last executing test programs: 13.112362167s ago: executing program 2 (id=306): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b06060077010000002a90068374"], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 10.906575231s ago: executing program 2 (id=315): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 8.546833739s ago: executing program 2 (id=323): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x2000, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) 8.139042239s ago: executing program 2 (id=325): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 7.753497559s ago: executing program 0 (id=329): memfd_create(0x0, 0x3) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) readv(r4, &(0x7f00000016c0)=[{0x0}], 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0x1) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200006, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x1000000a, 0x6, 0xfff, 0xa000, 0x8, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000100)=0x4, 0x8112) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6.386674162s ago: executing program 0 (id=330): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 5.471183665s ago: executing program 2 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 5.418507226s ago: executing program 0 (id=337): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x3, 0x300) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x6}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x18, 0x4932, 0x82, 0x1, 0x1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r6, &(0x7f0000002740), 0x0}, 0x20) openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) close_range(r0, 0xffffffffffffffff, 0x2) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6000, 0x7ed, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4.025084931s ago: executing program 2 (id=339): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0xc054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) 3.790961247s ago: executing program 1 (id=340): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) cachestat(r0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x2080, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e56a64920d2aeaa49a4f4e5e1b2d675d2db3160f511c896b08c66674e6f208992f74eefa862bb05d29c7302c6a49041a258ffc97317ec61bdefbfb4238b9d1ad268975c44c710dcd283a7a710834ff77838227306659845ac73"], 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r4, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) 3.558609232s ago: executing program 3 (id=342): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="00000000b99b5c65df4bb84674d78e0bfa0d", 0x12}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) 3.398779976s ago: executing program 1 (id=343): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000002940)) 3.119000034s ago: executing program 1 (id=344): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x101, 0x1, r1, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_gettime(r3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x80d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.118712243s ago: executing program 3 (id=345): fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2.291757144s ago: executing program 3 (id=346): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856ca", 0x1d, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8", 0x58}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.900384383s ago: executing program 3 (id=347): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f00000001c0)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') read$FUSE(r7, &(0x7f0000002dc0)={0x2020}, 0x2020) 1.791060356s ago: executing program 1 (id=348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0) 1.727082508s ago: executing program 1 (id=349): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000180)) 1.65816254s ago: executing program 1 (id=350): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.319008058s ago: executing program 0 (id=351): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$loop(0x0, 0xffffffffffffffff, 0x101000) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.260855829s ago: executing program 3 (id=352): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) 1.104966033s ago: executing program 3 (id=353): syz_usb_connect(0x3, 0x62, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04bf4e2a5f010203050902041f0000ff1f00000a240104ea2dc52b26c0a1800500000508240805040004960d240601010302000100060006092403050503060581092403060103178ee8dc75ddc80dd0c4e2f9906a5145fa70bbfb4664286675768f91215f5d1cbda9", @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT=0x0], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r1 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x2, 0x1ffff, 0x3}) r2 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000840)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}, {&(0x7f0000000280)="95f2513edf672d97d9c16f7de78d586b56d9622a53a5c4a87ec4f7400033596542b3d0112570d8c2b7d5380d9f937759d7ca55622a7b933d7541f1a7fae4be446caf64cf2b117c80a7e602c280316ad1a0deb50a74789460df588d2d", 0x5c, 0x2}, {&(0x7f0000000380)="4fb296be5f8068fd80eade1aa0faf9c44cc3b21ea3060bf3080f1fd39157e33bd0e93a32a71830738439f9e567d30c229802bd082812a8c3fd03ce61f2f3bba02629f4462cf6d84ccbb61e249b59c2eabff023276141a78ed1ecdef540c507e6c663fdf441aaec6f42eced28788122f2af46c28a6466a92493a275c83abb3e02648f1a7d8ff3e8c9255e3c013854a00f2aea6b2be55cad377a6ac3d7e9cad170dbb4dd3f4937020dbe32221f9a1a12540b760dd7830bffdbd35d60a73378f11eefa92ec6bf887c4b1b00fd82686f7cde3088d7956514236aa0b896", 0xdb, 0x2}, {0x0, 0x0, 0x3}, {&(0x7f0000000780), 0x0, 0x3}, {&(0x7f0000000800)="e72f26355524223ce927049e55bd3912e72050fcc0971e06a7a437b9cd50d00c35537c5f11bde38990e17a3ece1ef5be148d8d24b0bde57622e94757", 0x3c, 0x3}]}, 0x6, 0x1}, 0x1) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, 0x0, 0x0, 0x6, 0x8, 0x48, 0x6d, 0x7e}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) syz_io_uring_setup(0x2b94, &(0x7f0000000000)={0x0, 0xef0b, 0x800, 0x0, 0x3ca}, &(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) syz_ublk_setup_io_uring(0x1c9f, &(0x7f00000001c0)={0x0, 0x6bf1, 0x10863, 0x0, 0x16a}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = gettid() syz_ublk_add_dev(r0, r7, 0x0, r8, &(0x7f0000000380)={0x2e, 0x1, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x4, 0x7d3, 0x0, 0x0, 0x1000, 0x7, r11, 0x0, 0x5c}}}, &(0x7f0000000400)) 43.02277ms ago: executing program 0 (id=354): fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=355): syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x9f448bcd00133e3e, 0x0, 0x0, 0x0, 0x20, 0x763, 0x1031, 0x103, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xf9, 0xe0, 0x9, "", {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0xaf, 0x2d, {0x7, 0x25, 0x1, 0x8, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0x7f, 0x8, {0x7, 0x25, 0x1, 0x4, 0x2, 0x7fff}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. [ 65.410846][ T5761] cgroup: Unknown subsys name 'net' [ 65.545762][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.890296][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.861697][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.870105][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.878312][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.886576][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.909850][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.917354][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.925757][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.933707][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.941239][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.948933][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.957772][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.965520][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.995805][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.013287][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.021085][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.040484][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.048270][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.055817][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.090343][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.098367][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.106356][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.115319][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.123614][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.131188][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.428354][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 69.517737][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 69.527869][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 69.638497][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.646429][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.653936][ T5773] bridge_slave_0: entered allmulticast mode [ 69.660684][ T5773] bridge_slave_0: entered promiscuous mode [ 69.668625][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 69.699376][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.706547][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.713859][ T5773] bridge_slave_1: entered allmulticast mode [ 69.720672][ T5773] bridge_slave_1: entered promiscuous mode [ 69.768887][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.776049][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.783311][ T5777] bridge_slave_0: entered allmulticast mode [ 69.790187][ T5777] bridge_slave_0: entered promiscuous mode [ 69.799703][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.824631][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.832034][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.839137][ T5777] bridge_slave_1: entered allmulticast mode [ 69.845958][ T5777] bridge_slave_1: entered promiscuous mode [ 69.868503][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.887318][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.894502][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.904093][ T5781] bridge_slave_0: entered allmulticast mode [ 69.910813][ T5781] bridge_slave_0: entered promiscuous mode [ 69.922027][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.954241][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.962247][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.969359][ T5781] bridge_slave_1: entered allmulticast mode [ 69.976230][ T5781] bridge_slave_1: entered promiscuous mode [ 69.993700][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.013722][ T5773] team0: Port device team_slave_0 added [ 70.046657][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.058318][ T5773] team0: Port device team_slave_1 added [ 70.084774][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.096469][ T5777] team0: Port device team_slave_0 added [ 70.111663][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.118620][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.145045][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.156755][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.164202][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.171687][ T5784] bridge_slave_0: entered allmulticast mode [ 70.178322][ T5784] bridge_slave_0: entered promiscuous mode [ 70.194967][ T5777] team0: Port device team_slave_1 added [ 70.203138][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.210353][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.236321][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.247480][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.257069][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.264274][ T5784] bridge_slave_1: entered allmulticast mode [ 70.271884][ T5784] bridge_slave_1: entered promiscuous mode [ 70.297048][ T5781] team0: Port device team_slave_0 added [ 70.337548][ T5781] team0: Port device team_slave_1 added [ 70.363951][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.373395][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.399476][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.412833][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.434915][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.444280][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.471843][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.483933][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.491101][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.517087][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.544542][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.551532][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.577429][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.603988][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.634248][ T5773] hsr_slave_0: entered promiscuous mode [ 70.640550][ T5773] hsr_slave_1: entered promiscuous mode [ 70.682683][ T5784] team0: Port device team_slave_0 added [ 70.714906][ T5784] team0: Port device team_slave_1 added [ 70.734497][ T5777] hsr_slave_0: entered promiscuous mode [ 70.740826][ T5777] hsr_slave_1: entered promiscuous mode [ 70.746836][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.757176][ T5777] Cannot create hsr debugfs directory [ 70.768180][ T5781] hsr_slave_0: entered promiscuous mode [ 70.774556][ T5781] hsr_slave_1: entered promiscuous mode [ 70.781136][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.788694][ T5781] Cannot create hsr debugfs directory [ 70.872699][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.879774][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.905777][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.919347][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.926652][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.952740][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.010785][ T5776] Bluetooth: hci0: command tx timeout [ 71.016614][ T5090] Bluetooth: hci1: command tx timeout [ 71.089684][ T5090] Bluetooth: hci2: command tx timeout [ 71.127305][ T5784] hsr_slave_0: entered promiscuous mode [ 71.137788][ T5784] hsr_slave_1: entered promiscuous mode [ 71.144187][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.152318][ T5784] Cannot create hsr debugfs directory [ 71.170442][ T5090] Bluetooth: hci3: command tx timeout [ 71.298474][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.325428][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.334989][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.363343][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.421376][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.430743][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.440952][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.457359][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.495369][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.510032][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.559426][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.573079][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.585509][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.608813][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.668548][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.704403][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.715783][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.725479][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.737181][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.774351][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.802374][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.809636][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.833640][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.858669][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.865794][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.900520][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.938091][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.945205][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.972434][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.979556][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.004885][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.076338][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.097181][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.142826][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.150004][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.183407][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.216571][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.223765][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.286789][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.308975][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.316177][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.359056][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.366226][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.403920][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.528336][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.621474][ T5773] veth0_vlan: entered promiscuous mode [ 72.644747][ T5777] veth0_vlan: entered promiscuous mode [ 72.662953][ T5773] veth1_vlan: entered promiscuous mode [ 72.691880][ T5777] veth1_vlan: entered promiscuous mode [ 72.742393][ T5773] veth0_macvtap: entered promiscuous mode [ 72.774662][ T5773] veth1_macvtap: entered promiscuous mode [ 72.789601][ T5777] veth0_macvtap: entered promiscuous mode [ 72.814930][ T5777] veth1_macvtap: entered promiscuous mode [ 72.841758][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.884690][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.897807][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.918085][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.927270][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.936766][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.946229][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.971355][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.982647][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.996139][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.018856][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.035376][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.046800][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.058239][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.078546][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.088491][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.101283][ T5090] Bluetooth: hci1: command tx timeout [ 73.106683][ T5090] Bluetooth: hci0: command tx timeout [ 73.111743][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.121445][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.170355][ T5090] Bluetooth: hci2: command tx timeout [ 73.224628][ T5781] veth0_vlan: entered promiscuous mode [ 73.234668][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.248340][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.256255][ T5090] Bluetooth: hci3: command tx timeout [ 73.274129][ T5781] veth1_vlan: entered promiscuous mode [ 73.344087][ T5784] veth0_vlan: entered promiscuous mode [ 73.373855][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.385269][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.396842][ T5784] veth1_vlan: entered promiscuous mode [ 73.406596][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.414963][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.437543][ T5781] veth0_macvtap: entered promiscuous mode [ 73.474010][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.475958][ T5781] veth1_macvtap: entered promiscuous mode [ 73.493820][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.592398][ T5784] veth0_macvtap: entered promiscuous mode [ 73.617106][ T5784] veth1_macvtap: entered promiscuous mode [ 73.661309][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.699385][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.730364][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.746632][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.758172][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.778587][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.789508][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.802560][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.815260][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.826874][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.838636][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.850353][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.860966][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.871493][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.884329][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.898788][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.928568][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.945531][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.957180][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.967181][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.979829][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.008298][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.043869][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.068108][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.098690][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.115252][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.126809][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.141628][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.151931][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161117][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.173204][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182530][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.287164][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.305390][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.377423][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.393046][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.472734][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.484756][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.522298][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.537161][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.744855][ T5848] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 74.779001][ T5848] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 75.170905][ T5090] Bluetooth: hci1: command tx timeout [ 75.170941][ T5776] Bluetooth: hci0: command tx timeout [ 75.259960][ T5776] Bluetooth: hci2: command tx timeout [ 75.330065][ T5776] Bluetooth: hci3: command tx timeout [ 75.419893][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.609941][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 75.634024][ T5810] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 75.663675][ T5810] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 75.726455][ T5810] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 75.750028][ T5810] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 75.840843][ T5810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.230830][ T5810] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 76.679610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.890550][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.250661][ T5776] Bluetooth: hci0: command tx timeout [ 77.250659][ T5090] Bluetooth: hci1: command tx timeout [ 77.329891][ T5776] Bluetooth: hci2: command tx timeout [ 77.410073][ T5776] Bluetooth: hci3: command tx timeout [ 77.617258][ T5810] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 77.754155][ T5810] usb 2-1: Product: syz [ 77.759049][ T5810] usb 2-1: Manufacturer: syz [ 77.764113][ T5810] usb 2-1: SerialNumber: syz [ 77.764413][ T5873] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.781410][ T5810] usb 2-1: config 0 descriptor?? [ 77.803911][ T5810] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 77.828696][ T5810] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 77.950015][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 77.956712][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.972027][ T5831] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 77.990390][ T5831] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 78.001224][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.012296][ T28] audit: type=1326 audit(1786686275.582:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.2.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0c19e0d9 code=0x7fc00000 [ 78.022049][ T5831] usb 1-1: config 0 descriptor?? [ 78.114670][ T5881] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.154685][ T5881] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.172050][ T5881] Zero length message leads to an empty skb [ 78.289366][ T5763] usb 1-1: USB disconnect, device number 2 [ 78.338322][ T5831] usb 2-1: USB disconnect, device number 2 [ 78.359075][ T5831] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 78.731469][ T28] audit: type=1326 audit(1786686276.302:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.2.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b0c19e0d9 code=0x7fc00000 [ 78.947875][ T5897] UBIFS error (pid: 5897): cannot open "ubi0_0", error -19 [ 79.473892][ T5909] xt_hashlimit: size too large, truncated to 1048576 [ 80.530532][ T5929] process 'syz.2.29' launched './file0' with NULL argv: empty string added [ 81.132280][ T5930] binder: 5926:5930 ioctl c0306201 200000000100 returned -14 [ 82.183169][ T5947] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 82.199461][ T5947] File: /dev/nullb0 PID: 5947 Comm: syz.3.34 [ 83.403588][ T5962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.40'. [ 84.016892][ T5812] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.084208][ T5812] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.850791][ T5978] fido_id[5978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.901301][ T5978] fido_id (5978) used greatest stack depth: 20904 bytes left [ 85.340152][ T5763] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.539857][ T5830] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.563583][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.592354][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.603508][ T5763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 85.615770][ T5763] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.625162][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.669128][ T5763] usb 1-1: config 0 descriptor?? [ 85.779783][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 85.791275][ T5830] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 85.826268][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.855957][ T5830] usb 3-1: Product: syz [ 85.867433][ T5830] usb 3-1: Manufacturer: syz [ 85.908626][ T5830] usb 3-1: SerialNumber: syz [ 85.928201][ T5830] usb 3-1: config 0 descriptor?? [ 85.939549][ T5830] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 86.122316][ T5763] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 86.181392][ T5763] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 86.861363][ T790] cfg80211: failed to load regulatory.db [ 87.157482][ T5830] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 87.352874][ T5830] usb 3-1: USB disconnect, device number 2 [ 87.389259][ T5830] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 87.405556][ T5830] ssu100 3-1:0.0: device disconnected [ 87.540021][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 88.059737][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 88.067701][ T5831] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 88.083741][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.094372][ T5831] usb 4-1: config 0 descriptor?? [ 89.069831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.500421][ T5870] usb 1-1: USB disconnect, device number 3 [ 91.097408][ T5831] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 91.233280][ T5831] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 91.267756][ T5831] dib0700: firmware download failed at 7 with -22 [ 91.329280][ T5831] usb 4-1: USB disconnect, device number 2 [ 91.394649][ T6058] jffs2: notice: (6058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 91.631301][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.845728][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 91.856657][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.870043][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.879098][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.890512][ T5870] usb 3-1: config 0 descriptor?? [ 91.900868][ T5870] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 93.431385][ T6074] kvm: MONITOR instruction emulated as NOP! [ 93.552595][ T6084] autofs4:pid:6084:autofs_fill_super: called with bogus options [ 93.660167][ T5870] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.853958][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 93.866201][ T5870] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 93.875607][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.884847][ T5870] usb 1-1: Product: syz [ 93.889171][ T5870] usb 1-1: Manufacturer: syz [ 93.894257][ T5870] usb 1-1: SerialNumber: syz [ 93.904142][ T5870] usb 1-1: config 0 descriptor?? [ 93.917801][ T5870] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 94.130129][ T5870] ssu100: probe of 1-1:0.0 failed with error -71 [ 94.156155][ T5870] usb 1-1: USB disconnect, device number 4 [ 94.308227][ T28] audit: type=1326 audit(1786686291.872:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.80" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea779e0d9 code=0x7fc00000 [ 94.648570][ T5763] usb 3-1: USB disconnect, device number 3 [ 95.442745][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 95.539742][ T5831] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.726495][ T6119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.744029][ T5831] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.755028][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.776577][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 95.785432][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.807071][ T5831] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 95.823798][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.841970][ T5831] usb 1-1: Product: syz [ 95.851305][ T5831] usb 1-1: Manufacturer: syz [ 95.862644][ T5831] usb 1-1: SerialNumber: syz [ 95.880356][ T5831] usb 1-1: selecting invalid altsetting 1 [ 95.895094][ T5831] usb 1-1: unit 6 not found! [ 95.939709][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.91'. [ 96.076588][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.092656][ T6121] bond1: (slave bond0): making interface the new active one [ 96.101378][ T5831] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 96.161420][ T6121] bond1: (slave bond0): Enslaving as an active interface with an up link [ 96.174833][ T5831] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 96.221170][ T5831] usb 1-1: USB disconnect, device number 5 [ 96.285243][ T6121] syz.1.91 (6121) used greatest stack depth: 19944 bytes left [ 96.320737][ T5783] udevd[5783]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.387780][ T790] IPVS: starting estimator thread 0... [ 96.501905][ T6132] IPVS: using max 36 ests per chain, 86400 per kthread [ 98.589995][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.825332][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.835251][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.971141][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 98.980664][ T8] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 98.999733][ T8] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 99.021325][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 99.032307][ T8] usb 4-1: config 1 interface 1 has no altsetting 0 [ 99.670748][ T8] usb 4-1: string descriptor 0 read error: -22 [ 99.680634][ T8] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 99.785695][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.760120][ T8] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 101.686758][ T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 102.663110][ T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 103.000966][ T8] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 103.086941][ T8] usb 4-1: USB disconnect, device number 3 [ 103.139508][ T6176] binder: BINDER_SET_CONTEXT_MGR already set [ 103.222817][ T6176] binder: 6174:6176 ioctl 4018620d 200000000040 returned -16 [ 103.460519][ T6182] input: syz1 as /devices/virtual/input/input6 [ 104.420903][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.429040][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.310468][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.355353][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.822041][ T6163] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.831479][ T6163] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.842314][ T6163] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.851886][ T6163] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.997833][ T6196] pim6reg: entered allmulticast mode [ 107.038877][ T6200] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.009733][ T5810] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.301613][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 108.354455][ T5810] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 108.396405][ T5810] usb 3-1: config 0 has no interface number 0 [ 108.434671][ T5810] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.456088][ T5810] usb 3-1: config 0 interface 85 has no altsetting 0 [ 108.488985][ T5810] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 108.534145][ T5763] IPVS: starting estimator thread 0... [ 108.539964][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.547993][ T5810] usb 3-1: Product: syz [ 108.571047][ T5810] usb 3-1: Manufacturer: syz [ 108.575680][ T5810] usb 3-1: SerialNumber: syz [ 108.602395][ T5810] usb 3-1: config 0 descriptor?? [ 108.659744][ T6232] IPVS: using max 22 ests per chain, 52800 per kthread [ 109.258760][ T5810] appletouch 3-1:0.85: Geyser mode initialized. [ 109.275054][ T5810] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input7 [ 109.489519][ T5810] usb 3-1: USB disconnect, device number 4 [ 109.584944][ T5810] appletouch 3-1:0.85: input: appletouch disconnected [ 109.669140][ T6253] tipc: Started in network mode [ 109.698401][ T6253] tipc: Node identity ee65454a402f, cluster identity 4711 [ 109.712428][ T6253] tipc: Enabled bearer , priority 10 [ 109.735946][ T6252] tipc: Resetting bearer [ 109.824686][ T6252] tipc: Disabling bearer [ 111.480568][ T6278] warning: `syz.0.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.899794][ T790] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.097774][ T790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 112.119466][ T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.136355][ T6290] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 112.142327][ T790] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.192274][ T790] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 112.215713][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.247554][ T790] usb 3-1: Product: syz [ 112.252137][ T790] usb 3-1: Manufacturer: syz [ 112.258924][ T790] usb 3-1: SerialNumber: syz [ 112.562132][ T790] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 112.568982][ T790] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 112.630182][ T790] usb 3-1: USB disconnect, device number 5 [ 113.060667][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.262565][ T5763] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 113.291227][ T5763] usb 2-1: config 0 has no interface number 0 [ 113.297393][ T5763] usb 2-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 113.332792][ T5763] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 113.352550][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.391788][ T5763] usb 2-1: config 0 descriptor?? [ 113.648096][ T5763] usb 2-1: USB disconnect, device number 3 [ 116.181283][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.379675][ T5870] usb 1-1: Using ep0 maxpacket: 8 [ 116.400499][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.424674][ T5870] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 116.448194][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.466455][ T5870] usb 1-1: Product: syz [ 116.473270][ T5870] usb 1-1: Manufacturer: syz [ 116.486457][ T5870] usb 1-1: SerialNumber: syz [ 116.733161][ T5870] usb 1-1: selecting invalid altsetting 1 [ 116.806549][ T5870] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 116.844032][ T5870] usb 1-1: USB disconnect, device number 6 [ 116.891982][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.839225][ T6351] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'. [ 118.207820][ T6362] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 118.264499][ T6362] netlink: 'syz.2.166': attribute type 2 has an invalid length. [ 118.359723][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.580412][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.600365][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.620124][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.630673][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.644513][ T23] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 118.654008][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.738984][ T6369] syzkaller1: entered promiscuous mode [ 118.757290][ T6369] syzkaller1: entered allmulticast mode [ 119.050126][ T5763] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.070039][ T790] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.094674][ T5810] usb 1-1: USB disconnect, device number 7 [ 119.158908][ T6380] kvm: pic: level sensitive irq not supported [ 119.159193][ T6380] kvm: pic: non byte write [ 119.250577][ T5763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 119.268481][ T5763] usb 4-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00 [ 119.278036][ T790] usb 2-1: Using ep0 maxpacket: 8 [ 119.284751][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.298931][ T790] usb 2-1: config 6 has an invalid interface number: 150 but max is 0 [ 119.307400][ T790] usb 2-1: config 6 has no interface number 0 [ 119.320947][ T790] usb 2-1: config 6 interface 150 has no altsetting 0 [ 119.334848][ T5763] em28xx 4-1:1.0: New device @ 480 Mbps (2040:4200, interface 0, class 0) [ 119.354556][ T5763] em28xx 4-1:1.0: Video interface 0 found: [ 119.360750][ T790] usb 2-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2 [ 119.370410][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.378421][ T790] usb 2-1: Product: syz [ 119.386880][ T790] usb 2-1: Manufacturer: syz [ 119.391719][ T790] usb 2-1: SerialNumber: syz [ 119.623951][ T790] rndis_wlan 2-1:6.150: skipping garbage [ 119.630393][ T790] usb 2-1: bad CDC descriptors [ 119.642768][ T790] rndis_host 2-1:6.150: skipping garbage [ 119.648455][ T790] usb 2-1: bad CDC descriptors [ 119.670478][ T790] cdc_acm 2-1:6.150: skipping garbage [ 119.681061][ T790] usb 2-1: USB disconnect, device number 4 [ 119.700529][ T5763] em28xx 4-1:1.0: unknown em28xx chip ID (0) [ 119.711757][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.982775][ T5763] em28xx 4-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 121.009665][ T5763] em28xx 4-1:1.0: board has no eeprom [ 121.059646][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 121.082486][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.092723][ T5763] em28xx 4-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4) [ 121.105615][ T23] usb 3-1: config 0 has no interfaces? [ 121.111210][ T5763] em28xx 4-1:1.0: analog set to bulk mode. [ 121.117594][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 121.131865][ T5763] usb 4-1: USB disconnect, device number 4 [ 121.137797][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.147008][ T790] em28xx 4-1:1.0: Registering V4L2 extension [ 121.156595][ T5763] em28xx 4-1:1.0: Disconnecting em28xx [ 121.169059][ T23] usb 3-1: config 0 descriptor?? [ 121.443497][ T790] em28xx 4-1:1.0: Config register raw data: 0xffffffed [ 121.469713][ T790] em28xx 4-1:1.0: AC97 chip type couldn't be determined [ 121.479638][ T790] em28xx 4-1:1.0: No AC97 audio processor [ 121.485662][ T790] em28xx 4-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19] [ 121.496703][ T790] em28xx 4-1:1.0: Registering input extension [ 121.694156][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.049580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.179586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.626352][ T5830] usb 3-1: USB disconnect, device number 6 [ 122.681272][ T790] rc_core: IR keymap rc-hauppauge not found [ 122.688350][ T790] Registered IR keymap rc-empty [ 122.696077][ T790] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0 [ 122.707302][ T790] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/rc/rc0/input9 [ 122.737255][ T790] em28xx 4-1:1.0: Input extension successfully initialized [ 122.761227][ T5763] em28xx 4-1:1.0: Closing input extension [ 122.770319][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 122.781370][ T23] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.792642][ T23] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.801494][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.827726][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.868239][ T5763] em28xx 4-1:1.0: Freeing device [ 122.875185][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.892798][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.912642][ T23] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.923934][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.937800][ T23] usb 2-1: config 0 descriptor?? [ 123.039629][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.159957][ T23] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 123.209867][ T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 123.232770][ T5830] usb 3-1: Using ep0 maxpacket: 8 [ 123.239433][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.252028][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.266442][ T5830] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 123.299073][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.425020][ T5830] usb 3-1: Product: syz [ 123.458820][ C1] usblp0: nonzero read bulk status received: -71 [ 123.472489][ T23] usb 2-1: USB disconnect, device number 5 [ 123.496309][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.512745][ T5830] usb 3-1: Manufacturer: syz [ 123.567988][ T5830] usb 3-1: SerialNumber: syz [ 123.638519][ T790] usb 1-1: too many endpoints for config 0 interface 0 altsetting 80: 152, using maximum allowed: 30 [ 123.717926][ T5830] usb 3-1: config 0 descriptor?? [ 123.725990][ T6401] usblp0: removed [ 123.797026][ T790] usb 1-1: config 0 interface 0 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 123.880450][ T5830] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 123.901237][ T790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.910794][ T790] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 123.920844][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.928890][ T790] usb 1-1: Product: syz [ 123.933162][ T790] usb 1-1: Manufacturer: syz [ 123.937781][ T790] usb 1-1: SerialNumber: syz [ 123.945235][ T790] usb 1-1: config 0 descriptor?? [ 123.997883][ T5830] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 124.006013][ T5830] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 124.015473][ T5830] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 124.101893][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 124.157870][ T5830] usb 1-1: USB disconnect, device number 8 [ 124.208970][ T5831] usb 3-1: USB disconnect, device number 7 [ 124.500028][ T790] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.721432][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 124.776840][ T790] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 124.857819][ T790] usb 4-1: config 0 has no interface number 0 [ 124.921654][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 125.008908][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 125.130480][ T790] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 125.225729][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.260490][ T790] usb 4-1: Product: syz [ 125.264705][ T790] usb 4-1: Manufacturer: syz [ 125.283055][ T790] usb 4-1: SerialNumber: syz [ 125.316703][ T790] usb 4-1: config 0 descriptor?? [ 125.346293][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.376882][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.762053][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.807452][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.045391][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.055578][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 126.070697][ T790] asix: probe of 4-1:0.34 failed with error -71 [ 126.080370][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.091543][ T790] usb 4-1: USB disconnect, device number 5 [ 126.130972][ T6435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.401147][ T28] audit: type=1326 audit(1786686323.972:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea779e0d9 code=0x7fc00000 [ 126.442373][ T28] audit: type=1326 audit(1786686323.972:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1ea779e0d9 code=0x7fc00000 [ 126.508439][ T6451] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 126.919856][ T5831] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 127.107929][ T28] audit: type=1326 audit(1786686324.672:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.1.194" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea779e0d9 code=0x7fc00000 [ 127.229870][ T5831] usb 3-1: Using ep0 maxpacket: 32 [ 127.301833][ T5831] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.432168][ T5831] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 127.583553][ T5831] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 127.722916][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.027449][ T5831] usb 3-1: config 0 descriptor?? [ 128.514004][ T5831] usb 3-1: USB disconnect, device number 8 [ 129.279640][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.491445][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.524555][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.555343][ T5830] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 129.582814][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.904996][ T5830] usb 4-1: config 0 descriptor?? [ 130.547247][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.554466][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.564730][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.574007][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.582965][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.591617][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.598838][ T5830] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 130.634391][ T5830] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 130.751478][ T5830] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 130.771425][ T5830] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 130.786570][ T5830] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -5 [ 130.840064][ T789] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.967111][ T5810] usb 4-1: USB disconnect, device number 6 [ 131.011278][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.214'. [ 131.022378][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.039118][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.054070][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.079961][ T789] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.099919][ T789] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.108988][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.123552][ T6496] bond3: entered promiscuous mode [ 131.132007][ T789] usb 1-1: config 0 descriptor?? [ 131.141432][ T6496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.151345][ T6496] bond2: (slave bond3): Enslaving as an active interface with an up link [ 131.324415][ T6506] ======================================================= [ 131.324415][ T6506] WARNING: The mand mount option has been deprecated and [ 131.324415][ T6506] and is ignored by this kernel. Remove the mand [ 131.324415][ T6506] option from the mount to silence this warning. [ 131.324415][ T6506] ======================================================= [ 131.360782][ T6506] 9pnet_fd: Insufficient options for proto=fd [ 131.613792][ T789] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 132.892370][ T789] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 132.952363][ T789] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 132.968520][ T789] usb 1-1: USB disconnect, device number 9 [ 132.975297][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.981848][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113411][ T6517] fido_id[6517]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.262396][ T6512] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 133.463543][ T6526] xt_hashlimit: size too large, truncated to 1048576 [ 134.781361][ T6545] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 135.009853][ T5776] Bluetooth: hci0: command 0x080f tx timeout [ 135.036333][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.128374][ T6544] bond2: entered promiscuous mode [ 135.155914][ T6544] bond2 (unregistering): Released all slaves [ 135.759990][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.949911][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 135.986609][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 135.996584][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.004928][ T23] usb 2-1: Product: syz [ 136.009656][ T23] usb 2-1: Manufacturer: syz [ 136.014484][ T23] usb 2-1: SerialNumber: syz [ 136.052228][ T23] usb 2-1: config 0 descriptor?? [ 136.120684][ T23] gspca_main: spca508-2.14.0 probing 041e:4018 [ 136.596174][ T23] gspca_spca508: reg_read err -71 [ 136.606645][ T23] gspca_spca508: reg_read err -71 [ 136.624128][ T23] gspca_spca508: reg_read err -71 [ 136.635003][ T23] gspca_spca508: reg_read err -71 [ 136.646581][ T23] gspca_spca508: reg write: error -71 [ 136.660897][ T23] spca508: probe of 2-1:0.0 failed with error -71 [ 136.670759][ T23] usb 2-1: USB disconnect, device number 6 [ 136.861213][ T6575] syz.3.236[6575]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 136.991496][ T6579] netlink: 84 bytes leftover after parsing attributes in process `syz.3.238'. [ 137.111311][ T6583] overlayfs: missing 'lowerdir' [ 137.834379][ T6589] syzkaller0: entered promiscuous mode [ 137.840387][ T6589] syzkaller0: entered allmulticast mode [ 137.931968][ T5810] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.171651][ T5810] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.181822][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.194507][ T5810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.220952][ T5810] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 138.235451][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.261853][ T5810] usb 1-1: Product: syz [ 138.273404][ T5810] usb 1-1: Manufacturer: syz [ 138.280889][ T5810] usb 1-1: SerialNumber: syz [ 138.290079][ T789] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 138.481678][ T789] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.529702][ T789] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 138.541173][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.550823][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 138.562411][ T789] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 138.576471][ T789] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.586224][ T789] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.596075][ T789] usb 3-1: Product: syz [ 138.600780][ T789] usb 3-1: Manufacturer: syz [ 138.615768][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 138.624436][ T789] cdc_wdm 3-1:1.0: skipping garbage [ 138.643086][ T789] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 138.649093][ T789] cdc_wdm 3-1:1.0: Unknown control protocol [ 138.923569][ T5810] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 138.973536][ T5810] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 138.990729][ T5810] usb 1-1: USB disconnect, device number 10 [ 139.018359][ T6256] udevd[6256]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.302681][ T6612] overlayfs: workdir and upperdir must be separate subtrees [ 141.675073][ T6620] sched: RT throttling activated [ 142.663667][ T23] usb 3-1: USB disconnect, device number 9 [ 142.894676][ T6629] jffs2: notice: (6629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.987052][ T6636] fuse: Bad value for 'fd' [ 143.080016][ T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.279695][ T790] usb 4-1: Using ep0 maxpacket: 8 [ 143.298674][ T790] usb 4-1: config index 0 descriptor too short (expected 6957, got 45) [ 143.310136][ T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.320503][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.338336][ T790] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 143.374554][ T790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.430077][ T790] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 143.448763][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 143.459908][ T790] usb 4-1: Product: syz [ 143.464085][ T790] usb 4-1: Manufacturer: syz [ 143.485190][ T790] usb 4-1: SerialNumber: syz [ 143.505334][ T790] usb 4-1: config 0 descriptor?? [ 143.531880][ T790] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 143.551338][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.559352][ T23] usb 3-1: config 0 has no interface number 0 [ 143.566409][ T790] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 143.586909][ T23] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.597046][ T790] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 143.613147][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.637975][ T23] usb 3-1: Product: syz [ 143.652519][ T23] usb 3-1: Manufacturer: syz [ 143.669584][ T23] usb 3-1: SerialNumber: syz [ 143.695822][ T23] usb 3-1: config 0 descriptor?? [ 143.930353][ T23] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.970670][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 144.011441][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 144.030445][ T23] usb 3-1: media controller created [ 144.131009][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.479264][ T6651] capability: warning: `syz.0.266' uses 32-bit capabilities (legacy support in use) [ 144.499682][ T5810] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 145.323633][ T23] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 145.384655][ T23] usb 3-1: USB disconnect, device number 10 [ 145.481635][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.497538][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.509326][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.526890][ T5810] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.536388][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.550695][ T5810] usb 2-1: config 0 descriptor?? [ 145.697247][ T23] usb 4-1: USB disconnect, device number 7 [ 145.982439][ T5810] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 146.025538][ T5810] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 146.039084][ T6661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.453592][ T6666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.883270][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.892572][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.904434][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.915245][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.943274][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.953282][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.963039][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.970598][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.978107][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.985820][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 146.993460][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.068059][ T6679] syz.2.274: attempt to access beyond end of device [ 147.068059][ T6679] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 147.088829][ T6679] EXT4-fs (loop2): unable to read superblock [ 147.242352][ T28] audit: type=1800 audit(1786686344.772:8): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.274" name="file0" dev="overlay" ino=322 res=0 errno=0 [ 147.654534][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 147.681514][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.689055][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.730178][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.737718][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.779490][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.814267][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.831132][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.839918][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.847885][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.856472][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.864787][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.872675][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.880684][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.888330][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.896761][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.904762][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.921459][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.937155][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 147.972543][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.013863][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.043609][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.066999][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.077506][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.124085][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.269371][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.375602][ T790] hid-generic 0005:0010:10000.0006: unknown main item tag 0x0 [ 148.515121][ T23] usb 2-1: USB disconnect, device number 7 [ 148.586872][ T790] hid-generic 0005:0010:10000.0006: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 148.832885][ T6693] fido_id[6693]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 148.996400][ T6699] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.083162][ T23] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 149.148483][ T23] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.006338][ T6717] netlink: 76 bytes leftover after parsing attributes in process `syz.1.286'. [ 151.891532][ T5776] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 151.900746][ T5776] Bluetooth: hci1: Injecting HCI hardware error event [ 151.908789][ T5090] Bluetooth: hci1: hardware error 0x00 [ 152.934886][ T6719] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 153.507329][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 153.606154][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 153.631154][ T6737] ipvlan2: entered allmulticast mode [ 153.636828][ T6737] syz_tun: entered allmulticast mode [ 154.969701][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.009735][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 155.167254][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.189725][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 155.209977][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 155.236287][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 155.252107][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.261924][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.270320][ T8] usb 1-1: Product: syz [ 155.274599][ T8] usb 1-1: Manufacturer: syz [ 155.279273][ T8] usb 1-1: SerialNumber: syz [ 155.289704][ T790] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 155.291273][ T8] usb 1-1: config 0 descriptor?? [ 155.315911][ T8] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 155.333286][ T8] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 155.360761][ T8] garmin_gps: probe of ttyUSB0 failed with error -8 [ 155.506820][ T790] usb 2-1: Using ep0 maxpacket: 32 [ 155.514548][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.532261][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.553294][ T790] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.569227][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.571194][ T8] usb 1-1: USB disconnect, device number 11 [ 155.596319][ T790] usb 2-1: config 0 descriptor?? [ 155.606581][ T8] garmin_gps 1-1:0.0: device disconnected [ 155.614915][ T790] hub 2-1:0.0: USB hub found [ 155.819356][ T790] hub 2-1:0.0: 1 port detected [ 156.424749][ T790] hub 2-1:0.0: activate --> -90 [ 156.449646][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.632999][ T5810] usb 2-1: USB disconnect, device number 8 [ 156.639657][ T789] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.645023][ T790] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 156.658806][ T8] usb 1-1: config 2 has an invalid interface number: 107 but max is 0 [ 156.667356][ T8] usb 1-1: config 2 has no interface number 0 [ 156.692683][ T8] usb 1-1: config 2 interface 107 has no altsetting 0 [ 156.715495][ T8] usb 1-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=78.87 [ 156.736260][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.745248][ T8] usb 1-1: Product: syz [ 156.752100][ T8] usb 1-1: Manufacturer: syz [ 156.760888][ T8] usb 1-1: SerialNumber: syz [ 156.829684][ T789] usb 3-1: Using ep0 maxpacket: 16 [ 156.837333][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.848791][ T789] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.868517][ T789] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.881728][ T789] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.891018][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.902458][ T789] usb 3-1: config 0 descriptor?? [ 157.003386][ T8] usb 1-1: USB disconnect, device number 12 [ 157.263853][ T5090] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 157.327489][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.339188][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.346549][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.358455][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.366040][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.379871][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.387553][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.399232][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.408491][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.419585][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.426838][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.441367][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.448616][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.459204][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.469086][ T789] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 157.523274][ T789] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input11 [ 158.141438][ T789] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 158.165584][ T789] usb 3-1: USB disconnect, device number 11 [ 158.340285][ T6784] fido_id[6784]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 159.989179][ T6804] syz.3.317 (6804): drop_caches: 2 [ 160.102621][ T6809] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.481837][ T5830] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 161.689792][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 161.706338][ T5830] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.999760][ T5830] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 163.028776][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.059696][ T5830] usb 3-1: Product: syz [ 163.063915][ T5830] usb 3-1: Manufacturer: syz [ 163.068525][ T5830] usb 3-1: SerialNumber: syz [ 163.107006][ T5830] usb 3-1: config 0 descriptor?? [ 163.129768][ T5830] usb 3-1: bad CDC descriptors [ 163.135073][ T5830] usb 3-1: unsupported MDLM descriptors [ 163.337183][ T23] usb 3-1: USB disconnect, device number 12 [ 163.569328][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 163.609128][ T6849] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 163.694215][ T5090] Bluetooth: Wrong link type (-71) [ 165.650557][ T6872] 0x000000000000-0x000000020000 : "" [ 165.677357][ T6872] ftl_cs: FTL header not found. [ 165.688486][ T6869] dummy_hcd dummy_hcd.0: remove, state 4 [ 165.728939][ T6869] usb usb1: USB disconnect, device number 1 [ 165.800949][ T6869] dummy_hcd dummy_hcd.0: stopped [ 165.825820][ T6869] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 168.719868][ T5830] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.919645][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 168.930358][ T5830] usb 4-1: config index 0 descriptor too short (expected 7940, got 80) [ 168.955010][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.978641][ T5830] usb 4-1: config 0 has no interfaces? [ 168.990497][ T5830] usb 4-1: config index 1 descriptor too short (expected 7940, got 80) [ 169.010609][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.023148][ T5830] usb 4-1: config 0 has no interfaces? [ 169.036029][ T5830] usb 4-1: config index 2 descriptor too short (expected 7940, got 80) [ 169.044653][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.054854][ T5830] usb 4-1: config 0 has no interfaces? [ 169.062443][ T5830] usb 4-1: config index 3 descriptor too short (expected 7940, got 80) [ 169.071312][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.081975][ T5830] usb 4-1: config 0 has no interfaces? [ 169.093004][ T5830] usb 4-1: config index 4 descriptor too short (expected 7940, got 80) [ 169.101426][ T5830] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.111655][ T5830] usb 4-1: config 0 has no interfaces? [ 169.126648][ T5830] usb 4-1: New USB device found, idVendor=046d, idProduct=4ebf, bcdDevice=5f.2a [ 169.135922][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.144060][ T5830] usb 4-1: Product: syz [ 169.148463][ T5830] usb 4-1: Manufacturer: syz [ 169.153151][ T5830] usb 4-1: SerialNumber: syz [ 169.181748][ T5830] usb 4-1: config 0 descriptor?? [ 169.379214][ T6921] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 169.390976][ T6921] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 169.399395][ T6921] CPU: 0 PID: 6921 Comm: syz.0.355 Not tainted syzkaller #0 [ 169.406678][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.416741][ T6921] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 169.422197][ T6921] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 169.441812][ T6921] RSP: 0018:ffffc9000b8e7850 EFLAGS: 00010246 [ 169.447878][ T6921] RAX: 0000000000000000 RBX: ffff888026168050 RCX: 0000000000080000 [ 169.455858][ T6921] RDX: ffffc9000d54a000 RSI: 000000000000405d RDI: 000000000000405e [ 169.463831][ T6921] RBP: ffff888143f89000 R08: ffff888029a5bc00 R09: 0000000000000004 [ 169.471802][ T6921] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 169.479778][ T6921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 169.488196][ T6921] FS: 00007f44d4cd96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 169.497120][ T6921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.503699][ T6921] CR2: 00007f44d3d87240 CR3: 0000000025110000 CR4: 00000000003506f0 [ 169.511664][ T6921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 169.519633][ T6921] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 169.522818][ T6886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.527590][ T6921] Call Trace: [ 169.527599][ T6921] [ 169.527606][ T6921] ? dummy_pullup+0x120/0x120 [ 169.527636][ T6921] gadget_bind_driver+0x390/0x770 [ 169.553273][ T6921] ? gadget_match_driver+0x130/0x130 [ 169.558591][ T6921] really_probe+0x247/0xae0 [ 169.563158][ T6921] ? pm_runtime_barrier+0x14b/0x1c0 [ 169.568400][ T6921] __driver_probe_device+0x1f5/0x390 [ 169.573720][ T6921] driver_probe_device+0x4f/0x420 [ 169.578768][ T6921] __driver_attach+0x444/0x6d0 [ 169.583559][ T6921] bus_for_each_dev+0x235/0x2b0 [ 169.588439][ T6921] ? driver_attach+0x50/0x50 [ 169.593055][ T6921] ? bus_remove_file+0x140/0x140 [ 169.598015][ T6921] ? do_raw_spin_unlock+0x121/0x230 [ 169.603241][ T6921] bus_add_driver+0x340/0x630 [ 169.607947][ T6921] driver_register+0x23a/0x310 [ 169.612731][ T6921] usb_gadget_register_driver_owner+0xf9/0x270 [ 169.614923][ T5090] Bluetooth: hci0: unexpected cc 0x204b length: 34 > 3 [ 169.618900][ T6921] raw_ioctl+0x1613/0x3d80 [ 169.618933][ T6921] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 169.625912][ T5090] Bluetooth: hci0: unexpected event for opcode 0x204b [ 169.630171][ T6921] ? tomoyo_path_number_perm+0x217/0x5e0 [ 169.630197][ T6921] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 169.630216][ T6921] ? make_qualifier+0x260/0x260 [ 169.630245][ T6921] ? __fget_files+0x28/0x460 [ 169.630269][ T6921] ? bpf_lsm_file_ioctl+0x9/0x10 [ 169.630293][ T6921] ? security_file_ioctl+0x80/0xa0 [ 169.630315][ T6921] ? make_qualifier+0x260/0x260 [ 169.630332][ T6921] __se_sys_ioctl+0xfd/0x170 [ 169.630353][ T6921] do_syscall_64+0x55/0xb0 [ 169.630371][ T6921] ? clear_bhb_loop+0x40/0x90 [ 169.630390][ T6921] ? clear_bhb_loop+0x40/0x90 [ 169.630409][ T6921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.630426][ T6921] RIP: 0033:0x7f44d3d9dd6b [ 169.630452][ T6921] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 169.630464][ T6921] RSP: 002b:00007f44d4cd6f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.630481][ T6921] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f44d3d9dd6b [ 169.743030][ T6921] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 169.751016][ T6921] RBP: 00007f44d4cd7fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 169.759007][ T6921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.766990][ T6921] R13: 00002000000001c0 R14: 0000000000000003 R15: 0000000000000000 [ 169.774983][ T6921] [ 169.778029][ T6921] Modules linked in: [ 169.799074][ T6921] ---[ end trace 0000000000000000 ]--- [ 169.808777][ T6921] RIP: 0010:dummy_udc_start+0xcd/0x1e0 [ 169.814695][ T6921] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 8e 00 00 00 e8 78 4d cb fa eb 0c e8 71 4d cb fa eb 05 e8 6a 4d cb fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 84 d0 23 fb 4d 8b 36 4c 89 f7 e8 [ 169.857415][ T6921] RSP: 0018:ffffc9000b8e7850 EFLAGS: 00010246 [ 169.871707][ T6921] RAX: 0000000000000000 RBX: ffff888026168050 RCX: 0000000000080000 [ 169.885013][ T6921] RDX: ffffc9000d54a000 RSI: 000000000000405d RDI: 000000000000405e [ 169.894948][ T6921] RBP: ffff888143f89000 R08: ffff888029a5bc00 R09: 0000000000000004 [ 169.905287][ T6921] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000 [ 169.913765][ T6921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 169.916681][ T5830] usb 4-1: USB disconnect, device number 8 [ 169.930499][ T6921] FS: 00007f44d4cd96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 169.939953][ T6921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.946645][ T6921] CR2: 0000000000000010 CR3: 0000000025110000 CR4: 00000000003506e0 [ 169.955014][ T6921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009951 [ 169.963552][ T6921] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 169.972810][ T6921] Kernel panic - not syncing: Fatal exception [ 169.979193][ T6921] Kernel Offset: disabled [ 169.983590][ T6921] Rebooting in 86400 seconds..