last executing test programs: 58.821142059s ago: executing program 2 (id=251): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f00001ff000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x6, 0x10, 0x3) 55.957139559s ago: executing program 2 (id=257): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 52.759620242s ago: executing program 2 (id=272): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x4}) 49.829133651s ago: executing program 2 (id=289): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="326342b8", 0x4}], 0x1) 49.409087795s ago: executing program 2 (id=292): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) 48.429298792s ago: executing program 2 (id=297): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 33.315893405s ago: executing program 32 (id=297): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008080) close_range(r0, 0xffffffffffffffff, 0x0) 7.720857222s ago: executing program 4 (id=371): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x2100, 0x285) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 6.733111709s ago: executing program 4 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) 6.350266419s ago: executing program 4 (id=456): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 6.200607909s ago: executing program 3 (id=458): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.660139088s ago: executing program 4 (id=460): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5.166956752s ago: executing program 4 (id=463): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x3, 0x5810, 0x0, 0x0}], 0x1}) 4.593124176s ago: executing program 3 (id=465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, 0x0}], 0x1, 0x66, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 3.913759304s ago: executing program 0 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001f40)={0x74, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x6c}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x29}}}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}]}, 0x74}}, 0x20000014) 3.605079454s ago: executing program 3 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040047}, 0x240088c4) 3.380217353s ago: executing program 0 (id=470): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000007c0)={{0x3, 0x0, 0x80, {0x0, 0x9000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="d9ff3e0f794901440f20c0663508000000440f22c066b9800000c00f326635000800000f303e0fc7ac6c2066b9301001c00f32ba6100edbaf80c66b878f6128466efbafc0c66b80028000066ef660f5dcf66b9fd03000066b83f00000066ba000000000f30", 0x65}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.069099253s ago: executing program 3 (id=471): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.993699663s ago: executing program 1 (id=472): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@generic={0xfe, 0x70, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b08"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x10, "e80ee304ecb784ec4655260cecea14e4"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x5e, 0xe, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0x8000]}}]}}}, @rthdr={{0x18}}], 0x1f8}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.464810811s ago: executing program 0 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0xfffd, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1000, 0x10001}}}}}}, 0x0) 2.281065715s ago: executing program 1 (id=474): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000003380)='ns/cgroup\x00') socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x218d, &(0x7f0000000140)={0x0, 0xfffffffc, 0x800, 0x3, 0x3cf}, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.254911889s ago: executing program 4 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00', 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000130001ac29f9fae59400fafffffffedb", @ANYRES32=r2, @ANYBLOB="004c00002079000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008cd}, 0x20048000) 2.058645013s ago: executing program 3 (id=476): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x2, 0x80001) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000000)={0x0, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.881052697s ago: executing program 0 (id=477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) statx(0xffffffffffffff9c, 0x0, 0x0, 0x6000, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.601676062s ago: executing program 1 (id=478): semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000080)=""/4096) 1.371051633s ago: executing program 3 (id=479): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r0, 0x0, 0x5ce) 1.129079394s ago: executing program 1 (id=480): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000200000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0500080000000000090007004ff5677c1a0000000800090007ac0f"], 0x38}}, 0x0) 827.933513ms ago: executing program 1 (id=481): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 666.931983ms ago: executing program 0 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000"], 0x3c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) 237.070409ms ago: executing program 0 (id=483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x46fd, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r3, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="27030200590214000600002fb96dbcf706e1", 0x12}], 0x1}, 0x4084) 0s ago: executing program 1 (id=484): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)=0x8, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x1, 0x0, 0x4, 0xffffffffffffffff, 0x7, 0x7fffffff, 0x652, 0xb, 0x8000009657, 0x1, 0x6, 0xffffffffffffffff, 0xc03, 0x800000000b, 0x80000000000000, 0xcbe, 0x1, 0x1, 0x1000000094d6, 0x10000000000001, 0xfffffffffffffffd, 0x809, 0xfff, 0xfffffffffffffffa, 0x80003, 0xf650}) write(r4, &(0x7f0000000040)="05000000010000", 0x7) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1000, 0x2d3, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 63.805779][ T5751] cgroup: Unknown subsys name 'net' [ 63.939186][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.250765][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.145792][ T5762] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.164397][ T5762] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.173765][ T5762] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.182078][ T5762] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.194215][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.202434][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.243809][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.256651][ T5764] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.280267][ T5764] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.289520][ T5764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.289638][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.305381][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.313078][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.314875][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.334083][ T5764] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.341672][ T5764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.349585][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.357197][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.392859][ T5762] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.402550][ T5762] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.411597][ T5762] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.427363][ T5762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.437577][ T5762] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.452132][ T5762] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.737268][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 67.845548][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 67.941348][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.949259][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.957913][ T5760] bridge_slave_0: entered allmulticast mode [ 67.964895][ T5760] bridge_slave_0: entered promiscuous mode [ 67.972247][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.992949][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.000314][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.007775][ T5760] bridge_slave_1: entered allmulticast mode [ 68.014874][ T5760] bridge_slave_1: entered promiscuous mode [ 68.036784][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.074199][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.099066][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.177818][ T5760] team0: Port device team_slave_0 added [ 68.187890][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.195824][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.202963][ T5763] bridge_slave_0: entered allmulticast mode [ 68.210522][ T5763] bridge_slave_0: entered promiscuous mode [ 68.222436][ T5760] team0: Port device team_slave_1 added [ 68.254791][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.261900][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.269237][ T5763] bridge_slave_1: entered allmulticast mode [ 68.276634][ T5763] bridge_slave_1: entered promiscuous mode [ 68.306978][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.314082][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.340362][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.381063][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.389259][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.415377][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.437346][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.444558][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.451698][ T5769] bridge_slave_0: entered allmulticast mode [ 68.458729][ T5769] bridge_slave_0: entered promiscuous mode [ 68.475754][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.482862][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.490449][ T5767] bridge_slave_0: entered allmulticast mode [ 68.498608][ T5767] bridge_slave_0: entered promiscuous mode [ 68.510400][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.517906][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.525089][ T5767] bridge_slave_1: entered allmulticast mode [ 68.531692][ T5767] bridge_slave_1: entered promiscuous mode [ 68.538994][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.548512][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.555781][ T5769] bridge_slave_1: entered allmulticast mode [ 68.562391][ T5769] bridge_slave_1: entered promiscuous mode [ 68.582217][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.594835][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.658950][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.670914][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.682975][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.726973][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.738445][ T5763] team0: Port device team_slave_0 added [ 68.747814][ T5763] team0: Port device team_slave_1 added [ 68.757254][ T5760] hsr_slave_0: entered promiscuous mode [ 68.763507][ T5760] hsr_slave_1: entered promiscuous mode [ 68.811091][ T5767] team0: Port device team_slave_0 added [ 68.837936][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.845113][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.871881][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.884753][ T5767] team0: Port device team_slave_1 added [ 68.890996][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.898101][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.924047][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.937836][ T5769] team0: Port device team_slave_0 added [ 68.973007][ T5769] team0: Port device team_slave_1 added [ 68.994632][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.001590][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.029327][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.064575][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.071547][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.097738][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.109637][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.116813][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.143475][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.179051][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.186203][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.212600][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.234288][ T5762] Bluetooth: hci0: command tx timeout [ 69.253924][ T5763] hsr_slave_0: entered promiscuous mode [ 69.260549][ T5763] hsr_slave_1: entered promiscuous mode [ 69.267155][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.275617][ T5763] Cannot create hsr debugfs directory [ 69.315988][ T5767] hsr_slave_0: entered promiscuous mode [ 69.322185][ T5767] hsr_slave_1: entered promiscuous mode [ 69.328236][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.335955][ T5767] Cannot create hsr debugfs directory [ 69.394233][ T5762] Bluetooth: hci2: command tx timeout [ 69.394249][ T51] Bluetooth: hci1: command tx timeout [ 69.421510][ T5769] hsr_slave_0: entered promiscuous mode [ 69.427951][ T5769] hsr_slave_1: entered promiscuous mode [ 69.434452][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.442008][ T5769] Cannot create hsr debugfs directory [ 69.473537][ T5762] Bluetooth: hci3: command tx timeout [ 69.712858][ T5760] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.724177][ T5760] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.733310][ T5760] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.751441][ T5760] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.819848][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.830652][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.839932][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.851248][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.938640][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.950460][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.960692][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.980929][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.049795][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.088639][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.114547][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.124094][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.133216][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.150761][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.158479][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.175622][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.197573][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.204716][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.300405][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.342683][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.358580][ T5760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.396897][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.404065][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.415193][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.422325][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.441332][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.489610][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.516620][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.539727][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.580615][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.587807][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.599525][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.606998][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.627819][ T1046] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.634989][ T1046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.660671][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.667833][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.819579][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.939948][ T5760] veth0_vlan: entered promiscuous mode [ 70.985051][ T5760] veth1_vlan: entered promiscuous mode [ 71.072555][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.090346][ T5760] veth0_macvtap: entered promiscuous mode [ 71.108758][ T5760] veth1_macvtap: entered promiscuous mode [ 71.170354][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.184677][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.209833][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.222519][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.237906][ T5760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.247067][ T5760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258319][ T5760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.268020][ T5760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.305390][ T5763] veth0_vlan: entered promiscuous mode [ 71.317244][ T5762] Bluetooth: hci0: command tx timeout [ 71.351652][ T5769] veth0_vlan: entered promiscuous mode [ 71.382680][ T5763] veth1_vlan: entered promiscuous mode [ 71.434605][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.442578][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.456261][ T5769] veth1_vlan: entered promiscuous mode [ 71.473910][ T5762] Bluetooth: hci1: command tx timeout [ 71.479463][ T5762] Bluetooth: hci2: command tx timeout [ 71.479591][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491607][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.525112][ T5767] veth0_vlan: entered promiscuous mode [ 71.542687][ T5767] veth1_vlan: entered promiscuous mode [ 71.553829][ T51] Bluetooth: hci3: command tx timeout [ 71.561825][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.569953][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.576164][ T5769] veth0_macvtap: entered promiscuous mode [ 71.602233][ T5763] veth0_macvtap: entered promiscuous mode [ 71.628178][ T5769] veth1_macvtap: entered promiscuous mode [ 71.647527][ T5763] veth1_macvtap: entered promiscuous mode [ 71.662298][ T5767] veth0_macvtap: entered promiscuous mode [ 71.689223][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.700259][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.719476][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.761431][ T5767] veth1_macvtap: entered promiscuous mode [ 71.780290][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.791708][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.809122][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.840530][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.874139][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.894320][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.917031][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.945044][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.955427][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.975047][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.984296][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.993031][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.010068][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.021410][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.031267][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.042157][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.053010][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.063847][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.075347][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.091732][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.103104][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.113238][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.125186][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.136775][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.148007][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.160921][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.175657][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.179251][ T5853] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 72.186166][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.186206][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.217590][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.229142][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.268145][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.302512][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.312300][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.334235][ T5854] netlink: zone id is out of range [ 72.339459][ T5854] netlink: zone id is out of range [ 72.345194][ T5854] netlink: zone id is out of range [ 72.350444][ T5854] netlink: zone id is out of range [ 72.355718][ T5854] netlink: zone id is out of range [ 72.360844][ T5854] netlink: zone id is out of range [ 72.366095][ T5854] netlink: zone id is out of range [ 72.371222][ T5854] netlink: zone id is out of range [ 72.376580][ T5854] netlink: zone id is out of range [ 72.381705][ T5854] netlink: zone id is out of range [ 72.395756][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.484973][ T5854] Bluetooth: MGMT ver 1.22 [ 72.531872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.553855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.579195][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.612583][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.655791][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.675094][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.823902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.844350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.883919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.199766][ T5857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8'. [ 73.292725][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.324953][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.354748][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.362590][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.394918][ T51] Bluetooth: hci0: command tx timeout [ 73.441266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.454983][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.462795][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.467823][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.534379][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.552812][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.561223][ T51] Bluetooth: hci2: command tx timeout [ 73.569164][ T5762] Bluetooth: hci1: command tx timeout [ 73.634981][ T5762] Bluetooth: hci3: command tx timeout [ 73.680254][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.724756][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.813817][ T5866] netlink: 'syz.1.3': attribute type 1 has an invalid length. [ 73.837884][ T5867] netlink: 'syz.2.2': attribute type 1 has an invalid length. [ 73.873732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.882899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.103330][ T5879] Bluetooth: MGMT ver 1.22 [ 75.154885][ T5814] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.343725][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.374869][ T5814] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.390060][ T5814] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 75.410158][ T5814] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 75.419817][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.447017][ T5814] usb 4-1: config 0 descriptor?? [ 75.458622][ T5814] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 75.466327][ T5814] dvb-usb: bulk message failed: -22 (3/0) [ 75.473609][ T51] Bluetooth: hci0: command tx timeout [ 75.484290][ T5814] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 75.502959][ T5814] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 75.513943][ T5814] usb 4-1: media controller created [ 75.526177][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.558866][ T5814] dvb-usb: bulk message failed: -22 (6/0) [ 75.581287][ T5858] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.593251][ T5814] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 75.600985][ T5858] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.617122][ T5858] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.635261][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 75.640072][ T5082] Bluetooth: hci2: command tx timeout [ 75.651949][ T51] Bluetooth: hci1: command tx timeout [ 75.658436][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.702411][ T5814] dvb-usb: schedule remote query interval to 150 msecs. [ 75.707286][ T5894] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.714635][ T5877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 75.726543][ T5762] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 75.739898][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 75.746643][ T5082] Bluetooth: hci3: command tx timeout [ 75.772932][ T5814] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 75.798120][ T5858] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 75.844842][ T5814] usb 4-1: USB disconnect, device number 2 [ 75.946888][ T5814] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 76.092106][ T5858] usb 2-1: USB disconnect, device number 2 [ 76.222913][ T5907] 9pnet_virtio: no channels available for device syz [ 77.043522][ T5845] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.234213][ T5845] usb 1-1: Using ep0 maxpacket: 8 [ 77.248723][ T5845] usb 1-1: config 0 interface 0 has no altsetting 0 [ 77.255832][ T5845] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 77.313828][ T5845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.334497][ T5845] usb 1-1: config 0 descriptor?? [ 77.714584][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.773714][ T5845] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 77.844771][ T5946] ntfs3: nullb0: Primary boot signature is not NTFS. [ 77.852155][ T5946] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 77.903450][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 77.915901][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.932671][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.956448][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.990077][ T5153] usb 1-1: USB disconnect, device number 2 [ 78.017391][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 78.037123][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.047741][ T9] usb 2-1: config 0 descriptor?? [ 78.425592][ T5961] 9pnet_virtio: no channels available for device syz [ 78.478710][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 78.608351][ T9] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 78.645759][ T9] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 78.757784][ T5944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 78.786105][ T9] usb 2-1: USB disconnect, device number 3 [ 78.796677][ T5944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.811821][ T5976] 9pnet_virtio: no channels available for device syz [ 78.822298][ T5944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.842729][ T5944] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.963468][ T5845] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.024327][ T5984] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 79.031065][ T5984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 79.047443][ T5984] vhci_hcd vhci_hcd.0: Device attached [ 79.100518][ T5980] kvm: kvm [5978]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 79.153577][ T5845] usb 1-1: Using ep0 maxpacket: 16 [ 79.167497][ T5845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 79.183763][ T5845] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 79.205740][ T5845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.237211][ T5845] usb 1-1: Product: syz [ 79.241407][ T5845] usb 1-1: Manufacturer: syz [ 79.260602][ T5845] usb 1-1: SerialNumber: syz [ 79.268846][ T5845] usb 1-1: config 0 descriptor?? [ 79.289903][ T5845] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 79.321288][ T5845] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 79.373680][ T5944] usb 38-1: SetAddress Request (2) to port 0 [ 79.379954][ T5944] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 79.797647][ T5985] vhci_hcd: connection reset by peer [ 79.824962][ T1046] vhci_hcd: stop threads [ 79.829579][ T1046] vhci_hcd: release socket [ 79.852778][ T1046] vhci_hcd: disconnect device [ 79.895074][ T5845] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 80.324882][ T5845] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 80.343469][ T5845] em28xx 1-1:0.0: board has no eeprom [ 80.434500][ T5845] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 80.447398][ T5845] em28xx 1-1:0.0: dvb set to bulk mode. [ 80.453802][ T5762] Bluetooth: hci3: unexpected event for opcode 0x0803 [ 80.465308][ T9] em28xx 1-1:0.0: Binding DVB extension [ 80.493929][ T5845] usb 1-1: USB disconnect, device number 3 [ 80.508176][ T5845] em28xx 1-1:0.0: Disconnecting em28xx [ 80.592210][ T9] em28xx 1-1:0.0: Registering input extension [ 80.611282][ T5845] em28xx 1-1:0.0: Closing input extension [ 80.646418][ T5845] em28xx 1-1:0.0: Freeing device [ 81.096908][ T789] cfg80211: failed to load regulatory.db [ 81.419666][ T6020] FAULT_FLAG_ALLOW_RETRY missing 801 [ 81.441650][ T6020] CPU: 0 PID: 6020 Comm: syz.2.63 Not tainted syzkaller #0 [ 81.448896][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.458986][ T6020] Call Trace: [ 81.462283][ T6020] [ 81.465225][ T6020] dump_stack_lvl+0x16c/0x230 [ 81.469925][ T6020] ? show_regs_print_info+0x20/0x20 [ 81.475147][ T6020] ? load_image+0x3b0/0x3b0 [ 81.479676][ T6020] ? assert_fault_locked+0x17f/0x3a0 [ 81.484991][ T6020] handle_userfault+0x10ad/0x12a0 [ 81.490036][ T6020] ? lockdep_hardirqs_on+0x98/0x150 [ 81.495269][ T6020] ? userfaultfd_wp_unpopulated+0xa0/0xa0 [ 81.501023][ T6020] ? do_raw_spin_unlock+0x121/0x230 [ 81.506241][ T6020] ? free_unref_page+0x190/0x2e0 [ 81.511197][ T6020] handle_mm_fault+0x312d/0x4920 [ 81.516154][ T6020] ? handle_mm_fault+0xd1/0x4920 [ 81.521122][ T6020] ? numa_migrate_prep+0x350/0x350 [ 81.526246][ T6020] ? follow_page_pte+0x6fb/0x1a70 [ 81.531291][ T6020] ? pmd_lock+0x60/0x60 [ 81.535471][ T6020] __get_user_pages+0x5ea/0x1470 [ 81.540442][ T6020] ? populate_vma_page_range+0x370/0x370 [ 81.546098][ T6020] populate_vma_page_range+0x2b6/0x370 [ 81.551571][ T6020] ? fixup_user_fault+0x710/0x710 [ 81.556612][ T6020] ? vma_set_page_prot+0x12e/0x3e0 [ 81.561744][ T6020] mprotect_fixup+0x977/0xc90 [ 81.566450][ T6020] ? change_protection+0x3220/0x3220 [ 81.571754][ T6020] ? apparmor_file_mprotect+0xfe/0x120 [ 81.577225][ T6020] ? bpf_lsm_file_mprotect+0x9/0x10 [ 81.582436][ T6020] do_mprotect_pkey+0x76e/0xc30 [ 81.587319][ T6020] ? prot_none_test+0x10/0x10 [ 81.592030][ T6020] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 81.598040][ T6020] __x64_sys_mprotect+0x80/0x90 [ 81.602914][ T6020] do_syscall_64+0x55/0xb0 [ 81.607343][ T6020] ? clear_bhb_loop+0x40/0x90 [ 81.612033][ T6020] ? clear_bhb_loop+0x40/0x90 [ 81.616726][ T6020] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.622632][ T6020] RIP: 0033:0x7f57b498f749 [ 81.627065][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.646689][ T6020] RSP: 002b:00007f57b589f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 81.655120][ T6020] RAX: ffffffffffffffda RBX: 00007f57b4be5fa0 RCX: 00007f57b498f749 [ 81.663099][ T6020] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 81.671077][ T6020] RBP: 00007f57b4a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 81.679059][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.687038][ T6020] R13: 00007f57b4be6038 R14: 00007f57b4be5fa0 R15: 00007ffed3ff8c88 [ 81.695036][ T6020] [ 82.220262][ T6025] syz.2.65 uses obsolete (PF_INET,SOCK_PACKET) [ 83.287927][ T6044] syzkaller1: entered promiscuous mode [ 83.299294][ T6044] syzkaller1: entered allmulticast mode [ 83.749834][ T6050] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 84.514646][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.523248][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 84.531632][ T5762] Bluetooth: hci3: hardware error 0x00 [ 84.540048][ T5944] usb 38-1: device descriptor read/8, error -110 [ 84.960616][ T6064] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 84.990613][ T6066] ======================================================= [ 84.990613][ T6066] WARNING: The mand mount option has been deprecated and [ 84.990613][ T6066] and is ignored by this kernel. Remove the mand [ 84.990613][ T6066] option from the mount to silence this warning. [ 84.990613][ T6066] ======================================================= [ 85.063531][ T5944] usb usb38-port1: attempt power cycle [ 85.141081][ T6066] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.206317][ T6067] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.473236][ T6070] input: syz1 as /devices/virtual/input/input8 [ 85.714518][ T5944] usb usb38-port1: unable to enumerate USB device [ 85.923640][ T6078] mmap: syz.2.75 (6078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.157903][ T51] Bluetooth: hci3: unexpected event for opcode 0x042c [ 86.679350][ T5762] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 86.961103][ T6098] syzkaller1: entered promiscuous mode [ 86.989910][ T6098] syzkaller1: entered allmulticast mode [ 87.078018][ T6100] binder: 6099:6100 unknown command 0 [ 87.100834][ T6100] binder: 6099:6100 ioctl c0306201 2000000016c0 returned -22 [ 87.243718][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.308905][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 87.359811][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.535320][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.545096][ T6103] bridge_slave_0 (unregistering): left allmulticast mode [ 87.566190][ T6103] bridge_slave_0 (unregistering): left promiscuous mode [ 87.579936][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.753823][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 87.767679][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.789081][ T9] usb 4-1: config 179 has no interface number 0 [ 87.821308][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 87.839159][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 87.851092][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 87.872607][ T9] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 87.890224][ T9] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.911836][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.921594][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.954182][ T6104] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 88.373983][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 88.707256][ T5944] usb 4-1: USB disconnect, device number 3 [ 88.713458][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 88.721887][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 88.819436][ T5944] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 89.307312][ T6130] UHID_CREATE from different security context by process 55 (syz.0.103), this is not allowed. [ 89.589959][ T6135] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.650232][ T6135] overlayfs: failed to set xattr on upper [ 89.663152][ T6135] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.680315][ T6135] overlayfs: ...falling back to index=off. [ 89.693513][ T6135] overlayfs: ...falling back to uuid=null. [ 89.744162][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.893490][ T5944] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.901562][ T5845] IPVS: starting estimator thread 0... [ 89.977376][ T789] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 90.013681][ T6143] IPVS: using max 17 ests per chain, 40800 per kthread [ 90.031054][ T789] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.093617][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 90.098866][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.139180][ T789] usb 2-1: Product: syz [ 90.146637][ T5944] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.171799][ T789] usb 2-1: Manufacturer: syz [ 90.200644][ T5944] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.213612][ T789] usb 2-1: SerialNumber: syz [ 90.240074][ T789] usb 2-1: config 0 descriptor?? [ 90.263423][ T5944] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.330496][ T5944] usb 1-1: config 1 interface 0 has no altsetting 0 [ 90.380656][ T789] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 90.474112][ T5944] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 90.489782][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.516241][ T6151] Zero length message leads to an empty skb [ 90.528349][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.531409][ T5944] usb 1-1: Product: syz [ 90.558812][ T5944] usb 1-1: Manufacturer: syz [ 90.588378][ T5944] usb 1-1: SerialNumber: syz [ 90.822239][ T5944] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 91.337737][ T5944] usb 1-1: USB disconnect, device number 4 [ 91.358963][ T5944] usblp0: removed [ 92.293558][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.476106][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 92.500700][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.526335][ T5944] usb 2-1: USB disconnect, device number 4 [ 92.572467][ T9] usb 4-1: config 0 has no interfaces? [ 92.587331][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 92.662964][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.717097][ T9] usb 4-1: config 0 descriptor?? [ 93.187679][ T6169] block device autoloading is deprecated and will be removed. [ 93.519841][ T6175] netlink: 36 bytes leftover after parsing attributes in process `syz.2.121'. [ 93.856030][ T6184] netlink: 'syz.2.124': attribute type 5 has an invalid length. [ 94.263054][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 94.895136][ T9] usb 4-1: USB disconnect, device number 4 [ 95.144521][ T6197] (null): rxe_set_mtu: Set mtu to 4096 [ 95.201476][ T6197] lo speed is unknown, defaulting to 1000 [ 95.233275][ T6200] ªªªªªª: renamed from lo (while UP) [ 95.456357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 95.545680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 95.575026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 95.611939][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 95.687541][ T6200] netlink: 124 bytes leftover after parsing attributes in process `syz.0.130'. [ 95.723278][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 95.750000][ T6200] block nbd0: not configured, cannot reconfigure [ 95.795301][ T5858] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 95.962965][ T6210] tipc: Started in network mode [ 95.976825][ T6210] tipc: Node identity 3ef040a6976b, cluster identity 4711 [ 96.001755][ T6210] tipc: Enabled bearer , priority 0 [ 96.057802][ T6211] syzkaller0: entered promiscuous mode [ 96.086997][ T6211] syzkaller0: entered allmulticast mode [ 96.134342][ C0] syzkaller0: tun_net_xmit 90 [ 96.151165][ T6197] infiniband sz1: set active [ 96.161402][ T6210] tipc: Resetting bearer [ 96.176586][ T6197] infiniband sz1: added ªªªªªª [ 96.182184][ T6210] syzkaller0: tun_net_xmit 90 [ 96.192202][ T5858] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.201463][ T6197] sz1: rxe_create_cq: returned err = -12 [ 96.209710][ T789] ªªªªªª speed is unknown, defaulting to 1000 [ 96.216643][ T5858] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 96.222862][ T6197] infiniband sz1: Couldn't create ib_mad CQ [ 96.233190][ T6209] tipc: Resetting bearer [ 96.246342][ T6197] infiniband sz1: Couldn't open port 1 [ 96.264036][ T5858] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 96.305204][ T6209] tipc: Disabling bearer [ 96.305484][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.350008][ T5858] usb 2-1: config 0 descriptor?? [ 96.359819][ T6197] RDS/IB: sz1: added [ 96.360316][ T6197] smc: adding ib device sz1 with port count 1 [ 96.360429][ T6197] smc: ib device sz1 port 1 has pnetid [ 96.390497][ T9] ªªªªªª speed is unknown, defaulting to 1000 [ 96.402126][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 96.502573][ T5858] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 96.685093][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 96.711436][ T5858] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 96.756924][ T5858] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 96.773944][ T5858] usb 2-1: media controller created [ 96.780737][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 96.854479][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 96.871456][ T5858] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 96.943944][ T6217] net_ratelimit: 710 callbacks suppressed [ 96.943957][ T6217] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 96.971903][ T5858] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 97.137598][ T5858] dvb-usb: schedule remote query interval to 150 msecs. [ 97.153976][ T5858] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 97.202927][ T5858] usb 2-1: USB disconnect, device number 5 [ 97.412551][ T5858] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 97.432882][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 97.627972][ T6226] 9pnet_virtio: no channels available for device syz [ 97.659577][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 98.197511][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 98.970385][ T6240] overlayfs: failed to get inode (-116) [ 98.981971][ T6240] overlayfs: failed to get inode (-116) [ 99.328804][ T6250] 9pnet_virtio: no channels available for device syz [ 99.371789][ T6197] ªªªªªª speed is unknown, defaulting to 1000 [ 100.418694][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 100.623496][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 100.635705][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.647110][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.676397][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.712081][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.738660][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.780143][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.799740][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.865660][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.923741][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.976819][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.010178][ T5944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.030468][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.074982][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 101.086115][ T5944] usb 2-1: config 0 descriptor?? [ 101.114111][ T9] usbtmc 4-1:16.0: can't read capabilities [ 101.306943][ T9] usb 4-1: USB disconnect, device number 5 [ 101.518434][ T5944] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 101.622247][ T5944] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 101.888554][ T5806] usb 2-1: USB disconnect, device number 6 [ 102.178043][ T6278] loop6: detected capacity change from 0 to 524287999 [ 102.258623][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.267949][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.284794][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.294014][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.340808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.350044][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.392986][ T5753] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.500368][ T5753] Buffer I/O error on dev loop6, logical block 0, async page read [ 102.548054][ T6282] netlink: 68 bytes leftover after parsing attributes in process `syz.2.161'. [ 102.572190][ T5753] ldm_validate_partition_table(): Disk read failed. [ 102.624638][ T5753] Dev loop6: unable to read RDB block 0 [ 102.655592][ T5753] loop6: unable to read partition table [ 102.684966][ T5753] loop6: partition table beyond EOD, truncated [ 102.902319][ T5762] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 103.311626][ T6292] syzkaller0: entered promiscuous mode [ 103.358229][ T6292] syzkaller0: entered allmulticast mode [ 104.053238][ T5845] IPVS: starting estimator thread 0... [ 104.060052][ T6305] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20004 [ 104.152571][ T6303] delete_channel: no stack [ 104.175108][ T6307] IPVS: using max 18 ests per chain, 43200 per kthread [ 104.605823][ T6314] netlink: 84 bytes leftover after parsing attributes in process `syz.2.174'. [ 104.842595][ T5762] Bluetooth: Wrong link type (-71) [ 105.762316][ T27] audit: type=1800 audit(1768380463.450:2): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.185" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=10657 res=0 errno=0 [ 106.160671][ T5806] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.429249][ T6353] process 'syz.1.189' launched './file1' with NULL argv: empty string added [ 106.576491][ T5806] usb 4-1: Using ep0 maxpacket: 8 [ 106.778599][ T5806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.818228][ T5806] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.166487][ T5806] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.234121][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.242150][ T5806] usb 4-1: Product: syz [ 107.289203][ T5806] usb 4-1: Manufacturer: syz [ 107.350661][ T5806] usb 4-1: SerialNumber: syz [ 107.737462][ T5806] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 108.224642][ T6410] syzkaller0: entered promiscuous mode [ 108.226233][ T5806] usb 4-1: USB disconnect, device number 6 [ 108.262416][ T5806] usblp0: removed [ 108.308020][ T6410] syzkaller0: entered allmulticast mode [ 110.227959][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.261652][ T6447] 9pnet_virtio: no channels available for device syz [ 110.413867][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 110.454196][ T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.494977][ T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.555864][ T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.616834][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 110.666058][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.708384][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.732915][ T9] usb 3-1: Product: syz [ 110.757495][ T9] usb 3-1: Manufacturer: syz [ 110.767539][ T9] usb 3-1: SerialNumber: syz [ 111.031545][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 111.270822][ T6439] usblp0:failed reading printer status (-32) [ 111.285593][ T5944] usb 3-1: USB disconnect, device number 2 [ 111.299531][ T5944] usblp0: removed [ 111.374753][ T6459] warning: `syz.3.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.098123][ T6465] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.183872][ T6469] input: syz0 as /devices/virtual/input/input11 [ 113.893846][ T27] audit: type=1326 audit(1768380471.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.3.220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b2498f749 code=0x0 [ 114.803547][ T5845] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.976856][ T6506] 9pnet_virtio: no channels available for device syz [ 114.995871][ T5845] usb 3-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.029903][ T5845] usb 3-1: config 1 interface 0 has no altsetting 0 [ 115.121514][ T5845] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 115.155770][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.173357][ T5845] usb 3-1: Product: syz [ 115.180643][ T5845] usb 3-1: Manufacturer: syz [ 115.213821][ T5845] usb 3-1: SerialNumber: syz [ 115.540920][ T5845] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 15 proto 1 vid 0x04B8 pid 0x0202 [ 115.640656][ T5845] usb 3-1: USB disconnect, device number 3 [ 115.708467][ T5845] usblp0: removed [ 116.536129][ T6526] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 117.923752][ T6546] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 118.317570][ T6558] binder: 6557:6558 ioctl c0046209 0 returned -22 [ 120.497124][ T6413] Set syz1 is full, maxelem 65536 reached [ 122.063498][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.298914][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 122.344464][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.381772][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.438141][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.497712][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.531906][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.569614][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.827012][ T9] usb 3-1: usb_control_msg returned -32 [ 122.850418][ T9] usbtmc 3-1:16.0: can't read capabilities [ 123.072473][ T5762] Bluetooth: hci1: Malformed Event: 0x02 [ 123.178066][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 123.264990][ T6607] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 123.362475][ T6607] bond1: entered promiscuous mode [ 123.371621][ T6607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.398055][ T6610] bond1: (slave bridge1): making interface the new active one [ 123.405841][ T6610] bridge1: entered promiscuous mode [ 123.421076][ T6610] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 123.710219][ T6615] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.397333][ T6623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 124.837175][ T9] usb 3-1: USB disconnect, device number 4 [ 125.314106][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.523756][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 125.549586][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 125.585948][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 125.598172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 125.616703][ T9] usb 3-1: Product: syz [ 125.631865][ T9] usb 3-1: Manufacturer: syz [ 125.640660][ T9] usb 3-1: SerialNumber: syz [ 125.665720][ T9] usb 3-1: config 0 descriptor?? [ 125.699028][ T6630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.749724][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 125.773456][ T9] hub: probe of 3-1:0.0 failed with error -5 [ 127.118987][ T5944] usb 3-1: USB disconnect, device number 5 [ 127.146202][ T789] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.353851][ T789] usb 4-1: Using ep0 maxpacket: 8 [ 127.368030][ T789] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 127.378182][ T789] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.410970][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.445067][ T789] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.481582][ T789] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.526633][ T789] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.571272][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.831862][ T789] usb 4-1: GET_CAPABILITIES returned 0 [ 127.864250][ T789] usbtmc 4-1:16.0: can't read capabilities [ 128.105445][ T789] usb 4-1: USB disconnect, device number 7 [ 128.111455][ T6668] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 128.684864][ T789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.830652][ T6688] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 128.883946][ T789] usb 1-1: Using ep0 maxpacket: 16 [ 128.913328][ T789] usb 1-1: config index 0 descriptor too short (expected 8192, got 68) [ 128.943225][ T789] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.962913][ T789] usb 1-1: config 0 has no interfaces? [ 128.970416][ T789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.020106][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.057657][ T789] usb 1-1: SerialNumber: syz [ 129.124339][ T789] usb 1-1: config 0 descriptor?? [ 129.370654][ T789] usb 1-1: USB disconnect, device number 5 [ 132.453516][ T789] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 132.541927][ T6740] syzkaller0: entered promiscuous mode [ 132.550621][ T6740] syzkaller0: entered allmulticast mode [ 132.569215][ T6740] 0: reclassify loop, rule prio 0, protocol 800 [ 132.646716][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.681661][ T789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.701830][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.735221][ T789] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.764203][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.789960][ T789] usb 4-1: config 0 descriptor?? [ 132.934052][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940472][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.084902][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 133.236574][ T789] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 133.269281][ T789] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 133.336846][ T789] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 133.518126][ T789] usb 4-1: USB disconnect, device number 8 [ 133.594991][ T6755] fido_id[6755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 134.342592][ T6767] ªªªªªª speed is unknown, defaulting to 1000 [ 134.417150][ T6772] kvm: user requested TSC rate below hardware speed [ 134.449639][ T6772] netlink: 'syz.1.327': attribute type 10 has an invalid length. [ 134.484440][ T6770] comedi: valid board names for 8255 driver are: [ 134.491858][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.499736][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.523144][ T6770] 8255 [ 134.532510][ T6770] comedi: valid board names for vmk80xx driver are: [ 134.560465][ T6770] vmk80xx [ 134.573310][ T6770] comedi: valid board names for usbduxsigma driver are: [ 134.589823][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.597474][ T6772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.604998][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.612140][ T6772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.641060][ T6770] usbduxsigma [ 134.664409][ T6770] comedi: valid board names for usbduxfast driver are: [ 134.671277][ T6770] usbduxfast [ 134.682167][ T6770] comedi: valid board names for usbdux driver are: [ 134.692571][ T6770] usbdux [ 134.710603][ T6770] comedi: valid board names for ni6501 driver are: [ 134.723563][ T6770] ni6501 [ 134.730807][ T6770] comedi: valid board names for dt9812 driver are: [ 134.759848][ T6772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.768983][ T6770] dt9812 [ 134.782144][ T6770] comedi: valid board names for ni_labpc_cs driver are: [ 134.804549][ T6770] ni_labpc_cs [ 134.817015][ T6770] comedi: valid board names for ni_daq_700 driver are: [ 134.827122][ T6770] ni_daq_700 [ 134.837231][ T6770] comedi: valid board names for labpc_pci driver are: [ 134.863663][ T6770] labpc_pci [ 134.873837][ T6770] comedi: valid board names for adl_pci9118 driver are: [ 134.897793][ T6770] pci9118dg [ 134.901071][ T6770] pci9118hg [ 134.909307][ T6770] pci9118hr [ 134.919453][ T6770] comedi: valid board names for 8255_pci driver are: [ 134.935699][ T6770] 8255_pci [ 134.945801][ T6770] comedi: valid board names for s526 driver are: [ 134.967099][ T6770] s526 [ 134.969946][ T6770] comedi: valid board names for multiq3 driver are: [ 134.986942][ T6770] multiq3 [ 134.990044][ T6770] comedi: valid board names for pcmuio driver are: [ 135.013120][ T6770] pcmuio48 [ 135.034184][ T6770] pcmuio96 [ 135.038612][ T6770] comedi: valid board names for pcmmio driver are: [ 135.053572][ T6770] pcmmio [ 135.069290][ T6770] comedi: valid board names for pcmda12 driver are: [ 135.095991][ T6770] pcmda12 [ 135.101559][ T6770] comedi: valid board names for pcmad driver are: [ 135.141592][ T6770] pcmad12 [ 135.153854][ T6770] pcmad16 [ 135.156938][ T6770] comedi: valid board names for ni_labpc driver are: [ 135.175382][ T6770] lab-pc-1200 [ 135.178771][ T6770] lab-pc-1200ai [ 135.199380][ T6770] lab-pc+ [ 135.233799][ T6770] comedi: valid board names for atmio16 driver are: [ 135.240427][ T6770] atmio16 [ 135.287998][ T6770] atmio16d [ 135.291135][ T6770] comedi: valid board names for ni_at_ao driver are: [ 135.323579][ T6770] at-ao-6 [ 135.326626][ T6770] at-ao-10 [ 135.329735][ T6770] comedi: valid board names for ni_at_a2150 driver are: [ 135.374659][ T6770] ni_at_a2150 [ 135.378066][ T6770] comedi: valid board names for adq12b driver are: [ 135.415707][ T6770] adq12b [ 135.431150][ T6770] comedi: valid board names for mpc624 driver are: [ 135.454980][ T6770] mpc624 [ 135.460081][ T6770] comedi: valid board names for c6xdigio driver are: [ 135.489328][ T6770] c6xdigio [ 135.492464][ T6770] comedi: valid board names for aio_iiro_16 driver are: [ 135.534838][ T6770] aio_iiro_16 [ 135.556386][ T6770] comedi: valid board names for aio_aio12_8 driver are: [ 135.563343][ T6770] aio_aio12_8 [ 135.591094][ T6770] aio_ai12_8 [ 135.605631][ T6770] aio_ao12_4 [ 135.608939][ T6770] comedi: valid board names for fl512 driver are: [ 135.627103][ T27] audit: type=1326 audit(1768380493.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6766 comm="syz.0.325" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73e198f749 code=0x0 [ 135.654747][ T6770] fl512 [ 135.657621][ T6770] comedi: valid board names for dmm32at driver are: [ 135.670456][ T6770] dmm32at [ 135.681162][ T6770] comedi: valid board names for dt282x driver are: [ 135.691776][ T6770] dt2821 [ 135.700927][ T6770] dt2821-f [ 135.719309][ T6770] dt2821-g [ 135.736142][ T6770] dt2823 [ 135.768275][ T6770] dt2824-pgh [ 135.789528][ T6770] dt2824-pgl [ 135.810064][ T6770] dt2825 [ 135.813030][ T6770] dt2827 [ 135.840196][ T6770] dt2828 [ 135.843165][ T6770] dt2829 [ 135.871006][ T6770] dt21-ez [ 135.878656][ T6770] dt23-ez [ 135.899494][ T6770] dt24-ez [ 135.905069][ T6770] dt24-ez-pgl [ 135.913694][ T6770] comedi: valid board names for dt2817 driver are: [ 135.933806][ T6770] dt2817 [ 135.936765][ T6770] comedi: valid board names for dt2815 driver are: [ 135.943264][ T6770] dt2815 [ 135.975660][ T6770] comedi: valid board names for dt2814 driver are: [ 135.993906][ T6770] dt2814 [ 136.007096][ T6770] comedi: valid board names for dt2811 driver are: [ 136.023962][ T6770] dt2811-pgh [ 136.033314][ T6770] dt2811-pgl [ 136.039302][ T6770] comedi: valid board names for dt2801 driver are: [ 136.055796][ T6770] dt2801 [ 136.068480][ T6770] comedi: valid board names for das6402 driver are: [ 136.082206][ T6770] das6402-12 [ 136.098383][ T6770] das6402-16 [ 136.101685][ T6770] comedi: valid board names for das1800 driver are: [ 136.136092][ T6770] das-1701st [ 136.149612][ T6770] das-1701st-da [ 136.153181][ T6770] das-1702st [ 136.165653][ T6770] das-1702st-da [ 136.169223][ T6770] das-1702hr [ 136.181101][ T6770] das-1702hr-da [ 136.188419][ T6770] das-1701ao [ 136.192837][ T6770] das-1702ao [ 136.201880][ T6770] das-1801st [ 136.213777][ T6770] das-1801st-da [ 136.217414][ T6770] das-1802st [ 136.220750][ T6770] das-1802st-da [ 136.234752][ T6770] das-1802hr [ 136.241146][ T6770] das-1802hr-da [ 136.255298][ T6770] das-1801hc [ 136.270082][ T6770] das-1802hc [ 136.280953][ T6770] das-1801ao [ 136.293554][ T6770] das-1802ao [ 136.296859][ T6770] comedi: valid board names for das800 driver are: [ 136.323508][ T6770] das-800 [ 136.327978][ T6770] cio-das800 [ 136.331280][ T6770] das-801 [ 136.343507][ T6770] cio-das801 [ 136.348512][ T5762] Bluetooth: hci0: ACL packet too small [ 136.357031][ T6770] das-802 [ 136.360086][ T6770] cio-das802 [ 136.375118][ T6770] cio-das802/16 [ 136.384649][ T6770] comedi: valid board names for isa-das08 driver are: [ 136.396319][ T6770] isa-das08 [ 136.399535][ T6770] das08-pgm [ 136.402751][ T6770] das08-pgh [ 136.436440][ T6770] das08-pgl [ 136.439664][ T6770] das08-aoh [ 136.442870][ T6770] das08-aol [ 136.463460][ T6770] das08-aom [ 136.466676][ T6770] das08/jr-ao [ 136.475589][ T6770] das08jr-16-ao [ 136.479153][ T6770] pc104-das08 [ 136.491420][ T6770] das08jr/16 [ 136.498823][ T6770] comedi: valid board names for das16m1 driver are: [ 136.513936][ T6770] das16m1 [ 136.521948][ T6770] comedi: valid board names for dac02 driver are: [ 136.544089][ T6770] dac02 [ 136.572028][ T6770] comedi: valid board names for rti802 driver are: [ 136.602176][ T6770] rti802 [ 136.606540][ T6770] comedi: valid board names for rti800 driver are: [ 136.623285][ T6770] rti800 [ 136.627752][ T6770] rti815 [ 136.630705][ T6770] comedi: valid board names for pcm3724 driver are: [ 136.649157][ T6770] pcm3724 [ 136.659912][ T6770] comedi: valid board names for pcl818 driver are: [ 136.675208][ T6770] pcl818l [ 136.678742][ T6770] pcl818h [ 136.681781][ T6770] pcl818hd [ 136.693736][ T6770] pcl818hg [ 136.696876][ T6770] pcl818 [ 136.721393][ T6770] pcl718 [ 136.730470][ T6770] pcm3718 [ 136.740385][ T6770] comedi: valid board names for pcl816 driver are: [ 136.759706][ T6770] pcl816 [ 136.773220][ T6770] pcl814b [ 136.778084][ T6770] comedi: valid board names for pcl812 driver are: [ 136.794291][ T6770] pcl812 [ 136.797320][ T6770] pcl812pg [ 136.800712][ T6770] acl8112pg [ 136.808071][ T6770] acl8112dg [ 136.811289][ T6770] acl8112hg [ 136.827319][ T6770] a821pgl [ 136.835832][ T6770] a821pglnda [ 136.843914][ T6770] a821pgh [ 136.846958][ T6770] a822pgl [ 136.849994][ T6770] a822pgh [ 136.864533][ T6770] a823pgl [ 136.873711][ T6770] a823pgh [ 136.877180][ T6770] pcl813 [ 136.882370][ T6770] pcl813b [ 136.890338][ T6770] acl8113 [ 136.897076][ T6770] iso813 [ 136.900031][ T6770] acl8216 [ 136.916053][ T6770] a826pg [ 136.921576][ T6770] comedi: valid board names for pcl730 driver are: [ 136.940269][ T6770] pcl730 [ 136.949385][ T6770] iso730 [ 136.956378][ T6770] acl7130 [ 136.962505][ T6770] pcm3730 [ 136.973208][ T6770] pcl725 [ 136.981052][ T6770] p8r8dio [ 136.987827][ T6770] acl7225b [ 136.995655][ T6770] p16r16dio [ 137.002256][ T6770] pcl733 [ 137.008883][ T6770] pcl734 [ 137.016231][ T6770] opmm-1616-xt [ 137.019708][ T6770] pearl-mm-p [ 137.031045][ T6770] ir104-pbf [ 137.039079][ T6770] comedi: valid board names for pcl726 driver are: [ 137.063825][ T6770] pcl726 [ 137.069032][ T6770] pcl727 [ 137.075814][ T6770] pcl728 [ 137.082115][ T6770] acl6126 [ 137.091455][ T6770] acl6128 [ 137.098113][ T6770] comedi: valid board names for pcl724 driver are: [ 137.111656][ T6770] pcl724 [ 137.118813][ T6770] pcl722 [ 137.126574][ T6770] pcl731 [ 137.129528][ T6770] acl7122 [ 137.132553][ T6770] acl7124 [ 137.147084][ T6770] pet48dio [ 137.150220][ T6770] pcmio48 [ 137.153244][ T6770] onyx-mm-dio [ 137.170494][ T6770] comedi: valid board names for pcl711 driver are: [ 137.185853][ T6770] pcl711 [ 137.191103][ T6770] pcl711b [ 137.201104][ T6770] acl8112hg [ 137.208161][ T6770] acl8112dg [ 137.214803][ T6770] comedi: valid board names for amplc_pc263 driver are: [ 137.230881][ T6770] pc263 [ 137.237691][ T6770] comedi: valid board names for amplc_pc236 driver are: [ 137.253034][ T6770] pc36at [ 137.281345][ T6770] comedi: valid board names for amplc_dio200 driver are: [ 137.314129][ T6770] pc212e [ 137.325521][ T6770] pc214e [ 137.333713][ T6770] pc215e [ 137.338663][ T6770] pc218e [ 137.344897][ T6770] pc272e [ 137.352228][ T6770] comedi: valid board names for comedi_parport driver are: [ 137.371422][ T6770] comedi_parport [ 137.383695][ T6770] comedi: valid board names for comedi_test driver are: [ 137.395705][ T6770] comedi_test [ 137.400881][ T6770] comedi: valid board names for comedi_bond driver are: [ 137.419371][ T6770] comedi_bond [ 137.652241][ T27] audit: type=1326 audit(1768380495.340:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.0.335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73e198f749 code=0x0 [ 138.727600][ T6807] binder: 6806:6807 ioctl c018620c 200000000700 returned -1 [ 139.040058][ T6811] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.077643][ T6811] team0: Device ipvlan2 is already an upper device of the team interface `ÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    getty: ttyS0: read error: Resource temporarily unavailable [ 156.779704][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 157.096248][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 157.268912][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.443209][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.520686][ T2900] bond0 (unregistering): Released all slaves [ 158.682870][ T789] ªªªªªª speed is unknown, defaulting to 1000 [ 158.810314][ T7035] syz_tun: entered allmulticast mode [ 158.834418][ T7035] syz_tun: left allmulticast mode [ 159.771897][ T6886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.816531][ T6886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.908832][ T6886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.963750][ T2900] IPVS: stop unused estimator thread 0... [ 159.987474][ T6886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.443638][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 160.453103][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 160.461845][ T5762] Bluetooth: hci2: hardware error 0x00 [ 160.575625][ T6886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.601081][ T6886] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.615851][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.623026][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.701113][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.708330][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.931882][ T6886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.966880][ T6886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.597762][ T27] audit: type=1326 audit(1768380519.290:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.1.427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ef3f8f749 code=0x0 [ 161.777189][ T6886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.834144][ T5762] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 163.016351][ T6886] veth0_vlan: entered promiscuous mode [ 163.071464][ T6886] veth1_vlan: entered promiscuous mode [ 163.173624][ T6886] veth0_macvtap: entered promiscuous mode [ 163.212630][ T6886] veth1_macvtap: entered promiscuous mode [ 163.256019][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.281637][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.303977][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.333000][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.358286][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.391923][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.418498][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.454765][ T6886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.533688][ T6886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.587671][ T6886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.657049][ T6886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.710830][ T6886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.763555][ T6886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.803528][ T6886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.632423][ T7150] fuse: Bad value for 'fd' [ 169.046191][ T6393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.171221][ T6393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.214448][ T7168] fuse: Bad value for 'fd' [ 169.406123][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.456230][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.922034][ T7179] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.000658][ T7179] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.056271][ T7179] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.108543][ T7179] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.183785][ T7179] geneve2: entered promiscuous mode [ 170.233856][ T7179] geneve2: entered allmulticast mode [ 171.179284][ T7210] overlayfs: failed to get inode (-116) [ 171.214175][ T7210] overlayfs: failed to get inode (-116) [ 171.580662][ T7217] netlink: 'syz.1.457': attribute type 1 has an invalid length. [ 171.930718][ T7218] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 171.976091][ T6393] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 172.009521][ T7223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.144563][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 172.171684][ T11] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 172.203587][ T7226] netlink: 'syz.3.458': attribute type 19 has an invalid length. [ 172.258493][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 172.346732][ T7226] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.355751][ T7226] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.364830][ T7226] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.374596][ T7226] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.620296][ T7239] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 172.645588][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.681680][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 172.718075][ T7226] netlink: 'syz.3.458': attribute type 19 has an invalid length. [ 172.760238][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 172.871852][ T5944] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 173.047519][ T7240] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 173.143755][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 173.219628][ T5944] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 173.251957][ T5944] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.272620][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.328016][ T5944] usb 5-1: Product: syz [ 173.332208][ T5944] usb 5-1: Manufacturer: syz [ 173.388971][ T7246] program syz.3.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.420166][ T7240] syz.1.462 (7240) used greatest stack depth: 20040 bytes left [ 173.430870][ T5944] usb 5-1: SerialNumber: syz [ 173.472495][ T5944] usb 5-1: config 0 descriptor?? [ 173.527804][ T5944] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 173.593699][ T5944] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 174.171958][ T5944] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 174.400325][ T7258] fuse: Bad value for 'fd' [ 174.633681][ T5944] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 174.718724][ T5944] em28xx 5-1:0.0: board has no eeprom [ 174.863520][ T5944] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 174.910268][ T5944] em28xx 5-1:0.0: dvb set to bulk mode. [ 174.961398][ T789] em28xx 5-1:0.0: Binding DVB extension [ 175.015607][ T5944] usb 5-1: USB disconnect, device number 2 [ 175.106816][ T5944] em28xx 5-1:0.0: Disconnecting em28xx [ 175.445422][ T789] em28xx 5-1:0.0: Registering input extension [ 175.451703][ T5944] em28xx 5-1:0.0: Closing input extension [ 175.564529][ T5944] em28xx 5-1:0.0: Freeing device [ 176.250576][ T7280] ªªªªªª speed is unknown, defaulting to 1000 [ 176.803754][ T5944] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 177.052358][ T5944] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.091396][ T5944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.149016][ T5944] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.181043][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 177.247178][ T5944] usb 4-1: Product: syz [ 177.273462][ T5944] usb 4-1: Manufacturer: syz [ 177.308527][ T5944] usb 4-1: SerialNumber: syz [ 177.360164][ T5944] usb 4-1: config 0 descriptor?? [ 177.417426][ T5944] usb 4-1: selecting invalid altsetting 0 [ 177.696258][ T7295] [ 177.698617][ T7295] ============================================ [ 177.704761][ T7295] WARNING: possible recursive locking detected [ 177.710909][ T7295] syzkaller #0 Not tainted [ 177.715317][ T7295] -------------------------------------------- [ 177.721457][ T7295] syz.3.479/7295 is trying to acquire lock: [ 177.727340][ T7295] ffff88802faf2b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 177.736851][ T7295] [ 177.736851][ T7295] but task is already holding lock: [ 177.744207][ T7295] ffff88802faf2b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 177.754223][ T7295] [ 177.754223][ T7295] other info that might help us debug this: [ 177.762273][ T7295] Possible unsafe locking scenario: [ 177.762273][ T7295] [ 177.769713][ T7295] CPU0 [ 177.772983][ T7295] ---- [ 177.776253][ T7295] lock(&chip->mutex); [ 177.780410][ T7295] lock(&chip->mutex); [ 177.784564][ T7295] [ 177.784564][ T7295] *** DEADLOCK *** [ 177.784564][ T7295] [ 177.792702][ T7295] May be due to missing lock nesting notation [ 177.792702][ T7295] [ 177.801010][ T7295] 3 locks held by syz.3.479/7295: [ 177.806025][ T7295] #0: ffff88802f4ad4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_write+0x293/0x1120 [ 177.816826][ T7295] #1: ffff88802f4ad238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 177.827368][ T7295] #2: ffff88802faf2b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 177.837823][ T7295] [ 177.837823][ T7295] stack backtrace: [ 177.843714][ T7295] CPU: 0 PID: 7295 Comm: syz.3.479 Not tainted syzkaller #0 [ 177.850992][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.861042][ T7295] Call Trace: [ 177.864320][ T7295] [ 177.867251][ T7295] dump_stack_lvl+0x16c/0x230 [ 177.871934][ T7295] ? show_regs_print_info+0x20/0x20 [ 177.877133][ T7295] ? print_deadlock_bug+0x435/0x5d0 [ 177.882337][ T7295] __lock_acquire+0x5d40/0x7c80 [ 177.887203][ T7295] ? verify_lock_unused+0x140/0x140 [ 177.892412][ T7295] lock_acquire+0x197/0x410 [ 177.896916][ T7295] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 177.902383][ T7295] ? trace_contention_end+0x39/0xe0 [ 177.907589][ T7295] ? __might_sleep+0xe0/0xe0 [ 177.912181][ T7295] ? read_lock_is_recursive+0x20/0x20 [ 177.917554][ T7295] ? wait_clear_urbs+0x184/0x390 [ 177.922497][ T7295] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 177.928918][ T7295] __mutex_lock+0x129/0xcc0 [ 177.933420][ T7295] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 177.938882][ T7295] ? usb_free_coherent+0x5d/0x90 [ 177.943818][ T7295] ? release_urbs+0x3fe/0x4a0 [ 177.948504][ T7295] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 177.953967][ T7295] ? mutex_lock_nested+0x20/0x20 [ 177.958907][ T7295] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 177.964985][ T7295] snd_usb_endpoint_close+0x3c/0x4c0 [ 177.970280][ T7295] snd_usb_hw_params+0x1357/0x19c0 [ 177.975397][ T7295] ? snd_usb_pcm_close+0x300/0x300 [ 177.980503][ T7295] ? snd_pcm_lib_malloc_pages+0x2f0/0x690 [ 177.986231][ T7295] snd_pcm_hw_params+0x835/0x1c50 [ 177.991270][ T7295] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 177.996818][ T7295] ? snd_pcm_forward+0x6d0/0x6d0 [ 178.001767][ T7295] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 178.008198][ T7295] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 178.013315][ T7295] ? mutex_lock_nested+0x20/0x20 [ 178.018256][ T7295] ? aa_file_perm+0x3e8/0xec0 [ 178.022935][ T7295] ? futex_wait_queue+0x27/0x1b0 [ 178.027870][ T7295] ? futex_wait_queue+0x138/0x1b0 [ 178.032895][ T7295] snd_pcm_oss_write+0x2ff/0x1120 [ 178.037930][ T7295] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 178.042955][ T7295] ? common_file_perm+0x198/0x1f0 [ 178.047983][ T7295] ? fsnotify_perm+0x5d/0x5e0 [ 178.052670][ T7295] ? security_file_permission+0x79/0xa0 [ 178.058221][ T7295] ? snd_pcm_oss_read+0x8c0/0x8c0 [ 178.063244][ T7295] vfs_write+0x288/0x940 [ 178.067493][ T7295] ? file_end_write+0x250/0x250 [ 178.072348][ T7295] ? __fget_files+0x28/0x4d0 [ 178.076943][ T7295] ? __fget_files+0x44a/0x4d0 [ 178.081623][ T7295] ? __fdget_pos+0x1d8/0x330 [ 178.086218][ T7295] ? ksys_write+0x75/0x250 [ 178.090641][ T7295] ksys_write+0x147/0x250 [ 178.094977][ T7295] ? __ia32_sys_read+0x90/0x90 [ 178.099745][ T7295] ? lockdep_hardirqs_on+0x98/0x150 [ 178.104947][ T7295] do_syscall_64+0x55/0xb0 [ 178.109360][ T7295] ? clear_bhb_loop+0x40/0x90 [ 178.114040][ T7295] ? clear_bhb_loop+0x40/0x90 [ 178.118721][ T7295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.124615][ T7295] RIP: 0033:0x7f0b2498f749 [ 178.129043][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.148646][ T7295] RSP: 002b:00007f0b257fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.157066][ T7295] RAX: ffffffffffffffda RBX: 00007f0b24be5fa0 RCX: 00007f0b2498f749 [ 178.165037][ T7295] RDX: 00000000000005ce RSI: 0000000000000000 RDI: 0000000000000004 [ 178.173003][ T7295] RBP: 00007f0b24a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.180968][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.188939][ T7295] R13: 00007f0b24be6038 R14: 00007f0b24be5fa0 R15: 00007ffc3734a108 [ 178.196920][ T7295] [ 178.417915][ T7308] syzkaller0: entered promiscuous mode [ 178.430604][ T7308] syzkaller0: entered allmulticast mode