last executing test programs: 5m27.975894289s ago: executing program 4 (id=1033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x10000, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c00), 0x10, 0x55}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x404c050) recvmsg$unix(r1, 0x0, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) semop(0x0, &(0x7f0000000200), 0x53) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5m24.939068621s ago: executing program 4 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[], 0x470502) 5m23.909918185s ago: executing program 4 (id=1043): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) getitimer(0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2a00ee8cc111509a5dcf0343c2c5b667c514bb3055b96ebda11b4c8308aef587ef82686dc7f027c402a00582f1b338d80160b21beef66b139a7061ff65ea9c6ed4de3c272fcce0b257c322f54ca3808e8b8bb318d29a96c5035fd713f02f959dc5e55bd518d2ce967008eb6db0a89b4129c5b692bff14aeaa783a3cb22eb1004d87c97e8c8c587adeff394c43b74f5ba5ce66df35b3f4e7d9d7cbc36a20ec75e5dc96701ef447ee3160e70ad13117e96c171be8f0ba442afef0d073a33d7eb218dbb9c065f38a22096306c1e1c7a8268d7373f2f6ca476174e543a37052c6e08007c7afd75fabaf66450709ff061959d02d4f6e0c120fdfaad713688d9af3e70e752f3698b8cd0d75efd5eb50f5c4ef48aa62b641104abb1ce0e8ebcea9485d77bb9b523a47f1de80c1456f62e1387435d3f41d2d6c9e04c1f51401aa6b5204972b93c5783233a1002a1c0d9680c43f078cb2fac20df2296408b52ac0338cee4c92445b44b8d802184f15b34dcd5be61c6f55f73559343ad384c6d05afae20646676c06b0d4bba9d96bdb045fb0e8b50b7a84489a59bc371e066b4ae38c5cb05035cbe8d2123dd28d85db900da33b1f01dd306558dc437606314814aaf7416b8e1e4ab0d9fc2a220d009edee9d94fd184c52a5c4fbee4197f30986533be2b656535c6621f15d4a700de437afd57cb91c00e692b5b4bcfbac44a33a917c9fce46b308775e1ba4e4d93388a11deda12d7270634704d2e2846caedba24b226247029d706b423a295689289bfa250f45ae88432d5721129c9ad9a5f4c5bdd4d653a024e9b16c0e96b35920fbd236d1566cc2efd366f327b04e508254cea66bd2977e016757f0cd7169706543cf2571b99084098464ab7dba3b313cc17463d3d", 0x282}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m22.026675883s ago: executing program 4 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c) 5m17.072048915s ago: executing program 4 (id=1058): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0xfffffffd, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x400, 0x9], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd176b5ee439e96ada024d5d60009c4000380600fe880000000000000000000000000001fe80000000000000000000df000000aa00004e22517f645b833f29a60c07e302e5e477769523ec312b678f3697bc7198505e205a21d4acd6cae84d20d1604f73ea30cb1a0d5eb8ca08b08e6003b5353cf78c00a5160f90efe185e2ad10000000c9ed721dedf4d07d6101ea012cc6aa8aa71280e32796be03f06b0f60b5a5957711bd97db6888fdba1d63fc7a47b860034f089820adfe2b84eb8b8a69d1d2960566f759822984ca125c33df9f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907806c31312345f8cf949a01b515682f44cecac91ba1d12d2b653e0c9d32072c19d"], 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc00) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r6}) 5m14.771817566s ago: executing program 4 (id=1062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x10000, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c00), 0x10, 0x55}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x404c050) recvmsg$unix(r1, 0x0, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) semop(0x0, &(0x7f0000000200), 0x53) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4m59.552822104s ago: executing program 32 (id=1062): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x5, 0x10000, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000c00), 0x10, 0x55}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x404c050) recvmsg$unix(r1, 0x0, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) semop(0x0, &(0x7f0000000200), 0x53) connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.987432553s ago: executing program 0 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x4}, 0x2, 0x7, 0x1, 0x3ff, 0x18, 'syz0\x00', "b7b383c3f0b018ace40e821df5140f07239adaf54399e326f852f7cf7d4fbac5", "9e89ff3793c7460c96ac333e6e7a472d38f770488a666d34b1fe7bddcdd9749a", [{0x8, 0x7, {0x2, 0x80000001}}, {0x4, 0x2, {0x3}}, {0x6, 0x3, {0x1, 0x19f50713}}, {0x8, 0x7f, {0x0, 0x1}}, {0x5, 0x3, {0x3, 0x8}}, {0x33, 0x8, {0x3, 0x7}}, {0x4, 0x4, {0x2, 0x90}}, {0xb8, 0x9, {0x2, 0xc}}, {0x7, 0xfff7, {0x3, 0x7}}, {0x5, 0x3, {0x1, 0x3}}, {0x8, 0x0, {0x2, 0x4}}, {0x19, 0x9bd6, {0x2, 0x6}}, {0x1, 0xf, {0x0, 0x8}}, {0x4, 0x5, {0x3, 0x4}}, {0x8, 0xc, {0x3, 0x1}}, {0x57e, 0x3, {0x2, 0x1000}}, {0x5, 0x5, {0x0, 0x52e0}}, {0x3, 0x9, {0x3, 0xb28c}}, {0x6, 0x400, {0x0, 0x6}}, {0x5c3, 0x4, {0x3, 0x2}}, {0x101, 0x9, {0x2, 0x8001}}, {0x1ff, 0x0, {0x0, 0x5}}, {0xffff, 0x8000, {0x2, 0x5}}, {0x80, 0x2, {0x3, 0x3}}, {0x8, 0x3, {0x0, 0x5}}, {0x7, 0x9, {0x2, 0x400}}, {0xdf, 0x8, {0x2, 0x9}}, {0x58, 0x8, {0x2, 0x68}}, {0xff7f, 0x0, {0x2, 0x5}}, {0x3, 0xffff, {0x2, 0x7ff}}, {0x1ff, 0xfff9, {0x3, 0x2}}, {0x2, 0x4, {0x1, 0x3ff}}, {0x1, 0x3, {0x0, 0x7d2cd9df}}, {0x7, 0x9, {0x0, 0xc74}}, {0xd, 0x2, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x7, 0x3, {0x1, 0x5}}, {0x6, 0x66, {0x1, 0x40}}, {0x6, 0xd84, {0x3, 0x2}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000094}, 0x40016) 4.759178928s ago: executing program 0 (id=1924): r0 = syz_open_procfs(0x0, 0x0) read$nci(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 3.880799831s ago: executing program 1 (id=1935): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000710400007b8af8ff00000000bfa200000000000007020000f8ff7fffb703000008000000b704000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 3.706094061s ago: executing program 0 (id=1939): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="050025bd7000fcdbdf251b0000000700210061d3"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) 3.569136747s ago: executing program 1 (id=1941): socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100)="f8", 0x1, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 3.395512097s ago: executing program 0 (id=1944): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYBLOB="18010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000006feffffb702000008000000b703000000000000850000005400000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x22}, 0x94) 2.694936815s ago: executing program 5 (id=1945): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) 2.600171117s ago: executing program 3 (id=1947): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f0000000240)=0xfffffffa) 2.599930177s ago: executing program 0 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) 2.533145141s ago: executing program 1 (id=1950): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x5420, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000300)={0x4, 0x1000}) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [{0x1, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269008e254c1e4a8a8b3f0ab0c430d3be27df3e34060c00ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}]}}}}}}, 0x0) 2.412603128s ago: executing program 0 (id=1951): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x48000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x400c044) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048001) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001400210100000000000000000200000080c5766483d56c679072af4efb1a71d32257889cd84e6f48ca915fb49974638062ee3d736181d54f130d768f949ca266859ae50f8a689784fcd954552473a3363f310122356e5b1d3b4cd3e337deedd382d8b4d476572a5248d20a457b23a68214fced3c830639f3c58c", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) 2.293854941s ago: executing program 1 (id=1952): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b591d58f96c04594cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a33fbc1f39cb39c38f736fd35c143d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa000000}, 0x48) 2.290626726s ago: executing program 5 (id=1953): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) 2.147939835s ago: executing program 6 (id=1955): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') lseek(r0, 0x1, 0x0) getdents64(r0, &(0x7f0000000900)=""/4113, 0x1011) 2.088179264s ago: executing program 5 (id=1956): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={[0xff]}, 0xfffffffffffffefd) 1.959803811s ago: executing program 6 (id=1958): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0xbf3e, 0x5, 0x12}, 0x50) 1.864410425s ago: executing program 2 (id=1959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x0, 0x0, 0x2b, 0x0, "37ddfa1f1047a0a2be08f9683d9cfc56da791df0d11b215ea51282432449decea58c0afa4c3ec4bcd97121f3cfd07cfd0b2b362475102f6aae7d06a87b36734a8de7a7eb274221db71e0066e94e7de16"}, 0xd8) close(r0) 1.759624614s ago: executing program 6 (id=1960): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97454800", "0615e356c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b2ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707067e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c718040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b72f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) chdir(&(0x7f0000000180)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) 1.635712492s ago: executing program 3 (id=1961): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c5}, 0x40) 1.612106857s ago: executing program 2 (id=1962): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 1.494909167s ago: executing program 6 (id=1963): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa2401, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 1.395482747s ago: executing program 3 (id=1964): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8012}, 0x20008804) 1.393698249s ago: executing program 2 (id=1965): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x5c}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x1, 0x40000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x45}, 0x28) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.196186742s ago: executing program 6 (id=1966): r0 = syz_open_dev$loop(&(0x7f0000000900), 0x7c00, 0x8000) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 1.195967741s ago: executing program 3 (id=1967): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x5e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000004"], 0x18}, 0x4000010) 633.047098ms ago: executing program 5 (id=1968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40002018}) 545.919191ms ago: executing program 5 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xb}, [], "8029335287b7a081"}}}}}}}, 0x0) 536.52948ms ago: executing program 6 (id=1970): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8082) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x103401) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, &(0x7f0000000080)) 444.099941ms ago: executing program 3 (id=1971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd23, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17200}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x48}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) 393.889868ms ago: executing program 2 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1]}}) 234.607417ms ago: executing program 1 (id=1973): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x1) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x28, 0x80080000, 0xc, 0x7, 0x0, 0x9f91ea7a15befb90}) 167.74999ms ago: executing program 2 (id=1974): unshare(0x400) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x183200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 167.490138ms ago: executing program 3 (id=1975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 149.830536ms ago: executing program 5 (id=1976): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000001"], 0x48) r0 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x800, 0x400000, 0x3c1}, &(0x7f0000001340), &(0x7f0000001380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) 49.694184ms ago: executing program 1 (id=1977): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x101040a) 0s ago: executing program 2 (id=1978): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000140)={0x28, 0x80080000, 0xc, 0x7, 0x0, 0x9f91ea7a15befb90}) kernel console output (not intermixed with test programs): e detected [ 193.879494][ T5738] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 193.915041][ T5800] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 193.927334][ T5738] scsi host1: usb-storage 5-1:1.0 [ 194.086710][ T5800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 194.245069][ T5800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.256903][ T5800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 194.274627][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 194.828393][ T5800] usb 6-1: SerialNumber: syz [ 194.861735][ T5800] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 194.906626][ T5800] usb-storage 6-1:1.0: USB Mass Storage device detected [ 194.952101][ T5800] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 194.993473][ T5800] scsi host2: usb-storage 6-1:1.0 [ 195.051093][ T7344] overlayfs: failed to resolve './file0': -2 [ 196.083431][ T5738] usb 5-1: USB disconnect, device number 4 [ 196.754998][ T5730] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 196.779632][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 196.929017][ T5730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.959402][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.974788][ T5730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 196.994811][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.014930][ T5730] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 197.035755][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 197.050633][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.069280][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.080500][ T5730] usb 5-1: SerialNumber: syz [ 197.100220][ T5730] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 197.110630][ T9] usb 1-1: SerialNumber: syz [ 197.209314][ T5730] usb-storage 5-1:1.0: USB Mass Storage device detected [ 197.219440][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 197.232999][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 197.241604][ T5730] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 197.263601][ T9] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 197.281682][ T5730] scsi host1: usb-storage 5-1:1.0 [ 197.286963][ T9] scsi host3: usb-storage 1-1:1.0 [ 198.000221][ T5853] usb 6-1: USB disconnect, device number 2 [ 200.315705][ T5853] usb 5-1: USB disconnect, device number 5 [ 200.943780][ T5730] usb 1-1: USB disconnect, device number 2 [ 203.827573][ T7444] overlayfs: failed to resolve './file0': -2 [ 209.799453][ T7537] bond0: Error: Cannot enslave bond to itself. [ 211.852682][ T7560] overlayfs: failed to resolve './file0': -2 [ 214.345161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 215.743682][ T7607] syzkaller0: entered promiscuous mode [ 215.749675][ T7607] syzkaller0: entered allmulticast mode [ 216.293466][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 216.487264][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 216.508935][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.523099][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 216.544145][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.552573][ T9] usb 3-1: SerialNumber: syz [ 216.571723][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 216.627025][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 216.684346][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 216.699066][ T9] scsi host1: usb-storage 3-1:1.0 [ 219.502692][ T29] usb 3-1: USB disconnect, device number 4 [ 219.576565][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'. [ 219.585374][ T7641] netlink: 56 bytes leftover after parsing attributes in process `syz.5.366'. [ 219.598132][ T7641] bridge1: entered allmulticast mode [ 220.211547][ T5730] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 220.398162][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.433870][ T5730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 220.434269][ T7656] overlayfs: failed to resolve './file0': -2 [ 220.515090][ T5730] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 220.551623][ T5730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 220.580231][ T5730] usb 2-1: SerialNumber: syz [ 220.602863][ T5730] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 220.628638][ T5730] usb-storage 2-1:1.0: USB Mass Storage device detected [ 220.659513][ T5730] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 220.699710][ T5730] scsi host1: usb-storage 2-1:1.0 [ 222.103734][ T7670] fuse: Bad value for 'user_id' [ 222.125308][ T7670] fuse: Bad value for 'user_id' [ 223.149691][ T5737] usb 2-1: USB disconnect, device number 4 [ 223.460333][ T7681] syz.5.377 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.186705][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 225.633752][ T7704] overlayfs: failed to resolve './file0': -2 [ 228.776104][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 228.950645][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.996556][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 229.045973][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 229.073473][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 229.089270][ T9] usb 3-1: SerialNumber: syz [ 229.105745][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 229.119067][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 229.136551][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 229.147255][ T9] scsi host1: usb-storage 3-1:1.0 [ 232.653195][ T9] usb 3-1: USB disconnect, device number 5 [ 238.949399][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.412'. [ 241.219136][ T7856] overlayfs: failed to resolve './file0': -2 [ 243.685389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 249.926173][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.933642][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.261427][ T7949] syzkaller0: entered promiscuous mode [ 251.289834][ T7949] syzkaller0: entered allmulticast mode [ 259.737484][ T8040] syzkaller0: entered promiscuous mode [ 259.775431][ T8040] syzkaller0: entered allmulticast mode [ 265.203823][ T8111] syzkaller0: entered promiscuous mode [ 265.224981][ T8111] syzkaller0: entered allmulticast mode [ 266.071264][ T8115] overlayfs: failed to resolve './file0': -2 [ 267.750520][ T2167] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 268.149953][ T2167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.213610][ T2167] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 268.244220][ T2167] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 268.296481][ T2167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.307597][ T2167] usb 5-1: SerialNumber: syz [ 268.338902][ T2167] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 268.352427][ T2167] usb-storage 5-1:1.0: USB Mass Storage device detected [ 268.716565][ T2167] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 269.265219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 269.408687][ T2167] scsi host1: usb-storage 5-1:1.0 [ 269.868540][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 269.877538][ T8172] netlink: 72 bytes leftover after parsing attributes in process `syz.3.488'. [ 269.921397][ T8172] bridge1: entered allmulticast mode [ 271.281361][ T8180] syzkaller0: entered promiscuous mode [ 271.324017][ T8180] syzkaller0: entered allmulticast mode [ 273.146760][ T5730] usb 5-1: USB disconnect, device number 6 [ 277.301128][ T8243] syzkaller0: entered promiscuous mode [ 277.351069][ T8243] syzkaller0: entered allmulticast mode [ 278.175239][ T5730] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 278.391490][ T5730] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 278.414364][ T5730] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 278.444853][ T5730] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 278.464663][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.481761][ T5730] usb 1-1: SerialNumber: syz [ 278.510872][ T5730] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 278.553317][ T5730] usb-storage 1-1:1.0: USB Mass Storage device detected [ 278.587335][ T5730] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 278.639485][ T5730] scsi host1: usb-storage 1-1:1.0 [ 279.245545][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 280.164905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 281.764188][ T29] usb 1-1: USB disconnect, device number 3 [ 283.819636][ T8335] syzkaller0: entered promiscuous mode [ 283.847655][ T8335] syzkaller0: entered allmulticast mode [ 284.351671][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 284.360770][ T8341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.533'. [ 284.878172][ T8341] bridge1: entered allmulticast mode [ 286.731304][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 286.740262][ T8366] netlink: 72 bytes leftover after parsing attributes in process `syz.0.539'. [ 286.781481][ T8366] bridge1: entered allmulticast mode [ 288.664959][ T5863] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 288.903790][ T5863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 289.045001][ T5863] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.203675][ T5863] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 289.212849][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 289.233723][ T5863] usb 4-1: SerialNumber: syz [ 289.265117][ T5863] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 289.284221][ T5863] usb-storage 4-1:1.0: USB Mass Storage device detected [ 289.325686][ T5863] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 289.339560][ T5863] scsi host1: usb-storage 4-1:1.0 [ 290.959371][ T8407] syzkaller0: entered promiscuous mode [ 290.980277][ T8407] syzkaller0: entered allmulticast mode [ 291.559384][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.542'. [ 292.536789][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 292.545790][ T8443] netlink: 72 bytes leftover after parsing attributes in process `syz.2.555'. [ 292.574606][ T8443] bridge1: entered allmulticast mode [ 293.657033][ T5800] usb 4-1: USB disconnect, device number 2 [ 295.405178][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 295.414139][ T8476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.563'. [ 295.456934][ T8476] bridge2: entered allmulticast mode [ 297.385378][ T8491] syzkaller0: entered promiscuous mode [ 297.397817][ T8491] syzkaller0: entered allmulticast mode [ 298.242551][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 298.252252][ T8512] netlink: 56 bytes leftover after parsing attributes in process `syz.1.574'. [ 298.298705][ T8512] bridge1: entered allmulticast mode [ 298.776632][ T2167] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 298.998326][ T2167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.029594][ T2167] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.059291][ T2167] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 299.082869][ T2167] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.102645][ T2167] usb 1-1: SerialNumber: syz [ 299.129784][ T2167] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 299.172625][ T2167] usb-storage 1-1:1.0: USB Mass Storage device detected [ 299.227172][ T2167] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 299.259284][ T2167] scsi host1: usb-storage 1-1:1.0 [ 300.218436][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 300.227476][ T8536] netlink: 64 bytes leftover after parsing attributes in process `syz.4.579'. [ 300.268072][ T8536] bridge2: entered allmulticast mode [ 301.504919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 301.524915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 303.852307][ T29] usb 1-1: USB disconnect, device number 4 [ 304.504597][ T8579] syzkaller0: entered promiscuous mode [ 304.536502][ T8579] syzkaller0: entered allmulticast mode [ 304.861541][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 304.870570][ T8589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.591'. [ 306.364694][ T8589] bridge3: entered allmulticast mode [ 311.366663][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.379149][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.465272][ T8649] syzkaller0: entered promiscuous mode [ 311.476967][ T8649] syzkaller0: entered allmulticast mode [ 314.319584][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 314.329257][ T8677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.615'. [ 314.374470][ T8677] bridge3: entered allmulticast mode [ 317.610262][ T8707] syzkaller0: entered promiscuous mode [ 317.638881][ T8707] syzkaller0: entered allmulticast mode [ 320.017978][ T8734] overlayfs: missing 'lowerdir' [ 322.851379][ T8767] syzkaller0: entered promiscuous mode [ 322.872010][ T8767] syzkaller0: entered allmulticast mode [ 322.944767][ T8729] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.106079][ T8794] overlayfs: missing 'lowerdir' [ 331.424846][ T8822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.054082][ T8870] bond0: Error: Cannot enslave bond to itself. [ 335.778561][ T8913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.675'. [ 335.885044][ T8913] block nbd0: server does not support multiple connections per device. [ 335.925629][ T8913] block nbd0: shutting down sockets [ 339.374084][ T8923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.516161][ T8961] bond0: Error: Cannot enslave bond to itself. [ 341.655031][ T5800] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 342.004268][ T5800] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.221443][ T5800] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.962094][ T5800] usb 1-1: string descriptor 0 read error: -71 [ 344.968457][ T5800] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 345.005929][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.064722][ T5800] usb 1-1: can't set config #1, error -71 [ 345.097864][ T5800] usb 1-1: USB disconnect, device number 5 [ 345.333609][ T8995] overlayfs: failed to resolve './file0': -2 [ 350.181392][ T9008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.314304][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 350.395016][ T9049] block nbd0: server does not support multiple connections per device. [ 350.407348][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 350.428797][ T9049] block nbd0: shutting down sockets [ 351.113236][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.140812][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.172016][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.189652][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.226584][ T9] usb 3-1: SerialNumber: syz [ 352.784367][ T9] usb 3-1: 0:2 : does not exist [ 352.802102][ T9] usb 3-1: unit 5: unexpected type 0x0d [ 352.933942][ T9] usb 3-1: USB disconnect, device number 6 [ 353.024284][ T8963] udevd[8963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.646626][ T9092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.456284][ T9152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.741'. [ 363.228049][ T9155] syzkaller0: entered promiscuous mode [ 363.249718][ T9155] syzkaller0: entered allmulticast mode [ 363.285248][ T5737] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 363.466683][ T5737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.510028][ T5737] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.549284][ T5737] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.590057][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.158378][ T5737] usb 4-1: SerialNumber: syz [ 364.365021][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 364.547744][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.593111][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.640423][ T5853] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 364.682824][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.712208][ T5853] usb 5-1: SerialNumber: syz [ 365.902813][ T5737] usb 4-1: 0:2 : does not exist [ 365.924575][ T5737] usb 4-1: unit 5: unexpected type 0x0c [ 367.326892][ T5853] usb 5-1: 0:2 : does not exist [ 367.330938][ T5737] usb 4-1: USB disconnect, device number 3 [ 367.354611][ T5853] usb 5-1: unit 5: unexpected type 0x0c [ 367.489187][ T5853] usb 5-1: USB disconnect, device number 7 [ 368.747640][ T8963] udevd[8963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 368.780939][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 368.827890][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 371.035575][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 371.244131][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.756'. [ 371.477519][ T5853] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.502672][ T5853] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.522838][ T5853] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 371.542114][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 371.571632][ T5853] usb 6-1: SerialNumber: syz [ 371.693941][ T9231] syzkaller0: entered promiscuous mode [ 371.702512][ T9231] syzkaller0: entered allmulticast mode [ 371.824197][ T9200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.267460][ T9238] overlayfs: missing 'lowerdir' [ 372.975572][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.232429][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.383490][ T5853] usb 6-1: 0:2 : does not exist [ 373.390920][ T5853] usb 6-1: unit 5: unexpected type 0x0c [ 374.034803][ T5853] usb 6-1: USB disconnect, device number 3 [ 375.172322][ T8963] udevd[8963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.916503][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.770'. [ 379.098828][ T9282] xt_hashlimit: size too large, truncated to 1048576 [ 381.247669][ T9296] syzkaller0: entered promiscuous mode [ 381.254994][ T9296] syzkaller0: entered allmulticast mode [ 382.014967][ T5800] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 382.177613][ T5800] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.216335][ T5800] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.242859][ T5800] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.275733][ T5800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.860154][ T5800] usb 6-1: SerialNumber: syz [ 383.274765][ T9326] syzkaller1: entered allmulticast mode [ 383.297026][ T9328] overlayfs: missing 'lowerdir' [ 383.620741][ T9332] process 'syz.0.784' launched './file0' with NULL argv: empty string added [ 383.777148][ T9332] xt_hashlimit: size too large, truncated to 1048576 [ 384.914735][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 384.923864][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.787'. [ 386.195381][ T9349] syzkaller1: entered allmulticast mode [ 387.936682][ T5800] usb 6-1: 0:2 : does not exist [ 387.973298][ T5800] usb 6-1: unit 5: unexpected type 0x0d [ 388.832838][ T9367] syzkaller0: entered promiscuous mode [ 388.863849][ T9367] syzkaller0: entered allmulticast mode [ 389.242508][ T5853] usb 6-1: USB disconnect, device number 4 [ 390.125541][ T5730] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 390.903445][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.919252][ T5730] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.929670][ T5730] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.938909][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.947103][ T5730] usb 3-1: SerialNumber: syz [ 393.090330][ T5730] usb 3-1: 0:2 : does not exist [ 393.100034][ T5730] usb 3-1: unit 5: unexpected type 0x0b [ 393.732808][ T5730] usb 3-1: USB disconnect, device number 7 [ 398.295901][ T9430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.837858][ T5737] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 400.906778][ T9481] syzkaller1: entered allmulticast mode [ 401.194081][ T9483] xt_hashlimit: size too large, truncated to 1048576 [ 401.707161][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.764474][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.959135][ T5737] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 402.029848][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 402.223622][ T5737] usb 3-1: SerialNumber: syz [ 403.204749][ T5737] usb 3-1: can't set config #1, error -71 [ 403.323025][ T5737] usb 3-1: USB disconnect, device number 8 [ 404.564156][ T9511] syzkaller1: entered allmulticast mode [ 404.849970][ T9514] xt_hashlimit: size too large, truncated to 1048576 [ 407.975265][ T5853] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 408.146682][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.158321][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.168776][ T5853] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 408.182403][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 408.196227][ T5853] usb 4-1: SerialNumber: syz [ 408.581657][ T9524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.530383][ T5853] usb 4-1: 0:2 : does not exist [ 411.560905][ T5853] usb 4-1: unit 5: unexpected type 0x0c [ 411.605171][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 411.934380][ T9588] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 412.187053][ T5853] usb 4-1: USB disconnect, device number 4 [ 412.206770][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.374265][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.409902][ T8963] udevd[8963]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.158482][ T24] usb 2-1: string descriptor 0 read error: -71 [ 413.201713][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.252038][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.310691][ T24] usb 2-1: can't set config #1, error -71 [ 413.350953][ T24] usb 2-1: USB disconnect, device number 5 [ 414.332150][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.852'. [ 414.929759][ T9605] block nbd0: server does not support multiple connections per device. [ 414.968452][ T9605] block nbd0: shutting down sockets [ 415.716388][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.061227][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.335009][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.359304][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 416.368841][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 416.379416][ T24] usb 2-1: SerialNumber: syz [ 418.338791][ T24] usb 2-1: 0:2 : does not exist [ 418.348454][ T24] usb 2-1: unit 5: unexpected type 0x0b [ 418.401602][ T24] usb 2-1: USB disconnect, device number 6 [ 418.448498][ T8963] udevd[8963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.800375][ T9619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.475074][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.876'. [ 423.618620][ T9698] block nbd0: server does not support multiple connections per device. [ 423.627779][ T9698] block nbd0: shutting down sockets [ 426.862842][ T9706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.170411][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 427.256014][ T9744] block nbd0: server does not support multiple connections per device. [ 427.381754][ T9744] block nbd0: shutting down sockets [ 430.963852][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 431.226195][ T9772] block nbd0: server does not support multiple connections per device. [ 431.781993][ T9772] block nbd0: shutting down sockets [ 434.246527][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.254327][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 435.095325][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 435.237841][ T9816] block nbd0: server does not support multiple connections per device. [ 435.738916][ T9816] block nbd0: shutting down sockets [ 439.369595][ T9842] syzkaller0: entered promiscuous mode [ 439.388147][ T9842] syzkaller0: entered allmulticast mode [ 443.166572][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.915'. [ 443.278763][ T9875] block nbd0: server does not support multiple connections per device. [ 443.313137][ T9875] block nbd0: shutting down sockets [ 444.622499][ T5760] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 444.974936][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 444.992507][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 445.022720][ T5760] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 445.051654][ T5760] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 445.081242][ T5760] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 445.112765][ T5760] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 445.154364][ T5760] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 445.200392][ T5760] usb 2-1: config 176 has no interface number 0 [ 445.225902][ T5760] usb 2-1: config 176 has no interface number 1 [ 445.261506][ T5760] usb 2-1: config 176 has no interface number 2 [ 445.287376][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 445.327328][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 445.375797][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 445.406229][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 445.451836][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 445.490948][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 445.561687][ T9901] syzkaller0: entered promiscuous mode [ 445.574232][ T9901] syzkaller0: entered allmulticast mode [ 445.585855][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 445.804308][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 445.825005][ T5760] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 446.586658][ T5760] usb 2-1: config 176 interface 188 has no altsetting 0 [ 446.622370][ T5760] usb 2-1: config 176 interface 44 has no altsetting 0 [ 446.753913][ T5760] usb 2-1: config 176 interface 212 has no altsetting 0 [ 446.771321][ T5760] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 446.781943][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.802729][ T5760] usb 2-1: Product: syz [ 446.814777][ T5760] usb 2-1: Manufacturer: syz [ 446.831329][ T5760] usb 2-1: SerialNumber: syz [ 447.877317][ T5760] option 2-1:176.188: GSM modem (1-port) converter detected [ 447.949094][ T5760] usb 2-1: USB disconnect, device number 7 [ 448.246815][ T5760] option 2-1:176.188: device disconnected [ 449.245082][ T5760] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 449.623858][ T5760] usb 5-1: Using ep0 maxpacket: 16 [ 449.674142][ T5760] usb 5-1: unable to get BOS descriptor or descriptor too short [ 449.708362][ T5760] usb 5-1: config 176 has an invalid interface number: 188 but max is 2 [ 449.911636][ T5760] usb 5-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 449.941938][ T5760] usb 5-1: config 176 has an invalid interface number: 44 but max is 2 [ 449.965132][ T5760] usb 5-1: config 176 has an invalid interface number: 212 but max is 2 [ 449.987371][ T5760] usb 5-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 450.019519][ T5760] usb 5-1: config 176 has no interface number 0 [ 450.036445][ T5760] usb 5-1: config 176 has no interface number 1 [ 450.049145][ T5760] usb 5-1: config 176 has no interface number 2 [ 450.133829][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 450.155520][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 450.226049][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 450.273248][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 450.318376][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 450.347001][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 450.416804][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 450.455340][ T5760] usb 5-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 450.488691][ T5760] usb 5-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 451.049832][ T5760] usb 5-1: config 176 interface 188 has no altsetting 0 [ 451.082285][ T5760] usb 5-1: config 176 interface 44 has no altsetting 0 [ 451.105947][ T5760] usb 5-1: config 176 interface 212 has no altsetting 0 [ 451.177036][ T5760] usb 5-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 451.239736][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.325324][ T5760] usb 5-1: Product: syz [ 451.336772][ T5760] usb 5-1: Manufacturer: syz [ 451.346015][ T5760] usb 5-1: SerialNumber: syz [ 452.121033][ T9975] syzkaller0: entered promiscuous mode [ 452.145630][ T9975] syzkaller0: entered allmulticast mode [ 452.175268][ T5760] option 5-1:176.188: GSM modem (1-port) converter detected [ 452.269775][ T5760] usb 5-1: USB disconnect, device number 8 [ 452.379619][ T5760] option 5-1:176.188: device disconnected [ 452.875009][ T5800] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 453.069143][ T5800] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.116819][ T5800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.160773][ T5800] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 453.211297][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 453.664473][ T5800] usb 3-1: SerialNumber: syz [ 456.318810][ T5800] usb 3-1: 0:2 : does not exist [ 456.901576][ T5800] usb 3-1: unit 5: unexpected type 0x0b [ 456.937362][ T5800] usb 3-1: USB disconnect, device number 9 [ 457.054221][ T5760] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 457.616915][ T5760] usb 6-1: Using ep0 maxpacket: 16 [ 457.643278][ T5760] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.656439][ T5760] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 457.665616][ T9892] udevd[9892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.728044][ T5760] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 457.785551][ T5760] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 457.813503][ T5760] usb 6-1: config 176 has an invalid interface number: 212 but max is 2 [ 457.834715][ T5760] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 457.873757][ T5760] usb 6-1: config 176 has no interface number 0 [ 457.938183][ T5760] usb 6-1: config 176 has no interface number 1 [ 457.967529][T10034] syzkaller0: entered promiscuous mode [ 457.967973][ T5760] usb 6-1: config 176 has no interface number 2 [ 457.996064][T10034] syzkaller0: entered allmulticast mode [ 457.997518][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 458.044519][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 458.152452][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 458.238504][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 458.320102][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 458.335017][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 458.356466][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 458.409092][ T5760] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 458.502505][ T5760] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.636832][ T5760] usb 6-1: config 176 interface 188 has no altsetting 0 [ 458.666412][ T5760] usb 6-1: config 176 interface 44 has no altsetting 0 [ 458.748424][ T5760] usb 6-1: config 176 interface 212 has no altsetting 0 [ 458.824131][ T5760] usb 6-1: string descriptor 0 read error: -71 [ 458.947388][ T5760] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 459.027227][ T5760] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.575468][ T5760] usb 6-1: can't set config #176, error -71 [ 459.971534][ T5760] usb 6-1: USB disconnect, device number 5 [ 460.415427][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 460.585164][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 460.617550][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.655015][ T9] usb 4-1: config 176 has an invalid interface number: 188 but max is 2 [ 460.695252][ T9] usb 4-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 460.758741][ T9] usb 4-1: config 176 has an invalid interface number: 44 but max is 2 [ 461.389629][ T9] usb 4-1: config 176 has an invalid interface number: 212 but max is 2 [ 461.415152][ T9] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 461.494768][ T9] usb 4-1: config 176 has no interface number 0 [ 461.546333][ T9] usb 4-1: config 176 has no interface number 1 [ 461.586165][ T9] usb 4-1: config 176 has no interface number 2 [ 461.613884][ T9] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 461.661667][ T9] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 461.712138][ T9] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 461.756692][ T9] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 461.803111][ T9] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 461.852395][ T9] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 461.920640][ T9] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 462.076018][ T9] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 462.282841][ T9] usb 4-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 462.323910][ T9] usb 4-1: config 176 interface 188 has no altsetting 0 [ 462.371571][ T9] usb 4-1: config 176 interface 44 has no altsetting 0 [ 462.411905][ T9] usb 4-1: config 176 interface 212 has no altsetting 0 [ 462.441484][ T9] usb 4-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 462.460751][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.512259][ T9] usb 4-1: Product: syz [ 462.530755][ T9] usb 4-1: Manufacturer: syz [ 462.558850][ T9] usb 4-1: SerialNumber: syz [ 464.510210][ T9] option 4-1:176.188: GSM modem (1-port) converter detected [ 464.543359][ T9] usb 4-1: USB disconnect, device number 5 [ 464.573725][ T9] option 4-1:176.188: device disconnected [ 465.303476][T10109] syzkaller0: entered promiscuous mode [ 465.322683][T10109] syzkaller0: entered allmulticast mode [ 468.092945][ T5760] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 468.544974][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 468.559440][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 468.570643][ T5760] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 468.592019][ T5760] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 468.711358][ T5760] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 468.772911][ T5760] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 468.901721][ T5760] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 468.997790][ T5760] usb 2-1: config 176 has no interface number 0 [ 469.081385][ T5760] usb 2-1: config 176 has no interface number 1 [ 469.314797][ T5760] usb 2-1: config 176 has no interface number 2 [ 469.350012][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 469.747680][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 469.820556][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 469.852132][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 469.877285][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 469.952458][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 469.995513][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 470.067553][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 470.374654][ T5760] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 470.391928][ T5760] usb 2-1: config 176 interface 188 has no altsetting 0 [ 470.414969][ T5760] usb 2-1: config 176 interface 44 has no altsetting 0 [ 470.466867][ T5760] usb 2-1: config 176 interface 212 has no altsetting 0 [ 470.513640][ T5760] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 470.556829][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.619246][ T5760] usb 2-1: Product: syz [ 470.697789][ T5760] usb 2-1: Manufacturer: syz [ 471.178246][ T5737] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 471.470195][ T5760] usb 2-1: SerialNumber: syz [ 471.645543][ T5760] usb 2-1: can't set config #176, error -71 [ 471.700523][ T5760] usb 2-1: USB disconnect, device number 8 [ 471.708171][ T5737] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.069328][T10191] syzkaller0: entered promiscuous mode [ 472.092826][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1005'. [ 472.093051][ T5737] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.106584][T10191] syzkaller0: entered allmulticast mode [ 472.166304][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 472.216861][ T5737] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.258543][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.282437][ T50] block nbd0: Receive control failed (result -32) [ 472.302319][ T5737] usb 3-1: SerialNumber: syz [ 474.829807][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1012'. [ 476.708242][ T5737] usb 3-1: 0:2 : does not exist [ 476.734160][ T5737] usb 3-1: unit 5: unexpected type 0x0b [ 476.879523][ T5737] usb 3-1: USB disconnect, device number 10 [ 476.989851][ T9892] udevd[9892]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.182563][T10254] syzkaller0: entered promiscuous mode [ 478.207834][T10254] syzkaller0: entered allmulticast mode [ 495.703770][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.710304][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.365183][T10426] hub 8-0:1.0: USB hub found [ 498.382243][T10426] hub 8-0:1.0: 1 port detected [ 499.670649][T10431] syzkaller1: entered allmulticast mode [ 500.335738][T10431] xt_hashlimit: size too large, truncated to 1048576 [ 501.071748][T10450] hub 8-0:1.0: USB hub found [ 501.077526][T10450] hub 8-0:1.0: 1 port detected [ 504.166642][T10467] syzkaller1: entered allmulticast mode [ 504.781729][T10464] xt_hashlimit: size too large, truncated to 1048576 [ 507.141987][T10487] hub 8-0:1.0: USB hub found [ 507.147614][T10487] hub 8-0:1.0: 1 port detected [ 508.055387][T10487] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 512.184070][T10520] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.206087][T10520] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.213355][T10520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.224144][T10520] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.235041][T10520] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.657244][T10540] hub 8-0:1.0: USB hub found [ 513.662743][T10540] hub 8-0:1.0: 1 port detected [ 514.382708][T10520] Bluetooth: hci6: command tx timeout [ 514.709551][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.402497][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.434991][T10520] Bluetooth: hci6: command tx timeout [ 516.749224][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.339740][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.427726][T10585] hub 8-0:1.0: USB hub found [ 518.433002][T10585] hub 8-0:1.0: 1 port detected [ 519.015627][T10520] Bluetooth: hci6: command tx timeout [ 519.353251][T10584] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 519.498978][ T57] bridge_slave_1: left allmulticast mode [ 519.523155][ T57] bridge_slave_1: left promiscuous mode [ 519.662745][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.777965][ T57] bridge_slave_0: left allmulticast mode [ 519.783678][ T57] bridge_slave_0: left promiscuous mode [ 519.790661][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.943250][T10605] hub 8-0:1.0: USB hub found [ 519.949129][T10605] hub 8-0:1.0: 1 port detected [ 520.882256][T10614] xt_hashlimit: size too large, truncated to 1048576 [ 520.960455][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.004681][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.281292][T10520] Bluetooth: hci6: command tx timeout [ 521.673613][ T57] bond0 (unregistering): Released all slaves [ 522.087161][T10605] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 523.422923][T10600] syzkaller1: entered allmulticast mode [ 524.359832][T10638] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 524.470479][T10642] hub 8-0:1.0: USB hub found [ 524.476211][T10642] hub 8-0:1.0: 1 port detected [ 526.562751][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 527.953027][ T57] hsr_slave_0: left promiscuous mode [ 527.962865][ T57] hsr_slave_1: left promiscuous mode [ 527.968954][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.978085][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.999912][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.009661][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.037200][ T57] veth1_macvtap: left promiscuous mode [ 528.042778][ T57] veth0_macvtap: left promiscuous mode [ 528.048386][ T57] veth1_vlan: left promiscuous mode [ 528.053754][ T57] veth0_vlan: left promiscuous mode [ 528.193966][T10671] hub 8-0:1.0: USB hub found [ 528.199701][T10671] hub 8-0:1.0: 1 port detected [ 529.524128][ T57] team0 (unregistering): Port device team_slave_1 removed [ 529.549969][ T57] team0 (unregistering): Port device team_slave_0 removed [ 529.853849][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.905130][T10518] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.984357][T10518] bridge_slave_0: entered allmulticast mode [ 530.375624][T10518] bridge_slave_0: entered promiscuous mode [ 530.809806][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.905711][T10518] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.986840][T10518] bridge_slave_1: entered allmulticast mode [ 531.191806][T10518] bridge_slave_1: entered promiscuous mode [ 531.614168][T10518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.200262][T10518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.281389][T10518] team0: Port device team_slave_0 added [ 533.291687][T10518] team0: Port device team_slave_1 added [ 534.409572][T10716] xt_hashlimit: size too large, truncated to 1048576 [ 534.855055][T10724] hub 8-0:1.0: USB hub found [ 534.860554][T10724] hub 8-0:1.0: 1 port detected [ 535.596314][T10518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.688369][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.758920][T10518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.821025][T10518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.117265][T10518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.150415][T10518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.565056][T10518] hsr_slave_0: entered promiscuous mode [ 536.595514][T10518] hsr_slave_1: entered promiscuous mode [ 536.709008][T10518] debugfs: 'hsr0' already exists in 'hsr' [ 536.715138][T10518] Cannot create hsr debugfs directory [ 538.013167][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.030512][T10751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.040417][T10751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.048575][T10751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.999133][T10518] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.085505][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.112553][T10518] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.143071][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.162614][T10518] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.551933][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.577930][T10518] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 539.602685][T10518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.856834][T10788] xt_hashlimit: size too large, truncated to 1048576 [ 540.362434][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 541.357341][T10518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.538904][T10518] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.242477][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.249641][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.390470][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.397632][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.728364][T10819] syzkaller1: entered allmulticast mode [ 543.125414][T10826] xt_hashlimit: size too large, truncated to 1048576 [ 544.548676][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.308028][T10855] hub 8-0:1.0: USB hub found [ 545.313527][T10855] hub 8-0:1.0: 1 port detected [ 548.943794][T10518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.813655][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 550.377437][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.384961][T10896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.508166][T10896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.605011][T10896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.830583][T10910] xt_hashlimit: size too large, truncated to 1048576 [ 551.095927][T10907] xt_hashlimit: size too large, truncated to 1048576 [ 553.509879][T10518] veth0_vlan: entered promiscuous mode [ 553.563235][T10518] veth1_vlan: entered promiscuous mode [ 553.593988][T10940] syzkaller1: entered allmulticast mode [ 553.749485][T10518] veth0_macvtap: entered promiscuous mode [ 553.759154][T10518] veth1_macvtap: entered promiscuous mode [ 553.782881][T10518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.797579][T10518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.986933][T10942] xt_hashlimit: size too large, truncated to 1048576 [ 554.324025][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.359520][ T498] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.479662][ T498] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.766106][ T498] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.981317][ T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.025402][ T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.142171][ T498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.192676][ T498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.031611][T10966] syzkaller1: entered allmulticast mode [ 556.589134][T10970] xt_hashlimit: size too large, truncated to 1048576 [ 557.139229][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.145729][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 558.160957][T10990] hub 8-0:1.0: USB hub found [ 558.168986][T10990] hub 8-0:1.0: 1 port detected [ 558.896812][T10989] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 559.491600][T11009] hub 8-0:1.0: USB hub found [ 559.497274][T11009] hub 8-0:1.0: 1 port detected [ 563.436630][T11039] hub 8-0:1.0: USB hub found [ 563.441434][T11039] hub 8-0:1.0: 1 port detected [ 565.027829][T11058] xt_hashlimit: size too large, truncated to 1048576 [ 565.439861][T11062] syzkaller1: entered allmulticast mode [ 565.960664][T11074] hub 8-0:1.0: USB hub found [ 565.967512][T11074] hub 8-0:1.0: 1 port detected [ 566.024422][T11072] xt_hashlimit: size too large, truncated to 1048576 [ 567.481301][T11093] hub 8-0:1.0: USB hub found [ 567.486783][T11093] hub 8-0:1.0: 1 port detected [ 568.351465][T11096] syzkaller1: entered allmulticast mode [ 568.662582][T11103] xt_hashlimit: size too large, truncated to 1048576 [ 572.093178][T11124] syzkaller1: entered allmulticast mode [ 572.605524][T11130] xt_hashlimit: size too large, truncated to 1048576 [ 573.859294][T11149] xt_hashlimit: size too large, truncated to 1048576 [ 574.444954][ T5760] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 574.606668][ T5760] usb 2-1: Using ep0 maxpacket: 16 [ 574.661924][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short [ 574.716199][ T5760] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 574.783000][ T5760] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 574.842173][ T5760] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 574.928403][ T5760] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 574.964236][ T5760] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 575.009254][ T5760] usb 2-1: config 176 has no interface number 0 [ 575.025764][ T5760] usb 2-1: config 176 has no interface number 1 [ 575.040652][ T5760] usb 2-1: config 176 has no interface number 2 [ 575.062454][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 575.111074][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 575.157123][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 575.210838][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 575.260226][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 575.292941][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 575.325573][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 575.376916][ T5760] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 575.448987][ T5760] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 575.479887][ T5760] usb 2-1: config 176 interface 188 has no altsetting 0 [ 575.530650][ T5760] usb 2-1: config 176 interface 44 has no altsetting 0 [ 575.574673][ T5760] usb 2-1: config 176 interface 212 has no altsetting 0 [ 575.612773][ T5760] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 575.663213][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.705893][ T5760] usb 2-1: Product: syz [ 575.731004][ T5760] usb 2-1: Manufacturer: syz [ 575.748421][ T5760] usb 2-1: SerialNumber: syz [ 576.218222][T11179] syzkaller1: entered allmulticast mode [ 576.579433][T11182] xt_hashlimit: size too large, truncated to 1048576 [ 577.540898][T11190] syzkaller1: entered allmulticast mode [ 579.413480][ T5760] option 2-1:176.188: GSM modem (1-port) converter detected [ 579.568774][ T5760] usb 2-1: USB disconnect, device number 9 [ 579.721590][ T5760] option 2-1:176.188: device disconnected [ 580.206891][T11221] xt_hashlimit: size too large, truncated to 1048576 [ 583.913018][T11252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.931408][T11252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.034713][T11252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.069506][T11252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.480078][T11270] xt_hashlimit: size too large, truncated to 1048576 [ 593.304952][T11342] xt_hashlimit: size too large, truncated to 1048576 [ 596.323222][T11367] hub 8-0:1.0: USB hub found [ 596.328881][T11367] hub 8-0:1.0: 1 port detected [ 602.197145][T11413] xt_hashlimit: size too large, truncated to 1048576 [ 604.027219][T11431] xt_hashlimit: size too large, truncated to 1048576 [ 605.903809][T11453] syzkaller1: entered allmulticast mode [ 606.254914][T11462] xt_hashlimit: size too large, truncated to 1048576 [ 606.654911][T11464] hub 8-0:1.0: USB hub found [ 606.705609][T11464] hub 8-0:1.0: 1 port detected [ 609.133079][T11491] xt_hashlimit: size too large, truncated to 1048576 [ 612.462821][T11518] hub 8-0:1.0: USB hub found [ 612.468358][T11518] hub 8-0:1.0: 1 port detected [ 613.679421][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 613.720032][T11524] syzkaller1: entered allmulticast mode [ 613.744313][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 614.146789][T11524] xt_hashlimit: size too large, truncated to 1048576 [ 618.568309][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.587740][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.570235][T11588] hub 8-0:1.0: USB hub found [ 619.869523][T11588] hub 8-0:1.0: 1 port detected [ 620.036277][T11593] hub 8-0:1.0: USB hub found [ 620.041088][T11593] hub 8-0:1.0: 1 port detected [ 620.054301][T11593] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 620.691029][T11601] hub 8-0:1.0: USB hub found [ 620.715382][T11601] hub 8-0:1.0: 1 port detected [ 621.239724][T11606] syzkaller1: entered allmulticast mode [ 621.598707][T11611] xt_hashlimit: size too large, truncated to 1048576 [ 622.561606][T11620] syzkaller1: entered allmulticast mode [ 622.572324][T11618] syzkaller1: entered allmulticast mode [ 622.983354][T11624] xt_hashlimit: size too large, truncated to 1048576 [ 624.002421][T11632] xt_hashlimit: size too large, truncated to 1048576 [ 628.588675][T11676] syzkaller1: entered allmulticast mode [ 628.930852][T11676] xt_hashlimit: size too large, truncated to 1048576 [ 629.444201][T11687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.528769][T11687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.725077][T11687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.792436][T11687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.389438][T11703] hub 8-0:1.0: USB hub found [ 631.394282][T11703] hub 8-0:1.0: 1 port detected [ 633.605009][ T5800] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 633.799653][ T5800] usb 7-1: Using ep0 maxpacket: 16 [ 634.137788][ T5800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 634.176860][ T5800] usb 7-1: config 176 has an invalid interface number: 188 but max is 2 [ 634.274631][ T5800] usb 7-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 634.354474][ T5800] usb 7-1: config 176 has an invalid interface number: 44 but max is 2 [ 634.411714][ T5800] usb 7-1: config 176 has an invalid interface number: 212 but max is 2 [ 634.431610][T11731] syzkaller1: entered allmulticast mode [ 634.606538][ T5800] usb 7-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 634.796678][T11735] xt_hashlimit: size too large, truncated to 1048576 [ 635.159656][ T5800] usb 7-1: config 176 has no interface number 0 [ 635.272808][ T5800] usb 7-1: config 176 has no interface number 1 [ 635.292745][ T5800] usb 7-1: config 176 has no interface number 2 [ 635.314792][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 635.354593][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 635.833935][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 635.919053][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 635.997077][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 636.046645][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 636.353312][T10520] Bluetooth: hci6: command 0x0406 tx timeout [ 636.421069][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 636.494576][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 636.552584][ T5800] usb 7-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 636.632365][ T5800] usb 7-1: config 176 interface 188 has no altsetting 0 [ 636.690555][ T5800] usb 7-1: config 176 interface 44 has no altsetting 0 [ 636.740475][ T5800] usb 7-1: config 176 interface 212 has no altsetting 0 [ 636.772902][ T5800] usb 7-1: string descriptor 0 read error: -71 [ 636.944630][ T5800] usb 7-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 637.188350][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.219938][ T5800] usb 7-1: can't set config #176, error -71 [ 637.233170][ T5800] usb 7-1: USB disconnect, device number 2 [ 637.885287][ T5800] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 638.056148][ T5800] usb 7-1: Using ep0 maxpacket: 16 [ 638.089682][ T5800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 638.126206][ T5800] usb 7-1: config 176 has an invalid interface number: 188 but max is 2 [ 638.150506][ T5800] usb 7-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 638.171071][ T5800] usb 7-1: config 176 has an invalid interface number: 44 but max is 2 [ 638.190511][ T5800] usb 7-1: config 176 has an invalid interface number: 212 but max is 2 [ 638.209268][ T5800] usb 7-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 638.234147][ T5800] usb 7-1: config 176 has no interface number 0 [ 638.247251][ T5800] usb 7-1: config 176 has no interface number 1 [ 638.275251][ T5800] usb 7-1: config 176 has no interface number 2 [ 638.293730][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 638.312118][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 638.325102][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 638.398742][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 638.435739][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 638.468436][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 638.504747][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 638.534635][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 638.553753][ T5800] usb 7-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 639.545982][T11777] hub 8-0:1.0: USB hub found [ 639.566195][ T5800] usb 7-1: config 176 interface 188 has no altsetting 0 [ 639.574197][T11777] hub 8-0:1.0: 1 port detected [ 639.865637][ T5800] usb 7-1: config 176 interface 44 has no altsetting 0 [ 640.048053][T11779] hub 8-0:1.0: USB hub found [ 640.080106][T11779] hub 8-0:1.0: 1 port detected [ 640.122904][ T5800] usb 7-1: config 176 interface 212 has no altsetting 0 [ 640.230629][ T5800] usb 7-1: string descriptor 0 read error: -71 [ 640.270524][ T5800] usb 7-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 640.362230][T11785] warning: `syz.0.1367' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 640.608923][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.935753][ T5800] usb 7-1: can't set config #176, error -71 [ 640.984022][ T5800] usb 7-1: USB disconnect, device number 3 [ 641.575166][T11802] xt_hashlimit: size too large, truncated to 1048576 [ 641.895983][T11804] hub 8-0:1.0: USB hub found [ 641.902901][T11804] hub 8-0:1.0: 1 port detected [ 645.026302][T11830] syzkaller1: entered allmulticast mode [ 645.186595][T11830] xt_hashlimit: size too large, truncated to 1048576 [ 645.262547][T11833] syzkaller1: entered allmulticast mode [ 645.662900][T11837] xt_hashlimit: size too large, truncated to 1048576 [ 647.832277][T11854] xt_hashlimit: size too large, truncated to 1048576 [ 649.932468][T11874] xt_hashlimit: size too large, truncated to 1048576 [ 651.264904][T11884] xt_hashlimit: size too large, truncated to 1048576 [ 651.676566][T11891] syzkaller1: entered allmulticast mode [ 652.087677][T11897] xt_hashlimit: size too large, truncated to 1048576 [ 655.045981][T11930] xt_hashlimit: size too large, truncated to 1048576 [ 656.089179][T11940] xt_hashlimit: size too large, truncated to 1048576 [ 657.477846][T11953] hub 8-0:1.0: USB hub found [ 657.483144][T11953] hub 8-0:1.0: 1 port detected [ 659.475207][T11964] hub 8-0:1.0: USB hub found [ 659.480142][T11964] hub 8-0:1.0: 1 port detected [ 660.263176][T11977] xt_hashlimit: size too large, truncated to 1048576 [ 662.129146][T11996] xt_hashlimit: size too large, truncated to 1048576 [ 662.993235][T11998] hub 8-0:1.0: USB hub found [ 662.998192][T11998] hub 8-0:1.0: 1 port detected [ 663.367340][ T5800] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 663.394458][T12012] hub 8-0:1.0: USB hub found [ 663.399649][T12012] hub 8-0:1.0: 1 port detected [ 663.778495][ T5800] usb 7-1: Using ep0 maxpacket: 16 [ 663.842093][ T5800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 663.902734][ T5800] usb 7-1: config 176 has an invalid interface number: 188 but max is 2 [ 663.942121][ T5800] usb 7-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 663.990535][ T5800] usb 7-1: config 176 has an invalid interface number: 44 but max is 2 [ 664.044338][ T5800] usb 7-1: config 176 has an invalid interface number: 212 but max is 2 [ 664.082408][ T5800] usb 7-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 664.131551][ T5800] usb 7-1: config 176 has no interface number 0 [ 664.211743][ T5800] usb 7-1: config 176 has no interface number 1 [ 664.247457][ T5800] usb 7-1: config 176 has no interface number 2 [ 664.281471][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 664.355297][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 664.428994][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 664.488885][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 664.562801][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 664.624135][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 664.695448][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 664.764134][ T5800] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 664.826143][ T5800] usb 7-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.912155][ T5800] usb 7-1: config 176 interface 188 has no altsetting 0 [ 664.944005][ T5800] usb 7-1: config 176 interface 44 has no altsetting 0 [ 664.992822][ T5800] usb 7-1: config 176 interface 212 has no altsetting 0 [ 665.064200][ T5800] usb 7-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 665.119041][ T5800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.159817][ T5800] usb 7-1: Product: syz [ 665.190733][ T5800] usb 7-1: Manufacturer: syz [ 665.213099][ T5800] usb 7-1: SerialNumber: syz [ 665.984098][ T5800] option 7-1:176.188: GSM modem (1-port) converter detected [ 666.073724][ T5800] usb 7-1: USB disconnect, device number 4 [ 666.122663][ T5800] option 7-1:176.188: device disconnected [ 666.335194][T12032] hub 8-0:1.0: USB hub found [ 666.340705][T12032] hub 8-0:1.0: 1 port detected [ 670.740245][T12059] xt_hashlimit: size too large, truncated to 1048576 [ 677.521876][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 677.795005][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 677.823033][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 677.882614][ T24] usb 2-1: config 176 has an invalid interface number: 188 but max is 2 [ 677.913127][ T24] usb 2-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 677.978064][ T24] usb 2-1: config 176 has an invalid interface number: 44 but max is 2 [ 678.021561][ T24] usb 2-1: config 176 has an invalid interface number: 212 but max is 2 [ 678.085976][ T24] usb 2-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 678.138444][ T24] usb 2-1: config 176 has no interface number 0 [ 678.169708][ T24] usb 2-1: config 176 has no interface number 1 [ 678.205131][ T24] usb 2-1: config 176 has no interface number 2 [ 678.237666][ T24] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 678.287606][ T24] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 678.336944][ T24] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 678.371738][ T24] usb 2-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 678.414354][ T24] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 678.531320][T11629] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 678.727321][ T24] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 678.776195][ T24] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 678.790486][ T24] usb 2-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 678.811313][ T24] usb 2-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 678.880150][ T24] usb 2-1: config 176 interface 188 has no altsetting 0 [ 678.904929][T11629] usb 3-1: Using ep0 maxpacket: 16 [ 678.912579][ T24] usb 2-1: config 176 interface 44 has no altsetting 0 [ 678.934466][T11629] usb 3-1: unable to get BOS descriptor or descriptor too short [ 678.968240][ T24] usb 2-1: config 176 interface 212 has no altsetting 0 [ 678.989412][T11629] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 679.005566][ T24] usb 2-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 679.026942][T11629] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 679.050864][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.076742][T11629] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 679.097578][ T24] usb 2-1: Product: syz [ 679.118734][ T24] usb 2-1: Manufacturer: syz [ 679.124970][T11629] usb 3-1: config 176 has an invalid interface number: 212 but max is 2 [ 679.139287][ T24] usb 2-1: SerialNumber: syz [ 679.144954][T11629] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 679.187076][T11629] usb 3-1: config 176 has no interface number 0 [ 679.210082][T11629] usb 3-1: config 176 has no interface number 1 [ 679.229435][T11629] usb 3-1: config 176 has no interface number 2 [ 679.255937][T11629] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 679.355515][T11629] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 679.460133][T12146] hub 8-0:1.0: USB hub found [ 679.465093][T12146] hub 8-0:1.0: 1 port detected [ 679.837552][T11629] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 679.884128][T11629] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 680.007662][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.014023][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.055419][ T5730] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 680.058902][T11629] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 680.400116][T11629] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 680.447666][ T24] option 2-1:176.188: GSM modem (1-port) converter detected [ 680.456630][T11629] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 680.482692][T11629] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 680.504720][ T24] usb 2-1: USB disconnect, device number 10 [ 680.516716][T11629] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 680.532661][ T24] option 2-1:176.188: device disconnected [ 680.545002][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 680.561466][T11629] usb 3-1: config 176 interface 188 has no altsetting 0 [ 680.578998][ T5730] usb 6-1: unable to get BOS descriptor or descriptor too short [ 680.610052][T11629] usb 3-1: config 176 interface 44 has no altsetting 0 [ 680.614475][ T5730] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 680.656991][T11629] usb 3-1: config 176 interface 212 has no altsetting 0 [ 680.666993][ T5730] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 680.706026][ T5730] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 680.708012][T11629] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 680.734414][ T5730] usb 6-1: config 176 has an invalid interface number: 212 but max is 2 [ 680.754315][ T5730] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 680.784118][T12157] hub 8-0:1.0: USB hub found [ 680.788957][T12157] hub 8-0:1.0: 1 port detected [ 681.135740][ T5730] usb 6-1: config 176 has no interface number 0 [ 681.140916][T11629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.142142][ T5730] usb 6-1: config 176 has no interface number 1 [ 681.165467][ T5730] usb 6-1: config 176 has no interface number 2 [ 681.166890][T11629] usb 3-1: Product: syz [ 681.173426][T11629] usb 3-1: Manufacturer: syz [ 681.186090][T11629] usb 3-1: SerialNumber: syz [ 681.210361][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 681.248099][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 681.268123][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 681.271066][T11629] usb 3-1: can't set config #176, error -71 [ 681.294691][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 681.574925][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 681.596775][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 681.608998][T11629] usb 3-1: USB disconnect, device number 11 [ 681.653019][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 681.688128][ T5730] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 681.779609][ T5730] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 682.006933][ T5730] usb 6-1: config 176 interface 188 has no altsetting 0 [ 682.024653][ T5730] usb 6-1: config 176 interface 44 has no altsetting 0 [ 682.045039][ T5730] usb 6-1: config 176 interface 212 has no altsetting 0 [ 682.360177][ T5730] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 682.376819][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.671043][ T5730] usb 6-1: Product: syz [ 682.690267][ T5730] usb 6-1: Manufacturer: syz [ 682.711782][ T5730] usb 6-1: SerialNumber: syz [ 682.770890][ T5730] usb 6-1: can't set config #176, error -71 [ 682.819828][ T5730] usb 6-1: USB disconnect, device number 6 [ 683.022585][T12176] hub 8-0:1.0: USB hub found [ 683.028140][T12176] hub 8-0:1.0: 1 port detected [ 685.977412][T12211] hub 8-0:1.0: USB hub found [ 686.081123][T12211] hub 8-0:1.0: 1 port detected [ 686.135107][T12217] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1476'. [ 689.861489][T12254] hub 8-0:1.0: USB hub found [ 689.897474][T12254] hub 8-0:1.0: 1 port detected [ 693.290564][T12289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.327202][T12289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.380477][T12289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.412257][T12289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.557020][T12303] hub 8-0:1.0: USB hub found [ 694.562617][T12303] hub 8-0:1.0: 1 port detected [ 695.523638][T12308] xt_hashlimit: size too large, truncated to 1048576 [ 695.614960][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 695.806296][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 695.887464][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 695.911734][ T24] usb 4-1: config 176 has an invalid interface number: 188 but max is 2 [ 695.932767][ T24] usb 4-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 695.976769][ T24] usb 4-1: config 176 has an invalid interface number: 44 but max is 2 [ 696.013890][ T24] usb 4-1: config 176 has an invalid interface number: 212 but max is 2 [ 696.054559][ T24] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 696.110745][ T24] usb 4-1: config 176 has no interface number 0 [ 696.132491][ T24] usb 4-1: config 176 has no interface number 1 [ 696.231196][ T24] usb 4-1: config 176 has no interface number 2 [ 696.252294][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 696.268245][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 696.308900][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 696.320756][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 696.382429][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 696.432896][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 696.478180][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 696.519144][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 696.563375][ T24] usb 4-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 696.633341][ T24] usb 4-1: config 176 interface 188 has no altsetting 0 [ 696.661346][ T24] usb 4-1: config 176 interface 44 has no altsetting 0 [ 696.684728][ T24] usb 4-1: config 176 interface 212 has no altsetting 0 [ 696.716338][ T24] usb 4-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 696.744762][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.767529][ T24] usb 4-1: Product: syz [ 696.781747][ T24] usb 4-1: Manufacturer: syz [ 696.794437][ T24] usb 4-1: SerialNumber: syz [ 697.557730][ T24] option 4-1:176.188: GSM modem (1-port) converter detected [ 697.625081][ T24] usb 4-1: USB disconnect, device number 6 [ 697.665994][ T24] option 4-1:176.188: device disconnected [ 700.087858][T12356] hub 8-0:1.0: USB hub found [ 700.093422][T12356] hub 8-0:1.0: 1 port detected [ 703.902961][T12398] hub 8-0:1.0: USB hub found [ 703.908614][T12398] hub 8-0:1.0: 1 port detected [ 704.839225][T12404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.861350][T12404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.171172][T12404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.194960][T12404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.416906][T12414] hub 8-0:1.0: USB hub found [ 705.422602][T12414] hub 8-0:1.0: 1 port detected [ 706.520378][T12416] xt_hashlimit: size too large, truncated to 1048576 [ 707.188840][T12432] xt_hashlimit: size too large, truncated to 1048576 [ 708.751380][T12455] hub 8-0:1.0: USB hub found [ 708.756796][T12455] hub 8-0:1.0: 1 port detected [ 711.369858][T12484] hub 8-0:1.0: USB hub found [ 711.375492][T12484] hub 8-0:1.0: 1 port detected [ 712.494965][ T5730] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 713.070540][ T5730] usb 7-1: Using ep0 maxpacket: 16 [ 713.281730][ T5730] usb 7-1: unable to get BOS descriptor or descriptor too short [ 713.294627][ T5730] usb 7-1: config 176 has an invalid interface number: 188 but max is 2 [ 713.303036][ T5730] usb 7-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 713.312313][ T5730] usb 7-1: config 176 has an invalid interface number: 44 but max is 2 [ 713.320613][ T5730] usb 7-1: config 176 has an invalid interface number: 212 but max is 2 [ 713.330000][ T5730] usb 7-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 713.340388][ T5730] usb 7-1: config 176 has no interface number 0 [ 713.346703][ T5730] usb 7-1: config 176 has no interface number 1 [ 713.353977][ T5730] usb 7-1: config 176 has no interface number 2 [ 713.361219][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 713.372463][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 713.384381][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 713.396203][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 713.407630][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 713.421805][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 713.435484][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 713.502134][ T5730] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 713.528935][ T5730] usb 7-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 713.568646][ T5730] usb 7-1: config 176 interface 188 has no altsetting 0 [ 713.591983][ T5730] usb 7-1: config 176 interface 44 has no altsetting 0 [ 713.616011][ T5730] usb 7-1: config 176 interface 212 has no altsetting 0 [ 713.638656][ T5730] usb 7-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 713.658960][ T5730] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.675680][ T5730] usb 7-1: Product: syz [ 713.691797][ T5730] usb 7-1: Manufacturer: syz [ 713.703655][ T5730] usb 7-1: SerialNumber: syz [ 714.610128][ T5730] option 7-1:176.188: GSM modem (1-port) converter detected [ 714.674586][ T5730] usb 7-1: USB disconnect, device number 5 [ 714.711828][ T5730] option 7-1:176.188: device disconnected [ 716.531444][T12537] xt_hashlimit: size too large, truncated to 1048576 [ 718.664959][T10625] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 718.827992][T10625] usb 7-1: Using ep0 maxpacket: 16 [ 718.868170][T10625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 718.896208][T10625] usb 7-1: config 176 has an invalid interface number: 188 but max is 2 [ 718.916445][T10625] usb 7-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 718.941510][T10625] usb 7-1: config 176 has an invalid interface number: 44 but max is 2 [ 718.970809][T10625] usb 7-1: config 176 has an invalid interface number: 212 but max is 2 [ 718.998740][T10625] usb 7-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 719.504975][T10625] usb 7-1: config 176 has no interface number 0 [ 719.532552][T10625] usb 7-1: config 176 has no interface number 1 [ 719.551181][T10625] usb 7-1: config 176 has no interface number 2 [ 719.557872][T10625] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 719.571037][T10625] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 719.601875][T10625] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 719.654594][T10625] usb 7-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 719.707382][T10625] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 719.740686][T10625] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 719.777974][T10625] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 719.814554][T10625] usb 7-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 719.863967][T10625] usb 7-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 719.909532][T10625] usb 7-1: config 176 interface 188 has no altsetting 0 [ 719.955903][T10625] usb 7-1: config 176 interface 44 has no altsetting 0 [ 719.985235][T10625] usb 7-1: config 176 interface 212 has no altsetting 0 [ 720.248573][T10625] usb 7-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 720.275905][T10625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.305851][T10625] usb 7-1: Product: syz [ 720.328400][T10625] usb 7-1: Manufacturer: syz [ 720.351911][T10625] usb 7-1: SerialNumber: syz [ 720.499007][T12622] hub 8-0:1.0: USB hub found [ 720.504832][T12622] hub 8-0:1.0: 1 port detected [ 721.870098][T10625] option 7-1:176.188: GSM modem (1-port) converter detected [ 721.944368][T10625] usb 7-1: USB disconnect, device number 6 [ 722.011201][T10625] option 7-1:176.188: device disconnected [ 722.392689][T12639] xt_hashlimit: size too large, truncated to 1048576 [ 723.600292][T12649] hub 8-0:1.0: USB hub found [ 723.606634][T12649] hub 8-0:1.0: 1 port detected [ 724.365728][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 724.401586][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1586'. [ 732.792997][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1611'. [ 734.318961][T12773] hub 8-0:1.0: USB hub found [ 734.323718][T12773] hub 8-0:1.0: 1 port detected [ 735.802756][T12800] hub 8-0:1.0: USB hub found [ 735.808685][T12800] hub 8-0:1.0: 1 port detected [ 739.315981][T12875] hub 8-0:1.0: USB hub found [ 739.323029][T12875] hub 8-0:1.0: 1 port detected [ 740.375602][T12886] hub 8-0:1.0: USB hub found [ 740.384228][T12886] hub 8-0:1.0: 1 port detected [ 741.446030][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.452555][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 742.034978][ T5730] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 742.346474][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 742.421270][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 742.705453][ T5730] usb 4-1: config 176 has an invalid interface number: 188 but max is 2 [ 742.784932][ T5730] usb 4-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 742.803992][ T5730] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 742.832427][ T5730] usb 4-1: config 176 has 1 interface, different from the descriptor's value: 3 [ 743.111058][ T5730] usb 4-1: config 176 has no interface number 0 [ 743.118027][ T5730] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 743.131547][ T5730] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 743.149706][ T5730] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 743.177483][ T5730] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 743.219608][ T5730] usb 4-1: config 176 interface 188 altsetting 255 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 743.275939][ T5730] usb 4-1: config 176 interface 188 has no altsetting 0 [ 743.310342][ T5730] usb 4-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 743.345047][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.390002][ T5730] usb 4-1: Product: syz [ 743.410047][ T5730] usb 4-1: Manufacturer: syz [ 743.465681][ T5730] usb 4-1: SerialNumber: syz [ 743.795133][T12917] xt_hashlimit: size too large, truncated to 1048576 [ 744.691690][T12923] xt_hashlimit: size too large, truncated to 1048576 [ 744.983819][ T5730] option 4-1:176.188: GSM modem (1-port) converter detected [ 745.088264][ T5730] usb 4-1: USB disconnect, device number 7 [ 745.107880][ T5730] option 4-1:176.188: device disconnected [ 746.188793][T12936] hub 8-0:1.0: USB hub found [ 746.193614][T12936] hub 8-0:1.0: 1 port detected [ 746.559586][T12944] hub 8-0:1.0: USB hub found [ 746.565122][T12944] hub 8-0:1.0: 1 port detected [ 747.275362][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1647'. [ 747.339637][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1647'. [ 749.750479][T12992] hub 8-0:1.0: USB hub found [ 749.756943][T12992] hub 8-0:1.0: 1 port detected [ 749.802419][T12994] hub 8-0:1.0: USB hub found [ 750.164653][T12994] hub 8-0:1.0: 1 port detected [ 751.737912][T13018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1662'. [ 752.180714][T13019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1662'. [ 753.784957][T10625] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 753.935064][T10625] usb 4-1: Using ep0 maxpacket: 16 [ 753.960714][T10625] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 753.969243][T10625] usb 4-1: config 1 has no interface number 0 [ 754.003389][T10625] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 754.066775][T10625] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 754.106944][T10625] usb 4-1: config 1 interface 105 has no altsetting 0 [ 754.133896][T10625] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 754.146877][T10625] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 754.177877][T10625] usb 4-1: Product: syz [ 754.242371][T10625] usb 4-1: Manufacturer: syz [ 754.585204][T10625] usb 4-1: SerialNumber: syz [ 754.600502][T13046] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 754.608383][T13046] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.474774][T13068] hub 8-0:1.0: USB hub found [ 755.480228][T13068] hub 8-0:1.0: 1 port detected [ 756.571059][T10625] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 756.897028][T10625] usb 4-1: USB disconnect, device number 8 [ 757.811085][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1674'. [ 757.849969][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1674'. [ 758.218162][T13104] hub 8-0:1.0: USB hub found [ 758.225014][T13104] hub 8-0:1.0: 1 port detected [ 759.802286][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1682'. [ 760.123040][T13130] hub 8-0:1.0: USB hub found [ 760.128513][T13130] hub 8-0:1.0: 1 port detected [ 761.633578][T13142] xt_hashlimit: size too large, truncated to 1048576 [ 762.166439][T13146] hub 8-0:1.0: USB hub found [ 762.171896][T13146] hub 8-0:1.0: 1 port detected [ 764.118619][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 764.162510][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 764.758709][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1692'. [ 765.228826][T13170] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1692'. [ 766.474274][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1697'. [ 768.494982][ T5800] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 768.664959][ T5800] usb 3-1: Using ep0 maxpacket: 16 [ 768.690710][ T5800] usb 3-1: unable to get BOS descriptor or descriptor too short [ 768.718824][T11629] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 768.733745][ T5800] usb 3-1: config 176 has an invalid interface number: 188 but max is 2 [ 768.767215][ T5800] usb 3-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 768.803807][ T5800] usb 3-1: config 176 has an invalid interface number: 44 but max is 2 [ 768.822326][ T5800] usb 3-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 768.856764][ T5800] usb 3-1: config 176 has 2 interfaces, different from the descriptor's value: 3 [ 768.890043][ T5800] usb 3-1: config 176 has no interface number 0 [ 768.915077][T11629] usb 6-1: Using ep0 maxpacket: 16 [ 768.970258][ T5800] usb 3-1: config 176 has no interface number 1 [ 769.166084][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.188321][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.231907][T11629] usb 6-1: unable to get BOS descriptor or descriptor too short [ 769.269984][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 769.313549][T11629] usb 6-1: config 176 has an invalid interface number: 188 but max is 2 [ 769.325783][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.349501][T11629] usb 6-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 769.380484][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 769.394925][T11629] usb 6-1: config 176 has an invalid interface number: 44 but max is 2 [ 769.423473][T11629] usb 6-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 769.433875][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 769.459575][T11629] usb 6-1: config 176 has 2 interfaces, different from the descriptor's value: 3 [ 769.472549][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 769.494953][T11629] usb 6-1: config 176 has no interface number 0 [ 769.514332][ T5800] usb 3-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 769.527359][T11629] usb 6-1: config 176 has no interface number 1 [ 769.545273][T11629] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.557980][ T5800] usb 3-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 769.587909][T11629] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.606468][ T5800] usb 3-1: config 176 interface 188 has no altsetting 0 [ 769.621074][T11629] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 769.635271][ T5800] usb 3-1: config 176 interface 44 has no altsetting 0 [ 769.660387][ T5800] usb 3-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 769.673969][T11629] usb 6-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 769.692886][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.716963][ T5800] usb 3-1: Product: syz [ 769.733773][T11629] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 769.746413][ T5800] usb 3-1: Manufacturer: syz [ 769.756626][ T5800] usb 3-1: SerialNumber: syz [ 769.766637][T11629] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 769.807952][T11629] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 769.836055][T11629] usb 6-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 769.854064][T11629] usb 6-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 769.882592][T11629] usb 6-1: config 176 interface 188 has no altsetting 0 [ 769.904599][T11629] usb 6-1: config 176 interface 44 has no altsetting 0 [ 769.932185][T11629] usb 6-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 769.947189][T11629] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.969093][T11629] usb 6-1: Product: syz [ 769.980749][T11629] usb 6-1: Manufacturer: syz [ 770.033406][T11629] usb 6-1: SerialNumber: syz [ 771.223598][ T5800] option 3-1:176.188: GSM modem (1-port) converter detected [ 771.667976][ T5800] usb 3-1: USB disconnect, device number 12 [ 772.075263][ T5800] option 3-1:176.188: device disconnected [ 772.120065][T11629] option 6-1:176.188: GSM modem (1-port) converter detected [ 772.187661][T11629] usb 6-1: USB disconnect, device number 7 [ 772.238565][T11629] option 6-1:176.188: device disconnected [ 774.538721][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 774.608740][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1721'. [ 774.952147][T13280] fuse: Bad value for 'fd' [ 777.297290][T13309] hub 8-0:1.0: USB hub found [ 777.302757][T13309] hub 8-0:1.0: 1 port detected [ 780.325549][T13331] hub 8-0:1.0: USB hub found [ 780.363191][T13331] hub 8-0:1.0: 1 port detected [ 781.399680][T13335] hub 8-0:1.0: USB hub found [ 781.404945][T13335] hub 8-0:1.0: 1 port detected [ 783.415290][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 783.757465][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 783.782534][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 783.818278][ T24] usb 4-1: config 176 has an invalid interface number: 188 but max is 2 [ 783.856211][ T24] usb 4-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 783.895299][ T24] usb 4-1: config 176 has an invalid interface number: 44 but max is 2 [ 783.920314][ T24] usb 4-1: config 176 has an invalid interface number: 212 but max is 2 [ 783.939480][ T24] usb 4-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 784.267463][ T24] usb 4-1: config 176 has no interface number 0 [ 784.274360][ T24] usb 4-1: config 176 has no interface number 1 [ 784.293294][ T24] usb 4-1: config 176 has no interface number 2 [ 784.310109][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 784.341766][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 784.364790][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 784.388889][ T24] usb 4-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 784.414849][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 784.449062][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 784.481776][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 784.522432][ T24] usb 4-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 784.568958][ T24] usb 4-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 784.615165][ T24] usb 4-1: config 176 interface 188 has no altsetting 0 [ 784.643157][ T24] usb 4-1: config 176 interface 44 has no altsetting 0 [ 784.682912][ T24] usb 4-1: config 176 interface 212 has no altsetting 0 [ 784.725570][ T24] usb 4-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 784.754110][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.779288][ T24] usb 4-1: Product: syz [ 784.802239][ T24] usb 4-1: Manufacturer: syz [ 784.825943][ T24] usb 4-1: SerialNumber: syz [ 786.318138][ T24] option 4-1:176.188: GSM modem (1-port) converter detected [ 786.697601][ T24] usb 4-1: USB disconnect, device number 9 [ 786.736388][ T24] option 4-1:176.188: device disconnected [ 790.655053][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1760'. [ 791.944987][ T5863] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 792.697086][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 792.715508][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 792.728478][ T5863] usb 1-1: config 176 has an invalid interface number: 188 but max is 2 [ 792.739009][ T5863] usb 1-1: config 176 contains an unexpected descriptor of type 0x2, skipping [ 792.765228][ T5863] usb 1-1: config 176 has an invalid interface number: 44 but max is 2 [ 792.773551][ T5863] usb 1-1: config 176 has an invalid interface number: 212 but max is 2 [ 792.782522][ T5863] usb 1-1: config 176 has an invalid descriptor of length 0, skipping remainder of the config [ 792.797513][ T5863] usb 1-1: config 176 has no interface number 0 [ 792.803927][ T5863] usb 1-1: config 176 has no interface number 1 [ 792.870438][ T5863] usb 1-1: config 176 has no interface number 2 [ 793.184450][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 793.229202][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 793.307340][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 793.345266][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 793.384211][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 793.440596][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x7, skipping [ 793.511303][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 793.534550][ T5863] usb 1-1: config 176 interface 188 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 793.566532][ T5863] usb 1-1: config 176 interface 44 altsetting 234 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 793.609416][ T5863] usb 1-1: config 176 interface 188 has no altsetting 0 [ 793.642943][ T5863] usb 1-1: config 176 interface 44 has no altsetting 0 [ 793.660288][ T5863] usb 1-1: config 176 interface 212 has no altsetting 0 [ 793.668255][T13470] tipc: Started in network mode [ 793.680888][T13470] tipc: Node identity 3e56ba83f563, cluster identity 4711 [ 793.704734][ T5863] usb 1-1: New USB device found, idVendor=19d2, idProduct=0027, bcdDevice=89.32 [ 793.719307][T13470] tipc: Enabled bearer , priority 0 [ 793.732544][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.751446][ T5863] usb 1-1: Product: syz [ 793.769483][T13475] syzkaller0: entered promiscuous mode [ 793.801685][ T5863] usb 1-1: Manufacturer: syz [ 793.811791][ T5863] usb 1-1: SerialNumber: syz [ 793.817230][T13475] syzkaller0: entered allmulticast mode [ 793.879433][T13470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1775'. [ 793.918745][T13470] tipc: Resetting bearer [ 793.941021][T13469] tipc: Resetting bearer [ 793.966323][T13469] tipc: Disabling bearer [ 794.537627][T13487] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1779'. [ 794.542506][ T5863] option 1-1:176.188: GSM modem (1-port) converter detected [ 794.599828][ T5863] usb 1-1: USB disconnect, device number 6 [ 794.632655][ T5863] option 1-1:176.188: device disconnected [ 794.827319][T13499] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1786'. [ 794.906132][T13505] loop6: detected capacity change from 0 to 512 [ 795.000773][T13505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 795.515974][T13505] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 795.586768][T13505] EXT4-fs (loop6): 1 orphan inode deleted [ 795.595623][T13505] EXT4-fs (loop6): 1 truncate cleaned up [ 795.614222][T13505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.427219][T10518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.996886][T13538] syzkaller0: entered promiscuous mode [ 797.010090][T13538] syzkaller0: entered allmulticast mode [ 797.185215][T13547] tipc: Started in network mode [ 797.202728][T13547] tipc: Node identity 06b05e728f6b, cluster identity 4711 [ 797.218997][T13547] tipc: Enabled bearer , priority 0 [ 797.327439][T13547] syzkaller0: entered promiscuous mode [ 797.333082][T13547] syzkaller0: entered allmulticast mode [ 797.339928][T13547] tipc: Resetting bearer [ 797.465227][T13546] tipc: Resetting bearer [ 797.518372][T13560] loop6: detected capacity change from 0 to 1024 [ 797.554531][T13560] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 797.598314][T13560] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1809: lblock 2 mapped to illegal pblock 2 (length 1) [ 797.615988][T13560] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.617371][T13560] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 797.626475][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 797.626505][ C0] EXT4-fs (loop6): initial error at time 1782124020: ext4_map_blocks:791: inode 3: block 2 [ 797.626566][ C0] EXT4-fs (loop6): last error at time 1782124020: ext4_map_blocks:791: inode 3: block 2 [ 797.661165][T13560] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.1809: lblock 0 mapped to illegal pblock 48 (length 1) [ 797.675346][T13560] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.676580][T13560] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 797.695261][T13560] EXT4-fs error (device loop6): ext4_acquire_dquot:7039: comm syz.6.1809: Failed to acquire dquot type 0 [ 797.706895][T13560] loop6: lost filesystem error report for type 5 error -117 [ 797.709091][T13560] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 797.725872][T13560] loop6: lost filesystem error report for type 5 error -117 [ 797.727386][T13560] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1809: mark_inode_dirty error [ 797.754989][T13560] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 797.755301][T13560] EXT4-fs warning (device loop6): ext4_evict_inode:269: couldn't mark inode dirty (err -117) [ 797.797784][T13560] EXT4-fs (loop6): 1 orphan inode deleted [ 797.805349][T13560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 797.817791][ T5799] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 797.827261][T13574] loop5: detected capacity change from 0 to 512 [ 797.839029][ T5799] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 797.852311][T13546] tipc: Disabling bearer [ 797.876926][ T5799] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 797.888755][ T5799] EXT4-fs error (device loop6): ext4_release_dquot:7075: comm kworker/u8:9: Failed to release dquot type 0 [ 797.898688][T13574] EXT4-fs (loop5): 1 orphan inode deleted [ 797.909223][ T13] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 797.924227][ T13] EXT4-fs error (device loop5): ext4_release_dquot:7075: comm kworker/u8:1: Failed to release dquot type 1 [ 797.936033][ T13] loop5: lost filesystem error report for type 5 error -117 [ 797.937464][T13560] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.951648][T13574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.969642][T13560] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1809: Invalid inode table block 1 in block_group 0 [ 797.999167][T13560] loop6: lost filesystem error report for type 5 error -117 [ 798.001555][T13574] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.022968][T13560] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 798.043873][T13560] loop6: lost filesystem error report for type 5 error -117 [ 798.044839][T13560] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz.6.1809: mark_inode_dirty error [ 798.096558][T13560] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 798.156191][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.180462][T13582] syzkaller0: entered promiscuous mode [ 798.224757][T13582] syzkaller0: entered allmulticast mode [ 799.202881][T13632] netlink: 'syz.6.1831': attribute type 4 has an invalid length. [ 799.262856][T13632] netlink: 'syz.6.1831': attribute type 4 has an invalid length. [ 799.474361][T13648] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1839'. [ 800.021378][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 800.395889][T13671] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 800.734961][T13677] loop6: detected capacity change from 0 to 512 [ 800.764586][T13681] loop2: detected capacity change from 0 to 256 [ 800.812087][T13677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.913930][T13677] ext4 filesystem being mounted at /124/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.022079][T13677] Quota error (device loop6): do_check_range: Getting block 1895825411 out of range 1-5 [ 801.091051][T13677] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 801.151197][T13677] EXT4-fs error (device loop6): ext4_acquire_dquot:7039: comm syz.6.1851: Failed to acquire dquot type 0 [ 801.336297][T10518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.337809][T13691] loop5: detected capacity change from 0 to 512 [ 801.369859][T13691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 801.425435][T13691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.475025][T13691] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 801.538645][ T30] audit: type=1800 audit(1782124023.994:2): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1856" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 801.788743][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.802662][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.866603][T13710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 801.866664][T13710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 801.895113][T13710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 801.919765][ T5638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.940646][T13710] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 801.973498][ T576] workqueue: work func io_tctx_fallback_work enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 802.019983][T13712] syzkaller0: entered promiscuous mode [ 802.048326][T13712] syzkaller0: entered allmulticast mode [ 802.495207][T10625] kernel read not supported for file /1050/stat (pid: 10625 comm: kworker/0:1) [ 802.886300][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 802.894441][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 802.949770][ T30] audit: type=1326 audit(1782124025.414:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.043057][ T30] audit: type=1326 audit(1782124025.414:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.044063][T13761] syzkaller1: entered promiscuous mode [ 803.160333][ T30] audit: type=1326 audit(1782124025.414:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.163570][T13761] syzkaller1: entered allmulticast mode [ 803.271966][ T30] audit: type=1326 audit(1782124025.414:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.351653][ T30] audit: type=1326 audit(1782124025.414:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.380239][T13769] netlink: 'syz.5.1889': attribute type 10 has an invalid length. [ 803.405951][ T48] bond0: (slave bond_slave_0): interface is now down [ 803.424374][ T48] bond0: (slave bond_slave_1): interface is now down [ 803.442980][ T30] audit: type=1326 audit(1782124025.414:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.468979][T13769] syz_tun: entered promiscuous mode [ 803.476294][ T5799] bond0: (slave bond_slave_0): interface is now down [ 803.485123][ T5799] bond0: (slave bond_slave_1): interface is now down [ 803.499961][ T30] audit: type=1326 audit(1782124025.414:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.525907][ T576] bond0: (slave bond_slave_0): interface is now down [ 803.529586][T13769] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 803.543323][ T576] bond0: (slave bond_slave_1): interface is now down [ 803.550677][ T576] bond0: (slave syz_tun): interface is now down [ 803.557432][ T30] audit: type=1326 audit(1782124025.414:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.588617][ T576] bond0: (slave bond_slave_0): interface is now down [ 803.597668][ T576] bond0: (slave bond_slave_1): interface is now down [ 803.604492][ T576] bond0: (slave syz_tun): interface is now down [ 803.611800][ T30] audit: type=1326 audit(1782124025.414:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13757 comm="syz.2.1885" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4b24b9ce59 code=0x7ffc0000 [ 803.659807][ T5799] bond0: (slave bond_slave_0): interface is now down [ 803.692975][ T5799] bond0: (slave bond_slave_1): interface is now down [ 803.718670][ T5799] bond0: (slave syz_tun): interface is now down [ 803.776785][T12580] bond0: (slave bond_slave_0): interface is now down [ 803.789290][T12580] bond0: (slave bond_slave_1): interface is now down [ 803.810948][T12580] bond0: (slave syz_tun): interface is now down [ 803.845371][ T576] bond0: (slave bond_slave_0): interface is now down [ 803.852271][ T576] bond0: (slave bond_slave_1): interface is now down [ 803.895670][ T576] bond0: (slave syz_tun): interface is now down [ 803.919802][ T576] bond0: now running without any active interface! [ 804.377779][T13815] loop2: detected capacity change from 0 to 512 [ 804.395487][T13817] IPv6: addrconf: prefix option has invalid lifetime [ 804.436681][T13815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1908: bg 0: block 169: padding at end of block bitmap is not set [ 804.449221][T13822] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 804.465856][T13815] loop2: lost filesystem error report for type 5 error -117 [ 804.473252][T13815] Quota error (device loop2): write_blk: dquota write failed [ 804.480612][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 804.480642][ C0] EXT4-fs (loop2): initial error at time 1782124026: ext4_validate_block_bitmap:440 [ 804.480683][ C0] EXT4-fs (loop2): last error at time 1782124026: ext4_validate_block_bitmap:440 [ 804.575368][T13815] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.1908: Failed to acquire dquot type 0 [ 804.608047][T13815] loop2: lost filesystem error report for type 5 error -117 [ 804.609236][T13815] EXT4-fs (loop2): 1 truncate cleaned up [ 804.635246][T13824] loop6: detected capacity change from 0 to 1024 [ 804.646688][T13815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.665232][T13824] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 804.692183][T13815] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.733097][T13824] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (24168!=20869) [ 804.755775][T13826] syzkaller1: entered promiscuous mode [ 804.776270][T13824] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 804.790780][T13826] syzkaller1: entered allmulticast mode [ 804.817297][T13815] EXT4-fs error (device loop2): ext4_acquire_dquot:7039: comm syz.2.1908: Failed to acquire dquot type 0 [ 804.829847][T13824] EXT4-fs (loop6): filesystem has both journal inode and journal device! [ 804.982299][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.395074][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1926'. [ 805.540110][T13855] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 805.970806][T13871] loop2: detected capacity change from 0 to 1024 [ 806.031914][T13871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.304405][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.388739][T13882] loop6: detected capacity change from 0 to 512 [ 806.447748][T13882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 806.528847][T13890] loop2: detected capacity change from 0 to 512 [ 806.566995][T13882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 806.597709][T13890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 806.671614][T13882] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 806.714776][T13890] EXT4-fs (loop2): 1 truncate cleaned up [ 806.747528][T13890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.343500][T10518] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.399297][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1945'. [ 807.471035][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.619463][T13914] loop6: detected capacity change from 0 to 764 [ 807.664254][T13914] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 808.840286][T13953] hub 8-0:1.0: USB hub found [ 808.847201][T13953] hub 8-0:1.0: 1 port detected [ 809.527888][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 809.558277][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1951'. [ 809.606871][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 809.642695][T13967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 809.665296][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1951'. [ 809.985074][T13978] ------------[ cut here ]------------ [ 809.990579][T13978] !(flags & __GFP_NOWARN) [ 809.990597][T13978] WARNING: mm/slub.c:6841 at __kvmalloc_node_noprof+0x6f7/0xa60, CPU#0: syz.5.1976/13978 [ 810.004810][T13978] Modules linked in: [ 810.008778][T13978] CPU: 0 UID: 0 PID: 13978 Comm: syz.5.1976 Not tainted syzkaller #0 PREEMPT(full) [ 810.018214][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.028364][T13978] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 810.034587][T13978] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 67 5f f2 8d e8 10 [ 810.054431][T13978] RSP: 0018:ffffc90003e8fa88 EFLAGS: 00010246 [ 810.060716][T13978] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 810.068760][T13978] RDX: 0000000000000000 RSI: ffffffff8c1d2b80 RDI: ffffffff8e1ef920 [ 810.076799][T13978] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 810.084799][T13978] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 810.093257][T13978] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 810.101437][T13978] FS: 00007feb5df806c0(0000) GS:ffff88812431a000(0000) knlGS:0000000000000000 [ 810.110607][T13978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.117282][T13978] CR2: 0000200000002300 CR3: 00000000960c5000 CR4: 0000000000350ef0 [ 810.125302][T13978] Call Trace: [ 810.128600][T13978] [ 810.131548][T13978] ? io_pin_pages+0xc3/0x1e0 [ 810.136200][T13978] io_pin_pages+0xc3/0x1e0 [ 810.140653][T13978] io_sqe_buffer_register+0x1d9/0x1500 [ 810.146267][T13978] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 810.152203][T13978] ? trace_kmalloc+0xeb/0x110 [ 810.157181][T13978] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 810.163105][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.169255][T13978] ? io_rsrc_data_alloc+0x2c/0xa0 [ 810.174322][T13978] ? copy_iovec_from_user+0x102/0x140 [ 810.179961][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.185648][T13978] ? iovec_from_user+0xda/0x140 [ 810.190544][T13978] io_sqe_buffers_register.cold+0x346/0x4c3 [ 810.196549][T13978] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 810.202573][T13978] ? __fget_files+0x21f/0x3d0 [ 810.207332][T13978] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 810.213286][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.219001][T13978] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 810.225332][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.231009][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.236712][T13978] ? __x64_sys_futex+0x358/0x4d0 [ 810.241673][T13978] ? rcu_is_watching+0x12/0xc0 [ 810.246612][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.252274][T13978] ? xfd_validate_state+0x129/0x190 [ 810.257549][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.263206][T13978] ? rcu_is_watching+0x12/0xc0 [ 810.268032][T13978] do_syscall_64+0x115/0x870 [ 810.272645][T13978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.278599][T13978] RIP: 0033:0x7feb5d19ce59 [ 810.283019][T13978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.302742][T13978] RSP: 002b:00007feb5df80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 810.311220][T13978] RAX: ffffffffffffffda RBX: 00007feb5d415fa0 RCX: 00007feb5d19ce59 [ 810.319250][T13978] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.327270][T13978] RBP: 00007feb5d232e6f R08: 0000000000000000 R09: 0000000000000000 [ 810.335312][T13978] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 810.343311][T13978] R13: 00007feb5d416038 R14: 00007feb5d415fa0 R15: 00007ffd67524d38 [ 810.351466][T13978] [ 810.354503][T13978] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 810.361791][T13978] CPU: 0 UID: 0 PID: 13978 Comm: syz.5.1976 Not tainted syzkaller #0 PREEMPT(full) [ 810.371192][T13978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.381247][T13978] Call Trace: [ 810.384519][T13978] [ 810.387447][T13978] dump_stack_lvl+0x100/0x190 [ 810.392136][T13978] vpanic+0x552/0x970 [ 810.396124][T13978] ? __pfx_vpanic+0x10/0x10 [ 810.400632][T13978] ? lock_release+0x24d/0x310 [ 810.405322][T13978] panic+0xd1/0xe0 [ 810.409049][T13978] ? __pfx_panic+0x10/0x10 [ 810.413479][T13978] check_panic_on_warn.cold+0x19/0x34 [ 810.418859][T13978] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 810.424426][T13978] __warn.cold+0x191/0x318 [ 810.428851][T13978] __report_bug+0x30f/0x440 [ 810.433367][T13978] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 810.438941][T13978] ? __pfx___report_bug+0x10/0x10 [ 810.443983][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.449634][T13978] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 810.455564][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.461215][T13978] ? policy_nodemask+0xed/0x4f0 [ 810.466095][T13978] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 810.471660][T13978] report_bug+0xb2/0x220 [ 810.475917][T13978] ? __kvmalloc_node_noprof+0x6f7/0xa60 [ 810.481482][T13978] handle_bug+0x16a/0x2a0 [ 810.485830][T13978] exc_invalid_op+0x17/0x50 [ 810.490351][T13978] asm_exc_invalid_op+0x1a/0x20 [ 810.495213][T13978] RIP: 0010:__kvmalloc_node_noprof+0x6f7/0xa60 [ 810.501388][T13978] Code: c1 e8 5d 0f ff ff 4d 85 f6 0f 85 21 fd ff ff 48 81 fb ff ff ff 7f 0f 86 b8 fc ff ff 41 81 e4 00 20 00 00 0f 85 07 fd ff ff 90 <0f> 0b 90 e9 fe fc ff ff be 43 01 00 00 48 c7 c7 67 5f f2 8d e8 10 [ 810.521010][T13978] RSP: 0018:ffffc90003e8fa88 EFLAGS: 00010246 [ 810.527088][T13978] RAX: 0000000000000001 RBX: 0000000080000008 RCX: 0000000100000000 [ 810.535057][T13978] RDX: 0000000000000000 RSI: ffffffff8c1d2b80 RDI: ffffffff8e1ef920 [ 810.543027][T13978] RBP: 0000000000000021 R08: 00000000004028c0 R09: 00000000ffffffff [ 810.551004][T13978] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 810.558982][T13978] R13: 00000000ffffffff R14: 0000000000000000 R15: 00000000004028c0 [ 810.566968][T13978] ? __kvmalloc_node_noprof+0x6d3/0xa60 [ 810.572540][T13978] ? io_pin_pages+0xc3/0x1e0 [ 810.577150][T13978] io_pin_pages+0xc3/0x1e0 [ 810.581585][T13978] io_sqe_buffer_register+0x1d9/0x1500 [ 810.587066][T13978] ? rcu_is_cpu_rrupt_from_idle+0x250/0x270 [ 810.592982][T13978] ? trace_kmalloc+0xeb/0x110 [ 810.597686][T13978] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 810.603597][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.609244][T13978] ? io_rsrc_data_alloc+0x2c/0xa0 [ 810.614299][T13978] ? copy_iovec_from_user+0x102/0x140 [ 810.619728][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.625378][T13978] ? iovec_from_user+0xda/0x140 [ 810.630264][T13978] io_sqe_buffers_register.cold+0x346/0x4c3 [ 810.636195][T13978] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 810.642199][T13978] ? __fget_files+0x21f/0x3d0 [ 810.646894][T13978] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 810.652806][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.658460][T13978] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 810.664722][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.670369][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.676023][T13978] ? __x64_sys_futex+0x358/0x4d0 [ 810.680994][T13978] ? rcu_is_watching+0x12/0xc0 [ 810.685775][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.691424][T13978] ? xfd_validate_state+0x129/0x190 [ 810.696636][T13978] ? srso_alias_return_thunk+0x5/0xfbef5 [ 810.702282][T13978] ? rcu_is_watching+0x12/0xc0 [ 810.707067][T13978] do_syscall_64+0x115/0x870 [ 810.711674][T13978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.717576][T13978] RIP: 0033:0x7feb5d19ce59 [ 810.721989][T13978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.741603][T13978] RSP: 002b:00007feb5df80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 810.750024][T13978] RAX: ffffffffffffffda RBX: 00007feb5d415fa0 RCX: 00007feb5d19ce59 [ 810.757996][T13978] RDX: 0000200000002300 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.765966][T13978] RBP: 00007feb5d232e6f R08: 0000000000000000 R09: 0000000000000000 [ 810.773932][T13978] R10: 0000000000003100 R11: 0000000000000246 R12: 0000000000000000 [ 810.781898][T13978] R13: 00007feb5d416038 R14: 00007feb5d415fa0 R15: 00007ffd67524d38 [ 810.789881][T13978] [ 810.793558][T13978] Kernel Offset: disabled [ 810.797872][T13978] Rebooting in 86400 seconds..