/0x560 [ 144.413548][ T6781] should_failslab+0xa8/0x100 [ 144.413578][ T6781] __kmalloc_cache_noprof+0x70/0x3d0 [ 144.413604][ T6781] ? rxrpc_alloc_peer+0x7d/0x330 [ 144.413630][ T6781] rxrpc_alloc_peer+0x7d/0x330 [ 144.413649][ T6781] ? rxrpc_lookup_peer+0x268/0xa60 [ 144.413672][ T6781] rxrpc_lookup_peer+0x3fd/0xa60 [ 144.413694][ T6781] ? _raw_read_unlock+0x28/0x50 [ 144.413718][ T6781] rxrpc_do_sendmsg+0xb0a/0x1220 [ 144.413762][ T6781] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 144.413783][ T6781] ? __local_bh_enable_ip+0x12d/0x1c0 [ 144.413810][ T6781] ? do_raw_spin_unlock+0x122/0x240 [ 144.413844][ T6781] ? rxrpc_sendmsg+0x4cc/0x710 [ 144.413872][ T6781] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 144.413898][ T6781] __sock_sendmsg+0x21c/0x270 [ 144.413924][ T6781] ____sys_sendmsg+0x505/0x830 [ 144.413961][ T6781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.414012][ T6781] ? import_iovec+0x74/0xa0 [ 144.414041][ T6781] ___sys_sendmsg+0x21f/0x2a0 [ 144.414070][ T6781] ? __pfx____sys_sendmsg+0x10/0x10 [ 144.414133][ T6781] ? __fget_files+0x2a/0x420 [ 144.414149][ T6781] ? __fget_files+0x3a0/0x420 [ 144.414175][ T6781] __x64_sys_sendmsg+0x19b/0x260 [ 144.414205][ T6781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 144.414242][ T6781] ? __pfx_ksys_write+0x10/0x10 [ 144.414264][ T6781] ? rcu_is_watching+0x15/0xb0 [ 144.414291][ T6781] ? do_syscall_64+0xbe/0x3b0 [ 144.414315][ T6781] do_syscall_64+0xfa/0x3b0 [ 144.414334][ T6781] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.414352][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.414370][ T6781] ? clear_bhb_loop+0x60/0xb0 [ 144.414410][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.414428][ T6781] RIP: 0033:0x7f4e66f8e9a9 [ 144.414450][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.414466][ T6781] RSP: 002b:00007f4e67d50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.414511][ T6781] RAX: ffffffffffffffda RBX: 00007f4e671b6080 RCX: 00007f4e66f8e9a9 [ 144.414526][ T6781] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.414537][ T6781] RBP: 00007f4e67d50090 R08: 0000000000000000 R09: 0000000000000000 [ 144.414549][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.414560][ T6781] R13: 0000000000000000 R14: 00007f4e671b6080 R15: 00007f4e672dfa28 [ 144.414591][ T6781] [ 144.714120][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.875800][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 144.923679][ T6765] vlan2: entered promiscuous mode [ 145.039954][ T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 145.096070][ T9] airspy 1-1:0.0: Could not detect board [ 145.122999][ T6789] binder: BINDER_SET_CONTEXT_MGR already set [ 145.125508][ T9] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 145.129115][ T6789] binder: 6788:6789 ioctl 4018620d 200000000040 returned -16 [ 145.172595][ T9] usb 1-1: USB disconnect, device number 17 [ 145.297740][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 145.578769][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 146.233992][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.431187][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 146.453104][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.467689][ T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 146.488978][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.632601][ T24] usb 1-1: config 0 descriptor?? [ 146.659311][ T24] usb 1-1: bad CDC descriptors [ 146.678140][ T24] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 146.731272][ T24] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 146.981234][ T24] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 147.226827][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.244221][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.625050][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.231'. [ 147.676716][ T6828] dummy0: entered promiscuous mode [ 147.714896][ T6828] batadv_slave_1: entered promiscuous mode [ 147.760722][ T6828] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 147.775054][ T6828] Cannot create hsr debugfs directory [ 148.231247][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.451228][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 148.460329][ T6845] netlink: 348 bytes leftover after parsing attributes in process `syz.1.235'. [ 148.487871][ T24] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 148.536560][ T24] usb 6-1: config 0 has no interface number 0 [ 148.593469][ T24] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 148.619661][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.665396][ T24] usb 6-1: Product: syz [ 148.683707][ T24] usb 6-1: Manufacturer: syz [ 148.704421][ T24] usb 6-1: SerialNumber: syz [ 148.731520][ T24] usb 6-1: config 0 descriptor?? [ 148.769101][ T24] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 148.865480][ T5980] usb 1-1: USB disconnect, device number 18 [ 148.875013][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 148.987838][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 149.062603][ T24] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 149.141297][ T24] usb 6-1: media controller created [ 149.205991][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.324462][ T24] cxusb: set interface failed [ 149.378923][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 149.674676][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 149.711975][ T24] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 150.062944][ T24] rc_core: IR keymap rc-dvico-portable not found [ 150.101214][ T24] Registered IR keymap rc-empty [ 150.123592][ T24] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 150.190124][ T24] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input13 [ 150.196101][ T6874] ip6tnl1: entered promiscuous mode [ 150.251405][ T30] audit: type=1326 audit(1753265774.022:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.5.245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa191b8e9a9 code=0x0 [ 150.284618][ T6874] ip6tnl1: entered allmulticast mode [ 150.289275][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 150.322285][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 150.333827][ T6880] netlink: 14 bytes leftover after parsing attributes in process `syz.5.245'. [ 150.383083][ T24] usb 6-1: USB disconnect, device number 5 [ 150.679888][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 150.757625][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 151.069114][ T6880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.131220][ T6880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.166632][ T6880] bond0 (unregistering): Released all slaves [ 151.461244][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.563913][ T6920] loop2: detected capacity change from 0 to 7 [ 151.601694][ T6920] Dev loop2: unable to read RDB block 7 [ 151.608146][ T6920] loop2: AHDI p2 p3 [ 151.626813][ T6920] loop2: partition table partially beyond EOD, truncated [ 151.637884][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 151.681394][ T6920] loop2: p3 start 335544320 is beyond EOD, truncated [ 151.699727][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 151.739492][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 151.773840][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.789211][ T5935] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.842898][ T24] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 151.867942][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.894038][ T24] usb 2-1: Product: syz [ 151.924195][ T24] usb 2-1: Manufacturer: syz [ 151.966923][ T24] usb 2-1: SerialNumber: syz [ 151.977747][ T5935] usb 1-1: device descriptor read/64, error -71 [ 151.999474][ T24] usb 2-1: config 0 descriptor?? [ 152.033857][ T24] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 152.237364][ T24] usb 2-1: USB disconnect, device number 10 [ 152.302759][ T5935] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 152.691269][ T5935] usb 1-1: device descriptor read/64, error -71 [ 152.882149][ T5935] usb usb1-port1: attempt power cycle [ 153.221435][ T5935] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 153.296034][ T5935] usb 1-1: device descriptor read/8, error -71 [ 153.537594][ T5935] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 153.621942][ T5935] usb 1-1: device descriptor read/8, error -71 [ 153.736709][ T5935] usb usb1-port1: unable to enumerate USB device [ 153.841239][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.031433][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 154.056286][ T24] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 154.081157][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.099507][ T24] usb 5-1: Product: syz [ 154.114846][ T24] usb 5-1: Manufacturer: syz [ 154.151208][ T24] usb 5-1: SerialNumber: syz [ 154.172456][ T24] usb 5-1: config 0 descriptor?? [ 154.589796][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 154.619825][ T6954] vlan2: entered promiscuous mode [ 154.908504][ T6985] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 155.004614][ T24] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 155.014134][ T24] airspy 5-1:0.0: Could not detect board [ 155.020097][ T24] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 155.035222][ T24] usb 5-1: USB disconnect, device number 9 [ 155.117266][ T6991] netlink: 'syz.0.274': attribute type 2 has an invalid length. [ 155.125283][ T6991] netlink: 'syz.0.274': attribute type 11 has an invalid length. [ 155.171598][ T6991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.274'. [ 156.101332][ T5844] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 156.110884][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 156.286655][ T5844] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.302279][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 156.310415][ T5844] usb 1-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 156.333133][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.347450][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.363459][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.376165][ T5844] usb 1-1: Product: syz [ 156.385392][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.397010][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.405960][ T5844] usb 1-1: Manufacturer: syz [ 156.410771][ T9] usb 5-1: Product: syz [ 156.419505][ T5844] usb 1-1: SerialNumber: syz [ 156.425493][ T9] usb 5-1: Manufacturer: syz [ 156.433667][ T9] usb 5-1: SerialNumber: syz [ 156.439116][ T5844] usb 1-1: config 0 descriptor?? [ 156.686463][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 156.758654][ T7016] FAULT_INJECTION: forcing a failure. [ 156.758654][ T7016] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 156.784167][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 156.821697][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.277 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 156.821723][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.821734][ T7016] Call Trace: [ 156.821742][ T7016] [ 156.821749][ T7016] dump_stack_lvl+0x189/0x250 [ 156.821777][ T7016] ? __pfx____ratelimit+0x10/0x10 [ 156.821797][ T7016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.821819][ T7016] ? __pfx__printk+0x10/0x10 [ 156.821843][ T7016] ? __might_fault+0xb0/0x130 [ 156.821878][ T7016] should_fail_ex+0x414/0x560 [ 156.821903][ T7016] strncpy_from_user+0x36/0x290 [ 156.821926][ T7016] getname_flags+0xf3/0x540 [ 156.821948][ T7016] __x64_sys_rename+0x5d/0x90 [ 156.821988][ T7016] do_syscall_64+0xfa/0x3b0 [ 156.822008][ T7016] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.822027][ T7016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.822045][ T7016] ? clear_bhb_loop+0x60/0xb0 [ 156.822068][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.822085][ T7016] RIP: 0033:0x7f451098e9a9 [ 156.822101][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.822116][ T7016] RSP: 002b:00007f4511729038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 156.822135][ T7016] RAX: ffffffffffffffda RBX: 00007f4510bb6160 RCX: 00007f451098e9a9 [ 156.822148][ T7016] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 156.822159][ T7016] RBP: 00007f4511729090 R08: 0000000000000000 R09: 0000000000000000 [ 156.822170][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.822180][ T7016] R13: 0000000000000000 R14: 00007f4510bb6160 R15: 00007f4510cdfa28 [ 156.822206][ T7016] [ 157.002584][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.111475][ T9] usb 5-1: USB disconnect, device number 10 [ 157.228251][ T5844] usb 1-1: USB disconnect, device number 23 [ 157.245388][ T6250] udevd[6250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.702346][ T30] audit: type=1326 audit(1753265781.502:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4e66f8e9a9 code=0x0 [ 158.021778][ T5980] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 158.081258][ T5844] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 158.175922][ T7052] ptrace attach of "./syz-executor exec"[5868] was attempted by "   /dev/snd/seq G\x0b \x09    [ 158.198056][ T5980] usb 5-1: device descriptor read/64, error -71 [ 158.289228][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.336257][ T5844] usb 6-1: descriptor type invalid, skip [ 158.342164][ T5844] usb 6-1: descriptor type invalid, skip [ 158.348732][ T5844] usb 6-1: descriptor type invalid, skip [ 158.375083][ T5844] usb 6-1: descriptor type invalid, skip [ 158.389667][ T5844] usb 6-1: config 7 has an invalid interface number: 210 but max is 0 [ 158.523915][ T5844] usb 6-1: config 7 has no interface number 0 [ 158.540399][ T5844] usb 6-1: config 7 interface 210 has no altsetting 0 [ 158.563318][ T5844] usb 6-1: New USB device found, idVendor=04f2, idProduct=aff8, bcdDevice=31.a2 [ 158.695374][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.712485][ T5980] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 158.726279][ T5844] usb 6-1: Product: syz [ 158.742465][ T5844] usb 6-1: Manufacturer: syz [ 158.757444][ T5844] usb 6-1: SerialNumber: syz [ 158.891270][ T5980] usb 5-1: device descriptor read/64, error -71 [ 158.964843][ T7060] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.973536][ T7060] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.015500][ T5980] usb usb5-port1: attempt power cycle [ 159.115798][ T5844] usb 6-1: USB disconnect, device number 6 [ 159.381368][ T5980] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 159.516674][ T5980] usb 5-1: device descriptor read/8, error -71 [ 159.675348][ T7072] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.761703][ T5980] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 159.832564][ T5980] usb 5-1: device descriptor read/8, error -71 [ 159.963394][ T5980] usb usb5-port1: unable to enumerate USB device [ 160.491603][ T5844] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 160.751526][ T5844] usb 2-1: Using ep0 maxpacket: 32 [ 160.774829][ T5844] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 160.833422][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.903959][ T5844] usb 2-1: Product: syz [ 160.995769][ T5844] usb 2-1: Manufacturer: syz [ 161.024344][ T5844] usb 2-1: SerialNumber: syz [ 161.090187][ T5844] usb 2-1: config 0 descriptor?? [ 161.131215][ T5980] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.322886][ T5980] usb 5-1: device descriptor read/64, error -71 [ 161.376942][ T7083] vlan2: entered promiscuous mode [ 161.459949][ T5844] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 161.482446][ T5844] airspy 2-1:0.0: Could not detect board [ 161.515832][ T5844] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 161.550220][ T5844] usb 2-1: USB disconnect, device number 11 [ 161.612157][ T5980] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 161.679330][ T7100] loop2: detected capacity change from 0 to 7 [ 161.717528][ T7100] Dev loop2: unable to read RDB block 7 [ 161.751386][ T5980] usb 5-1: device descriptor read/64, error -71 [ 161.776960][ T7100] loop2: AHDI p2 p3 [ 161.814391][ T7100] loop2: partition table partially beyond EOD, truncated [ 161.831608][ T7100] loop2: p3 start 335544320 is beyond EOD, truncated [ 161.881580][ T5980] usb usb5-port1: attempt power cycle [ 162.252743][ T5980] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 162.301914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 162.355693][ T5980] usb 5-1: device descriptor read/8, error -71 [ 162.481291][ T5935] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 162.611247][ T5980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.635894][ T7124] netlink: 72 bytes leftover after parsing attributes in process `syz.3.300'. [ 162.666982][ T5980] usb 5-1: device descriptor read/8, error -71 [ 162.745505][ T5935] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 162.757525][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.777872][ T5935] usb 2-1: Product: syz [ 162.801906][ T5980] usb usb5-port1: unable to enumerate USB device [ 162.821164][ T5935] usb 2-1: Manufacturer: syz [ 162.825836][ T5935] usb 2-1: SerialNumber: syz [ 162.853536][ T5935] usb 2-1: config 0 descriptor?? [ 163.066988][ T5935] usb 2-1: USB disconnect, device number 12 [ 163.151277][ T977] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 163.354157][ T977] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.370837][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 163.392204][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.410304][ T977] usb 4-1: Product: syz [ 163.421479][ T977] usb 4-1: Manufacturer: syz [ 163.452072][ T7136] ptrace attach of "./syz-executor exec"[5865] was attempted by "   /dev/snd/seq G\x0b \x09    [ 163.497104][ T977] usb 4-1: SerialNumber: syz [ 163.644405][ T977] usb 4-1: config 0 descriptor?? [ 163.991766][ T7144] netlink: 48 bytes leftover after parsing attributes in process `syz.1.303'. [ 164.076593][ T7149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.303'. [ 164.084772][ T7148] fuse: Unknown parameter 'group_id00000000000000000000' [ 164.106911][ T7148] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.304'. [ 164.126578][ T5853] usb 4-1: USB disconnect, device number 10 [ 164.970371][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 165.701276][ T5853] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 165.909488][ T5853] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 165.957094][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.996442][ T5853] usb 5-1: Product: syz [ 166.008249][ T5853] usb 5-1: Manufacturer: syz [ 166.038088][ T5853] usb 5-1: SerialNumber: syz [ 166.082421][ T5853] usb 5-1: config 0 descriptor?? [ 166.323163][ T9] usb 5-1: USB disconnect, device number 19 [ 166.330742][ T5971] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 166.492606][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 166.519396][ T5971] usb 1-1: config 0 has an invalid interface number: 178 but max is 0 [ 166.561168][ T5971] usb 1-1: config 0 has no interface number 0 [ 166.592679][ T5971] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d95, bcdDevice=27.47 [ 166.631295][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.661253][ T5971] usb 1-1: Product: syz [ 166.670191][ T5971] usb 1-1: Manufacturer: syz [ 166.681620][ T5971] usb 1-1: SerialNumber: syz [ 166.705406][ T5971] usb 1-1: config 0 descriptor?? [ 166.905784][ T7214] ptrace attach of "./syz-executor exec"[5868] was attempted by "   /dev/snd/seq G\x0b \x09    [ 166.991384][ T7199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.101779][ T7199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.153161][ T5971] usb 1-1: USB disconnect, device number 24 [ 167.591291][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 167.761412][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 167.785122][ T9] usb 6-1: config 8 has an invalid interface number: 135 but max is 0 [ 167.807947][ T9] usb 6-1: config 8 has no interface number 0 [ 167.841215][ T9] usb 6-1: config 8 interface 135 altsetting 6 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 167.912381][ T9] usb 6-1: config 8 interface 135 altsetting 6 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 167.943399][ T7225] loop2: detected capacity change from 0 to 7 [ 167.964204][ T9] usb 6-1: config 8 interface 135 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 167.994526][ T9] usb 6-1: config 8 interface 135 altsetting 6 has an endpoint descriptor with address 0x57, changing to 0x7 [ 168.013556][ T7225] Dev loop2: unable to read RDB block 7 [ 168.027960][ T9] usb 6-1: config 8 interface 135 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 16 [ 168.060551][ T9] usb 6-1: config 8 interface 135 altsetting 6 endpoint 0x3 has invalid maxpacket 1576, setting to 64 [ 168.060615][ T7225] loop2: AHDI p2 p3 [ 168.081338][ T5853] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 168.081347][ T7225] loop2: partition table partially beyond EOD, truncated [ 168.129697][ T9] usb 6-1: config 8 interface 135 altsetting 6 has a duplicate endpoint with address 0x7, skipping [ 168.154989][ T7225] loop2: p3 start 335544320 is beyond EOD, truncated [ 168.194395][ T9] usb 6-1: config 8 interface 135 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 168.241466][ T9] usb 6-1: config 8 interface 135 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 168.261353][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 168.281440][ T5853] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 168.300912][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.311307][ T9] usb 6-1: config 8 interface 135 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 168.351694][ T9] usb 6-1: config 8 interface 135 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 168.364722][ T5853] usb 5-1: Product: syz [ 168.369087][ T5853] usb 5-1: Manufacturer: syz [ 168.391348][ T9] usb 6-1: config 8 interface 135 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 168.394212][ T5853] usb 5-1: SerialNumber: syz [ 168.457846][ T9] usb 6-1: config 8 interface 135 has no altsetting 0 [ 168.473764][ T9] usb 6-1: New USB device found, idVendor=1e2d, idProduct=0053, bcdDevice=11.fe [ 168.474301][ T5853] usb 5-1: config 0 descriptor?? [ 168.497871][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.543667][ T9] usb 6-1: Product: К [ 168.549264][ T9] usb 6-1: Manufacturer: ᠁ [ 168.559787][ T9] usb 6-1: SerialNumber: 鬏ꖮ䅡㔀ַ렻ƚគ蔑㨹鄚㞔竻≥⦽陶ܩள쀹鑶ṅﯫ謹ꞔ䚋᫛嫋ᓏ⨤皩掆쾢⼈鋘礧흃菥Ⴡ欘徙޳繚鰌뵿糊㤒⌣鳷耽痠튃⏼尷ꓟ豘넾⑇矠멃ꮑ鞤袽쉗⳯㩈蜯횢鯭ꐇ볉宦⠘௣梏樸ड⹽觺襛晍䐨琲㜜Ƹ谱뫥샤 [ 168.694722][ T7218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 168.711871][ T7218] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 168.796522][ T7223] vlan2: entered promiscuous mode [ 168.996159][ T9] option 6-1:8.135: GSM modem (1-port) converter detected [ 169.011075][ T5853] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 169.047834][ T9] usb 6-1: USB disconnect, device number 7 [ 169.111290][ T5853] airspy 5-1:0.0: Could not detect board [ 169.133436][ T5853] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 169.161639][ T9] option 6-1:8.135: device disconnected [ 169.170115][ T5853] usb 5-1: USB disconnect, device number 20 [ 169.461475][ T5935] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 169.951680][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 170.071568][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.101239][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.148284][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 170.184659][ T5935] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 170.214246][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.369310][ T5935] usb 1-1: config 0 descriptor?? [ 170.874128][ T7240] vivid-000: disconnect [ 170.937281][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input15 [ 171.221214][ T5853] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 171.247252][ T5935] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input16 [ 171.285709][ T5935] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 171.307644][ T7272] ptrace attach of "./syz-executor exec"[5868] was attempted by "   /dev/snd/seq G\x0b \x09    [ 171.401429][ T5853] usb 6-1: device descriptor read/64, error -71 [ 171.492587][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.551917][ T5971] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 171.733562][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 171.745659][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 171.836278][ T5853] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 171.877955][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 171.927564][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 171.950500][ T5971] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 171.961404][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.979706][ T5971] usb 4-1: Product: syz [ 172.001389][ T5853] usb 6-1: device descriptor read/64, error -71 [ 172.007831][ T5971] usb 4-1: Manufacturer: syz [ 172.040917][ T5971] usb 4-1: SerialNumber: syz [ 172.124860][ T5971] usb 4-1: config 0 descriptor?? [ 172.131610][ T5853] usb usb6-port1: attempt power cycle [ 172.171517][ T5935] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 172.194893][ T5971] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 172.311905][ T5935] usb 1-1: device descriptor read/64, error -32 [ 172.366878][ T5971] usb 4-1: USB disconnect, device number 11 [ 172.491218][ T5853] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 172.521964][ T5853] usb 6-1: device descriptor read/8, error -71 [ 172.571431][ T5935] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 172.649982][ T7239] vivid-000: reconnect [ 172.769489][ T7280] tipc: Enabling of bearer rejected, failed to enable media [ 172.771456][ T5853] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 172.814743][ T5853] usb 6-1: device descriptor read/8, error -71 [ 172.934263][ T5853] usb usb6-port1: unable to enumerate USB device [ 173.023677][ T5971] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.214374][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 173.252813][ T5971] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 173.272410][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.280517][ T5971] usb 2-1: Product: syz [ 173.287901][ T5971] usb 2-1: Manufacturer: syz [ 173.294771][ T5971] usb 2-1: SerialNumber: syz [ 173.317716][ T5971] usb 2-1: config 0 descriptor?? [ 173.335358][ T7303] loop2: detected capacity change from 0 to 7 [ 173.346478][ T7303] Dev loop2: unable to read RDB block 7 [ 173.352484][ T7303] loop2: AHDI p2 p3 [ 173.356690][ T7303] loop2: partition table partially beyond EOD, truncated [ 173.365543][ T7303] loop2: p3 start 335544320 is beyond EOD, truncated [ 173.378110][ T24] usb 1-1: USB disconnect, device number 25 [ 173.536269][ T5971] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 173.580989][ T5971] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.611930][ T5971] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 173.623555][ T5957] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.642060][ T5971] usb 2-1: media controller created [ 173.684979][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.351'. [ 173.721934][ T5971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.771552][ T5957] usb 4-1: device descriptor read/64, error -71 [ 173.774090][ T5971] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 173.786474][ T5971] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 173.971263][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 173.992476][ T5971] usb 2-1: USB disconnect, device number 13 [ 174.022458][ T5957] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.079554][ T5971] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 174.132335][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 174.154914][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.168416][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.185068][ T5957] usb 4-1: device descriptor read/64, error -71 [ 174.192888][ T24] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 174.215023][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.251427][ T24] usb 1-1: Product: syz [ 174.255764][ T24] usb 1-1: Manufacturer: syz [ 174.288959][ T24] usb 1-1: SerialNumber: syz [ 174.321751][ T5957] usb usb4-port1: attempt power cycle [ 174.328660][ T24] usb 1-1: config 0 descriptor?? [ 174.361240][ T5853] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 174.512740][ T5853] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 174.521421][ T5853] usb 6-1: config 0 has no interface number 0 [ 174.527593][ T5853] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 174.538945][ T5853] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 174.554877][ T5853] usb 6-1: config 0 interface 255 has no altsetting 0 [ 174.562282][ T5853] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 174.581160][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.610411][ T5853] usb 6-1: config 0 descriptor?? [ 174.624318][ T5853] cp210x 6-1:0.255: cp210x converter detected [ 174.703868][ T5957] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 174.732852][ T5957] usb 4-1: device descriptor read/8, error -71 [ 175.011502][ T5957] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.045247][ T5957] usb 4-1: device descriptor read/8, error -71 [ 175.245724][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.253560][ T5853] cp210x 6-1:0.255: failed to get vendor val 0x0010 size 3: -121 [ 175.264789][ T5957] usb usb4-port1: unable to enumerate USB device [ 175.419750][ T5853] cp210x 6-1:0.255: failed to get vendor val 0x000e size 678: -71 [ 175.441261][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 175.458312][ T5853] cp210x 6-1:0.255: GPIO initialisation failed: -71 [ 175.494356][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.508207][ T5853] usb 6-1: cp210x converter now attached to ttyUSB0 [ 175.515271][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.591291][ T5853] usb 6-1: USB disconnect, device number 12 [ 175.615594][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 175.747842][ T5853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 175.755838][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 175.766770][ T5853] cp210x 6-1:0.255: device disconnected [ 175.776396][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.796589][ T24] usb 2-1: config 0 descriptor?? [ 176.229153][ T7328] vivid-000: disconnect [ 176.247542][ T24] hid (null): unknown global tag 0xc [ 176.254563][ T24] hid (null): unknown global tag 0xd [ 176.295103][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input18 [ 176.510785][ T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0005/input/input19 [ 176.631249][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 176.773800][ T7340] ptrace attach of "./syz-executor exec"[5863] was attempted by "   /dev/snd/seq G\x0b \x09    [ 176.920190][ T9] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 177.011585][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.061088][ T5853] usb 1-1: USB disconnect, device number 26 [ 177.088255][ T24] kye 0003:0458:5011.0005: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 177.626625][ T7350] pimreg: entered allmulticast mode [ 177.632227][ T24] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 177.655083][ T7350] pimreg: left allmulticast mode [ 177.702792][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.728558][ T9] usb 6-1: Product: syz [ 177.790576][ T9] usb 6-1: Manufacturer: syz [ 177.837853][ T9] usb 6-1: SerialNumber: syz [ 177.860681][ T9] usb 6-1: config 0 descriptor?? [ 177.871295][ T24] usb 2-1: device descriptor read/64, error -32 [ 178.089505][ T9] usb 6-1: USB disconnect, device number 13 [ 178.181212][ T24] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 178.471245][ T24] usb 2-1: device descriptor read/64, error -32 [ 178.505009][ T7327] vivid-000: reconnect [ 178.516199][ T7355] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.364'. [ 178.816731][ T7362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'. [ 178.853390][ T7362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'. [ 179.432925][ T5853] usb 2-1: USB disconnect, device number 14 [ 181.881558][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.151230][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 183.271221][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 183.321270][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 183.361523][ T24] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 183.379055][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.381960][ T7393] ptrace attach of "./syz-executor exec"[6270] was attempted by "   /dev/snd/seq G\x0b \x09    [ 183.471172][ T24] usb 2-1: Product: syz [ 185.480587][ T24] usb 2-1: Manufacturer: syz [ 185.485571][ T24] usb 2-1: SerialNumber: syz [ 185.497144][ T24] usb 2-1: config 0 descriptor?? [ 185.507244][ T24] usb 2-1: can't set config #0, error -71 [ 185.519191][ T24] usb 2-1: USB disconnect, device number 15 [ 185.881233][ T5957] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 186.155652][ T5957] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 186.223047][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.601152][ T5957] usb 4-1: Product: syz [ 186.605474][ T5957] usb 4-1: Manufacturer: syz [ 186.752170][ T5957] usb 4-1: SerialNumber: syz [ 187.275078][ T5957] usb 4-1: config 0 descriptor?? [ 187.505366][ T7408] loop2: detected capacity change from 0 to 7 [ 187.678004][ T5957] usb 4-1: USB disconnect, device number 16 [ 187.726364][ T7408] Dev loop2: unable to read RDB block 7 [ 187.769611][ T7408] loop2: AHDI p2 p3 [ 189.292012][ T7408] loop2: partition table partially beyond EOD, truncated [ 189.549002][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.722627][ T7408] loop2: p3 start 335544320 is beyond EOD, truncated [ 195.263053][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.277772][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.579779][ T5217] sched: DL replenish lagged too much [ 230.153316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 317.641076][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 317.648119][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5935/1:b..l P5866/1:b..l [ 317.657603][ C1] rcu: (detected by 1, t=10503 jiffies, g=23581, q=106608 ncpus=2) [ 317.665632][ C1] task:syz-executor state:R running task stack:20840 pid:5866 tgid:5866 ppid:5843 task_flags:0x400140 flags:0x00004002 [ 317.680196][ C1] Call Trace: [ 317.683537][ C1] [ 317.686507][ C1] __schedule+0x16fd/0x4cf0 [ 317.691096][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 317.696432][ C1] ? __pfx___schedule+0x10/0x10 [ 317.701348][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 317.706684][ C1] preempt_schedule_irq+0xb5/0x150 [ 317.711842][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 317.717616][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 317.723475][ C1] irqentry_exit+0x6f/0x90 [ 317.727942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.733967][ C1] RIP: 0010:lock_acquire+0x21/0x360 [ 317.739232][ C1] Code: 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 <49> 89 fd 48 8b ac 24 98 00 00 00 65 48 8b 05 ac 95 01 11 48 89 44 [ 317.758888][ C1] RSP: 0018:ffffc90003f1ec98 EFLAGS: 00000282 [ 317.765017][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 317.773048][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13f0e0 [ 317.781064][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.789076][ C1] R10: ffffc90003f1ee58 R11: ffffffff81acfe40 R12: 0000000000000002 [ 317.797090][ C1] R13: ffffc90003f1ee40 R14: 0000000000000000 R15: 0000000000000000 [ 317.805112][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.811340][ C1] ? unwind_next_frame+0xa5/0x2390 [ 317.816495][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 317.822177][ C1] ? unwind_next_frame+0xa5/0x2390 [ 317.827327][ C1] unwind_next_frame+0xc2/0x2390 [ 317.832328][ C1] ? unwind_next_frame+0xa5/0x2390 [ 317.837660][ C1] ? unwind_next_frame+0xa5/0x2390 [ 317.842810][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 317.847920][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.854155][ C1] arch_stack_walk+0x11c/0x150 [ 317.858990][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 317.864680][ C1] stack_trace_save+0x9c/0xe0 [ 317.869459][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 317.874894][ C1] save_stack+0xf5/0x1f0 [ 317.879475][ C1] ? __pfx_save_stack+0x10/0x10 [ 317.884375][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 317.889711][ C1] ? __put_partials+0x161/0x1c0 [ 317.894607][ C1] ? put_cpu_partial+0x17c/0x250 [ 317.899582][ C1] ? __slab_free+0x2f7/0x400 [ 317.904208][ C1] ? qlist_free_all+0x97/0x140 [ 317.909011][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 317.914683][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 317.919751][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 317.925440][ C1] ? page_ext_put+0x97/0xc0 [ 317.929999][ C1] __reset_page_owner+0x71/0x1f0 [ 317.934990][ C1] __free_frozen_pages+0xc71/0xe70 [ 317.940163][ C1] __put_partials+0x161/0x1c0 [ 317.944889][ C1] put_cpu_partial+0x17c/0x250 [ 317.949697][ C1] ? put_cpu_partial+0x6d/0x250 [ 317.954610][ C1] __slab_free+0x2f7/0x400 [ 317.959064][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 317.965427][ C1] ? __phys_addr+0xd3/0x180 [ 317.969987][ C1] qlist_free_all+0x97/0x140 [ 317.974678][ C1] kasan_quarantine_reduce+0x148/0x160 [ 317.980194][ C1] __kasan_slab_alloc+0x22/0x80 [ 317.985105][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 317.990630][ C1] ? ptlock_alloc+0x20/0x70 [ 317.995185][ C1] ptlock_alloc+0x20/0x70 [ 317.999563][ C1] pte_alloc_one+0x7d/0x170 [ 318.004120][ C1] __pte_alloc+0x25/0x1a0 [ 318.008495][ C1] copy_pmd_range+0x68e6/0x7000 [ 318.013416][ C1] ? arch_stack_walk+0xfc/0x150 [ 318.018353][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 318.023647][ C1] copy_page_range+0xc46/0x1270 [ 318.028545][ C1] ? __lock_acquire+0xab9/0xd20 [ 318.033505][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 318.038847][ C1] ? up_write+0x1c4/0x420 [ 318.043225][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 318.050035][ C1] dup_mmap+0xf57/0x1ac0 [ 318.054355][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 318.059098][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 318.065047][ C1] ? mm_init+0xce1/0xf10 [ 318.069347][ C1] copy_mm+0x13c/0x4b0 [ 318.073467][ C1] ? copy_process+0x978/0x3b80 [ 318.078275][ C1] copy_process+0x16d3/0x3b80 [ 318.083024][ C1] ? copy_process+0x978/0x3b80 [ 318.087846][ C1] ? __pfx_copy_process+0x10/0x10 [ 318.092934][ C1] kernel_clone+0x21e/0x870 [ 318.097487][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 318.102594][ C1] __x64_sys_clone+0x18b/0x1e0 [ 318.107405][ C1] ? count_memcg_event_mm+0x21/0x260 [ 318.112747][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 318.118138][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 318.123467][ C1] ? do_syscall_64+0xbe/0x3b0 [ 318.128192][ C1] do_syscall_64+0xfa/0x3b0 [ 318.132734][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.137974][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.144084][ C1] ? clear_bhb_loop+0x60/0xb0 [ 318.148980][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.154913][ C1] RIP: 0033:0x7f4e66f85213 [ 318.159392][ C1] RSP: 002b:00007f4e672dfca8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 318.167972][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4e66f85213 [ 318.175977][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 318.183991][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 318.192198][ C1] R10: 000055556a3887d0 R11: 0000000000000246 R12: 0000000000000000 [ 318.200245][ C1] R13: 00000000000927c0 R14: 000000000002f3fa R15: 00007f4e672dfe40 [ 318.208270][ C1] [ 318.211320][ C1] task:kworker/1:4 state:R running task stack:20200 pid:5935 tgid:5935 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 318.224946][ C1] Workqueue: events_power_efficient gc_worker [ 318.231062][ C1] Call Trace: [ 318.234374][ C1] [ 318.237363][ C1] __schedule+0x16fd/0x4cf0 [ 318.241918][ C1] ? wg_packet_decrypt_worker+0xc6f/0xd10 [ 318.247705][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 318.253033][ C1] ? __pfx___schedule+0x10/0x10 [ 318.257951][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 318.263279][ C1] preempt_schedule_irq+0xb5/0x150 [ 318.268426][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 318.274279][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 318.280215][ C1] irqentry_exit+0x6f/0x90 [ 318.284671][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.290695][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 318.297623][ C1] Code: f8 4d 85 e4 75 16 e8 c1 f2 21 f8 eb 15 e8 ba f2 21 f8 e8 05 65 cf 01 4d 85 e4 74 ea e8 ab f2 21 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 318.317286][ C1] RSP: 0018:ffffc9000455f860 EFLAGS: 00000293 [ 318.323396][ C1] RAX: ffffffff899e3425 RBX: 0000000000000000 RCX: ffff88802f940000 [ 318.331408][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 318.339426][ C1] RBP: ffffc9000455f910 R08: ffffffff8fa1dcf7 R09: 1ffffffff1f43b9e [ 318.347439][ C1] R10: dffffc0000000000 R11: fffffbfff1f43b9f R12: 0000000000000200 [ 318.355458][ C1] R13: 00000000000004c7 R14: 1ffff920008abf0c R15: dffffc0000000000 [ 318.363477][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 318.369785][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 318.376441][ C1] gc_worker+0x308/0x1380 [ 318.380825][ C1] ? gc_worker+0x264/0x1380 [ 318.385376][ C1] ? __pfx_gc_worker+0x10/0x10 [ 318.390184][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.395413][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 318.401189][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 318.406943][ C1] process_scheduled_works+0xae1/0x17b0 [ 318.412556][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.418594][ C1] worker_thread+0x8a0/0xda0 [ 318.423245][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 318.429625][ C1] ? __kthread_parkme+0x7b/0x200 [ 318.434614][ C1] kthread+0x70e/0x8a0 [ 318.438735][ C1] ? __pfx_worker_thread+0x10/0x10 [ 318.444064][ C1] ? __pfx_kthread+0x10/0x10 [ 318.448702][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.453943][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.459209][ C1] ? __pfx_kthread+0x10/0x10 [ 318.463893][ C1] ret_from_fork+0x3fc/0x770 [ 318.468544][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.473704][ C1] ? __switch_to_asm+0x39/0x70 [ 318.478513][ C1] ? __switch_to_asm+0x33/0x70 [ 318.483324][ C1] ? __pfx_kthread+0x10/0x10 [ 318.487965][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.492790][ C1] [ 318.495835][ C1] rcu: rcu_preempt kthread starved for 10339 jiffies! g23581 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 318.507071][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 318.517167][ C1] rcu: RCU grace-period kthread stack dump: [ 318.523085][ C1] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 318.536638][ C1] Call Trace: [ 318.539951][ C1] [ 318.542925][ C1] __schedule+0x16fd/0x4cf0 [ 318.547492][ C1] ? schedule+0x165/0x360 [ 318.551867][ C1] ? __pfx___schedule+0x10/0x10 [ 318.556772][ C1] ? schedule+0x91/0x360 [ 318.561052][ C1] schedule+0x165/0x360 [ 318.565245][ C1] schedule_timeout+0x12b/0x270 [ 318.570378][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 318.575814][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 318.581774][ C1] ? __pfx_process_timeout+0x10/0x10 [ 318.587124][ C1] ? prepare_to_swait_event+0x341/0x380 [ 318.592728][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 318.597643][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 318.603871][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 318.609197][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 318.614441][ C1] ? finish_swait+0xcd/0x1f0 [ 318.619088][ C1] rcu_gp_kthread+0x99/0x390 [ 318.623722][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.628975][ C1] ? __kthread_parkme+0x7b/0x200 [ 318.633962][ C1] ? __kthread_parkme+0x1a1/0x200 [ 318.639041][ C1] kthread+0x70e/0x8a0 [ 318.643174][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 318.648415][ C1] ? __pfx_kthread+0x10/0x10 [ 318.653064][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.658325][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.663562][ C1] ? __pfx_kthread+0x10/0x10 [ 318.668205][ C1] ret_from_fork+0x3fc/0x770 [ 318.672839][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 318.677997][ C1] ? __switch_to_asm+0x39/0x70 [ 318.682816][ C1] ? __switch_to_asm+0x33/0x70 [ 318.687618][ C1] ? __pfx_kthread+0x10/0x10 [ 318.692255][ C1] ret_from_fork_asm+0x1a/0x30 [ 318.697091][ C1] [ 318.700140][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 318.706494][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 318.716506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.726659][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 318.731992][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 318.751642][ C1] RSP: 0018:ffffc90000a07d40 EFLAGS: 00000206 [ 318.757752][ C1] RAX: 0b3d491360e45200 RBX: 0000000000000000 RCX: 0b3d491360e45200 [ 318.765788][ C1] RDX: 0000000000000000 RSI: ffffffff8db8406b RDI: ffffffff8be28d00 [ 318.773802][ C1] RBP: ffffffff8a1f2501 R08: 0000000000000000 R09: ffffffff8a1f2501 [ 318.781813][ C1] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000002 [ 318.789824][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 318.797836][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 318.806813][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.813519][ C1] CR2: 0000559c49582e90 CR3: 000000006a61c000 CR4: 00000000003526f0 [ 318.821532][ C1] Call Trace: [ 318.824851][ C1] [ 318.827776][ C1] ip6_finish_output2+0x722/0x16a0 [ 318.832934][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 318.838271][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 318.843611][ C1] ? ip6_mtu+0x7d/0x3f0 [ 318.847815][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 318.853408][ C1] ? ip6_mtu+0x7d/0x3f0 [ 318.857608][ C1] ? ip6_mtu+0x321/0x3f0 [ 318.861897][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 318.867063][ C1] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 318.872516][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 318.878471][ C1] ? __build_skb_around+0x257/0x3e0 [ 318.883743][ C1] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 318.890322][ C1] ? skb_put+0x11b/0x210 [ 318.894632][ C1] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 318.900947][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 318.907779][ C1] ? __pfx_nft_xfrm_get_dump+0x4/0x10 [ 318.913197][ C1] ? synproxy_pernet+0x45/0x270 [ 318.918098][ C1] nft_synproxy_eval_v6+0x36e/0x560 [ 318.923346][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 318.929111][ C1] ? nf_ip_checksum+0x13c/0x510 [ 318.934017][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 318.939266][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 318.945033][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 318.950486][ C1] nft_do_chain+0x40c/0x1920 [ 318.955122][ C1] ? ip6t_do_table+0x1376/0x1560 [ 318.960117][ C1] ? nf_nat_inet_fn+0x924/0xba0 [ 318.965024][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 318.970095][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 318.975016][ C1] ? nf_nat_ipv6_fn+0x21d/0x2d0 [ 318.979935][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 318.985193][ C1] nft_do_chain_inet+0x25d/0x340 [ 318.990176][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 318.995716][ C1] ? nf_nat_ipv6_local_in+0x14f/0x650 [ 319.001151][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 319.006917][ C1] ? NF_HOOK+0x9a/0x3a0 [ 319.011111][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 319.016643][ C1] nf_hook_slow+0xc2/0x220 [ 319.021197][ C1] NF_HOOK+0x206/0x3a0 [ 319.025303][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 319.030709][ C1] ? NF_HOOK+0x9a/0x3a0 [ 319.034898][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 319.039526][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 319.044947][ C1] ip6_input+0x16a/0x270 [ 319.049246][ C1] ? ip6_input+0x23/0x270 [ 319.053618][ C1] NF_HOOK+0x30c/0x3a0 [ 319.057760][ C1] ? skb_orphan+0xaf/0xd0 [ 319.062125][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 319.067356][ C1] ? NF_HOOK+0x9a/0x3a0 [ 319.071542][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 319.076166][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 319.081412][ C1] __netif_receive_skb+0xd3/0x380 [ 319.086569][ C1] ? process_backlog+0x2d5/0x14f0 [ 319.091639][ C1] process_backlog+0x60e/0x14f0 [ 319.096547][ C1] ? __pfx_process_backlog+0x10/0x10 [ 319.101903][ C1] __napi_poll+0xc7/0x480 [ 319.106307][ C1] ? net_rx_action+0x46d/0xe30 [ 319.111111][ C1] net_rx_action+0x707/0xe30 [ 319.115760][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 319.120916][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 319.126162][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 319.131506][ C1] handle_softirqs+0x286/0x870 [ 319.136316][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 319.141296][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 319.146624][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 319.151873][ C1] __irq_exit_rcu+0xca/0x1f0 [ 319.156502][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 319.161740][ C1] irq_exit_rcu+0x9/0x30 [ 319.166021][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 319.171696][ C1] [ 319.174655][ C1] [ 319.177610][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.183623][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 319.189383][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9d 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 319.209036][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 319.215149][ C1] RAX: 0b3d491360e45200 RBX: ffffffff81976a18 RCX: 0b3d491360e45200 [ 319.223162][ C1] RDX: 0000000000000001 RSI: ffffffff8d996411 RDI: ffffffff8be28d00 [ 319.231606][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 319.239614][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1dcf0 [ 319.247626][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 319.255644][ C1] ? do_idle+0x1e8/0x510 [ 319.259961][ C1] default_idle+0x13/0x20 [ 319.264343][ C1] default_idle_call+0x74/0xb0 [ 319.269147][ C1] do_idle+0x1e8/0x510 [ 319.273277][ C1] ? __pfx_do_idle+0x10/0x10 [ 319.277928][ C1] cpu_startup_entry+0x44/0x60 [ 319.282760][ C1] start_secondary+0x101/0x110 [ 319.287578][ C1] common_startup_64+0x13e/0x147 [ 319.292574][ C1] [ 319.692431][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 319.732086][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 319.755846][ T5860] Bluetooth: hci4: command 0x0406 tx timeout [ 319.772670][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 323.433542][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 326.405118][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.429528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22