last executing test programs: 54.861930393s ago: executing program 4 (id=5536): fanotify_mark(0xffffffffffffffff, 0x90, 0x8102000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x3) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x801) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 54.829881848s ago: executing program 4 (id=5538): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb6", 0xd3, 0x800, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r2, 0x8002}], 0x1, 0x0, 0x0, 0x0) r5 = dup2(r1, r2) fcntl$setown(r5, 0x8, r0) tkill(r0, 0x13) 54.713824139s ago: executing program 4 (id=5543): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x154, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x128, 0x2, [@TCA_BPF_ACT={0x124, 0x1, [@m_mpls={0xb8, 0x1f, 0x0, 0x0, {{0x9}, {0x4}, {0x89, 0x6, "eb877e9e8495a1a375598e9a962b37d7fb37fd7beedff7c43aabb2d9f821f15bffdd02aa75ac45706a461e3f2e6202a1e3e158f54d51dca102119e4ffe03c94e1c632c950939b990aac5ec4905ddae3ae7be3e3eff2673dcff3ff7f5cc0a424270ce1e9e77bbd63995aa924a5adafeb228c5227fa5e962452f8bcb7b8370e137610ff84b4d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x68, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x3d, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb85"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 54.561662384s ago: executing program 4 (id=5547): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff000000070581024000000705020240000007058303400001"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) 54.506189923s ago: executing program 4 (id=5548): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) 54.422349368s ago: executing program 4 (id=5549): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4126}], 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.585098039s ago: executing program 2 (id=5933): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 9.396150282s ago: executing program 2 (id=5935): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) 8.410692693s ago: executing program 2 (id=5943): socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x40, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mkdir(0x0, 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, r2, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 6.16649864s ago: executing program 2 (id=5947): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@setneightbl={0x4c, 0x43, 0x400, 0x70bd26, 0x25dfdbfc, {0xa}, [@NDTA_THRESH3={0x8, 0x4, 0x7}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xaae9}, @NDTA_THRESH3={0x8, 0x4, 0x1ff}, @NDTA_THRESH2={0x8, 0x3, 0xfffffff8}, @NDTA_NAME={0xc, 0x1, 'ip6tnl0\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x81}]}, 0x4c}, 0x1, 0x20000, 0x0, 0x2400c0d5}, 0x9080) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x5}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x8864000000000000) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) close(r2) 5.125069677s ago: executing program 2 (id=5955): mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 5.105682876s ago: executing program 1 (id=5956): socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_setup(0x40, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) mkdir(0x0, 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(0xffffffffffffffff, &(0x7f0000001700)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1, 0x3, 0x4, {0x1, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, r2, 0x2, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 4.953774273s ago: executing program 3 (id=5958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, 0x0, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 3.39973743s ago: executing program 1 (id=5960): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3.32446523s ago: executing program 2 (id=5962): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000080)="0100000000000000000000000a0000000a0000000a000000030000002000000020000000010000000100"/53) ioctl(r0, 0x40204706, &(0x7f00000000c0)="01000000000000000100"/30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000101)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000102)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000103)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000105)=0xf9) 3.193479088s ago: executing program 1 (id=5963): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000001600)={0x18, 0x0, 0x0, 0x0, 0x0, 0xd}) 3.139111856s ago: executing program 1 (id=5965): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8860) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0xb00}], 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r8 = dup2(r5, r0) getsockopt$sock_buf(r8, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x4c}, 0x2, 0x34005}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) 2.008028898s ago: executing program 3 (id=5966): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./myconfig\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/functions/acm.0\x00', 0x200) 1.8919578s ago: executing program 1 (id=5968): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)=""/7}, 0x20) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) 1.785358369s ago: executing program 3 (id=5970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'geneve1\x00'}) r1 = socket(0x11, 0x3, 0x0) sendto$packet(r1, &(0x7f0000000180)="1412a2c8587b8664dddfd23ccdb4", 0xe, 0x0, 0x0, 0x0) 1.534253952s ago: executing program 1 (id=5972): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 1.397483132s ago: executing program 3 (id=5973): mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000001f00)='u', 0x1) 1.186476221s ago: executing program 3 (id=5978): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.063649654s ago: executing program 3 (id=5980): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\n', 0x2) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 305.500363ms ago: executing program 0 (id=5984): socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 283.001832ms ago: executing program 0 (id=5985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 224.721854ms ago: executing program 0 (id=5986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) close(r0) 117.469267ms ago: executing program 0 (id=5987): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 98.775291ms ago: executing program 0 (id=5988): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@setneightbl={0x4c, 0x43, 0x400, 0x70bd26, 0x25dfdbfc, {0xa}, [@NDTA_THRESH3={0x8, 0x4, 0x7}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xaae9}, @NDTA_THRESH3={0x8, 0x4, 0x1ff}, @NDTA_THRESH2={0x8, 0x3, 0xfffffff8}, @NDTA_NAME={0xc, 0x1, 'ip6tnl0\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x81}]}, 0x4c}, 0x1, 0x20000, 0x0, 0x2400c0d5}, 0x9080) syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x6, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1, 0x0, 0x5}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x40040) splice(r3, 0x0, r4, 0x0, 0x4ffe6, 0x8864000000000000) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x3, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) close(r2) 0s ago: executing program 0 (id=5989): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.280781][ T5884] usb 3-1: Product: syz [ 984.280795][ T5884] usb 3-1: Manufacturer: syz [ 984.280809][ T5884] usb 3-1: SerialNumber: syz [ 984.449695][ T5736] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 984.453628][ T5884] usb 3-1: config 0 descriptor?? [ 984.980800][T10776] usb 3-1: USB disconnect, device number 60 [ 985.507868][T17040] syz.0.3835 (17040): drop_caches: 2 [ 985.584697][ T5884] usb 5-1: USB disconnect, device number 61 [ 985.606997][ T5884] usblp0: removed [ 985.726449][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3842'. [ 986.167564][T17088] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3855'. [ 986.167589][T17088] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3855'. [ 986.593665][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c07a800: rx timeout, send abort [ 986.666793][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3856'. [ 986.667604][T17093] bridge_slave_1: left allmulticast mode [ 986.667737][T17093] bridge_slave_1: left promiscuous mode [ 986.670585][T17093] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.890095][T17096] dyndbg: bad flag-op Ø, at start of ØÁñmÆUJ@Úä [ 986.890258][T17096] dyndbg: flags parse failed [ 987.095038][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805c07a800: abort rx timeout. Force session deactivation [ 991.157502][T17093] bridge_slave_0: left allmulticast mode [ 991.157528][T17093] bridge_slave_0: left promiscuous mode [ 991.157848][T17093] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.148602][ T198] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 992.440064][T17134] serio: Serial port ttyS3 [ 992.501332][ T198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 992.503793][ T198] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 992.507130][ T198] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 992.507160][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.507179][ T198] usb 3-1: Product: syz [ 992.507193][ T198] usb 3-1: Manufacturer: syz [ 992.507206][ T198] usb 3-1: SerialNumber: syz [ 992.795520][ T198] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 992.985403][ T198] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 992.985430][ T198] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 993.106273][ T37] audit: type=1800 audit(1785528309.300:8): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3873" name="local" dev="configfs" ino=55508 res=0 errno=0 [ 993.284153][ T37] audit: type=1800 audit(1785528309.490:9): pid=17144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3873" name="scan_secs" dev="configfs" ino=55280 res=0 errno=0 [ 993.421911][ T198] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 993.434156][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.470417][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.476525][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.496295][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.499116][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.568484][ T198] usb 3-1: USB disconnect, device number 61 [ 993.626385][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.645982][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.651423][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.666218][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.679119][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.932709][T17163] udevd[17163]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.321758][T17183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3878'. [ 995.381780][T17196] serio: Serial port ttyS3 [ 997.037507][ T5613] Bluetooth: hci0: command tx timeout [ 998.255715][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.255782][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.050252][ T5613] Bluetooth: hci0: command tx timeout [ 999.737534][T17223] Mass Storage Function, version: 2009/09/11 [ 999.746167][T17223] LUN: removable file: (no medium) [ 999.818741][ T37] audit: type=1800 audit(1785528316.010:10): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3891" name="file" dev="configfs" ino=56418 res=0 errno=0 [ 999.824908][ T37] audit: type=1800 audit(1785528316.030:11): pid=17224 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3891" name="UDC" dev="configfs" ino=56419 res=0 errno=0 [ 999.847301][T17223] Need at least one configuration in g1. [ 999.851913][T17223] udc dummy_udc.0: failed to start g1: -22 [ 999.851942][T17223] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 999.890215][T17223] UDC core: g1: couldn't find an available UDC or it's busy [ 1000.184211][ T1499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.184247][ T1499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.731132][T17239] tipc: Started in network mode [ 1000.731170][T17239] tipc: Node identity e63e5f06a1b7, cluster identity 4711 [ 1000.778897][T17239] tipc: Enabled bearer , priority 0 [ 1000.804453][T17236] tipc: Resetting bearer [ 1000.885834][T17241] syzkaller0: entered promiscuous mode [ 1000.885865][T17241] syzkaller0: entered allmulticast mode [ 1001.128804][ T5613] Bluetooth: hci0: command tx timeout [ 1001.158116][T17254] tipc: Resetting bearer [ 1001.678082][ T5736] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1001.833099][ T5884] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1001.916660][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1002.049723][ T5736] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1002.075465][ T5736] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1002.075502][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.075562][ T5736] usb 4-1: Product: syz [ 1002.075621][ T5736] usb 4-1: Manufacturer: syz [ 1002.075672][ T5736] usb 4-1: SerialNumber: syz [ 1002.328985][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1002.335976][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1002.336005][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1002.369807][ T5884] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1002.369836][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.369856][ T5884] usb 1-1: Product: syz [ 1002.369869][ T5884] usb 1-1: Manufacturer: syz [ 1002.369883][ T5884] usb 1-1: SerialNumber: syz [ 1002.374336][T17254] tipc: Disabling bearer [ 1002.415595][ T5884] usb 1-1: config 0 descriptor?? [ 1002.504484][ T5736] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1002.660196][ T5884] usb 1-1: USB disconnect, device number 42 [ 1002.699977][ T5736] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1002.700004][ T5736] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1003.045675][T17276] capability: warning: `syz.4.3903' uses deprecated v2 capabilities in a way that may be insecure [ 1003.103107][ T5736] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1003.208425][ T5613] Bluetooth: hci0: command tx timeout [ 1003.864191][ T5736] usb 4-1: USB disconnect, device number 80 [ 1003.959691][T17269] udevd[17269]: setting mode of /dev/bus/usb/004/080 to 020664 failed: No such file or directory [ 1003.969942][ T1499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.980816][T17269] udevd[17269]: setting owner of /dev/bus/usb/004/080 to uid=0, gid=0 failed: No such file or directory [ 1003.998146][ T1499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.739135][T17293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1004.743690][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1005.963556][T17228] udevd[17228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1006.070236][ T198] tipc: Node number set to 1200185094 [ 1006.133564][T17298] netlink: 'syz.3.3910': attribute type 1 has an invalid length. [ 1008.819428][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1009.402775][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1009.417279][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1009.419935][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1009.419963][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.419982][ T10] usb 4-1: Product: syz [ 1009.419995][ T10] usb 4-1: Manufacturer: syz [ 1009.420009][ T10] usb 4-1: SerialNumber: syz [ 1009.647703][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1009.848972][ T10] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1009.848989][ T10] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1010.025811][ T1499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.025834][ T1499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.253879][ T10] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1010.326279][T17310] syzkaller1: entered promiscuous mode [ 1010.326305][T17310] syzkaller1: entered allmulticast mode [ 1011.174838][ T10] usb 4-1: USB disconnect, device number 81 [ 1011.305572][T17333] fuse: Invalid rootmode [ 1011.401992][T17228] udevd[17228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.563757][T17338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1011.632448][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3924'. [ 1012.948456][T17352] Need at least one configuration in g1. [ 1012.948596][T17352] udc dummy_udc.0: failed to start g1: -22 [ 1012.948619][T17352] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1013.125637][T17352] UDC core: g1: couldn't find an available UDC or it's busy [ 1013.389274][ T1499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1013.389331][ T1499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.908128][ T36] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1015.061208][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1015.062624][ T36] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1015.066228][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1015.066257][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.066276][ T36] usb 1-1: Product: syz [ 1015.066290][ T36] usb 1-1: Manufacturer: syz [ 1015.066304][ T36] usb 1-1: SerialNumber: syz [ 1015.324822][ T36] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1015.520323][ T36] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1015.520353][ T36] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1015.919479][ T36] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1016.183387][ T36] usb 1-1: USB disconnect, device number 43 [ 1016.224831][T17391] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1016.224862][T17391] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1016.225308][T17391] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1016.225328][T17391] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1016.272276][T17391] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1017.045563][T17228] udevd[17228]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.275871][ T36] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1020.187842][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1020.190213][ T36] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 1020.190238][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.190255][ T36] usb 4-1: config 0 has no interfaces? [ 1020.190283][ T36] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1020.190304][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.201350][ T36] usb 4-1: config 0 descriptor?? [ 1020.311296][T17430] netlink: 'syz.2.3949': attribute type 4 has an invalid length. [ 1021.910883][ T37] audit: type=1800 audit(1785528338.120:12): pid=17442 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3953" name="file" dev="configfs" ino=56921 res=0 errno=0 [ 1024.236367][T17434] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1025.538613][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.978511][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.185765][ T1499] bond0 (unregistering): Released all slaves [ 1026.286825][ T1499] bond1 (unregistering): Released all slaves [ 1026.402450][ T1499] bond2 (unregistering): Released all slaves [ 1026.442832][ T1499] bond3 (unregistering): Released all slaves [ 1026.470674][ T1499] bond4 (unregistering): Released all slaves [ 1026.704958][ T5846] usb 4-1: USB disconnect, device number 82 [ 1029.486439][T17147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.486559][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.727193][T17147] bridge_slave_0: entered allmulticast mode [ 1029.916018][T17147] bridge_slave_0: entered promiscuous mode [ 1030.483472][T17147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.483592][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.483830][T17147] bridge_slave_1: entered allmulticast mode [ 1030.490079][T17147] bridge_slave_1: entered promiscuous mode [ 1030.798775][T17147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.832031][T17147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.998579][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1031.960676][T17147] team0: Port device team_slave_0 added [ 1032.513888][T17147] team0: Port device team_slave_1 added [ 1032.670944][T17593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1034.118923][T17147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.118940][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.119248][T17147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.122890][T17147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.122905][T17147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.122931][T17147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.311904][T17147] hsr_slave_0: entered promiscuous mode [ 1034.321623][T17147] hsr_slave_1: entered promiscuous mode [ 1034.322506][T17147] debugfs: 'hsr0' already exists in 'hsr' [ 1034.322529][T17147] Cannot create hsr debugfs directory [ 1034.717974][ T36] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1034.867866][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 1034.870031][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1034.870082][ T36] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1034.870105][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.918716][ T36] usb 3-1: config 0 descriptor?? [ 1035.195221][ T36] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1035.380422][T10776] usb 3-1: USB disconnect, device number 62 [ 1035.717404][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1036.377598][T17650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1036.758859][T17655] batman_adv: batadv0: Adding interface: dummy0 [ 1036.758875][T17655] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.758906][T17655] batman_adv: batadv0: Interface activated: dummy0 [ 1038.008318][T17655] batadv0: mtu less than device minimum [ 1038.173407][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.192388][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.211098][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.229437][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.236088][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.265781][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.298589][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.305986][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.336763][T17655] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1038.991447][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1039.186101][T17707] binder_alloc: 17705: pid 17705 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1039.483799][T17711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.232093][ T5729] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1041.380558][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1041.381946][ T5729] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1041.384145][ T5729] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1041.384172][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.384191][ T5729] usb 3-1: Product: syz [ 1041.384206][ T5729] usb 3-1: Manufacturer: syz [ 1041.384220][ T5729] usb 3-1: SerialNumber: syz [ 1042.280273][ T37] audit: type=1800 audit(1785528358.490:13): pid=17686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4005" name="file1" dev="ramfs" ino=56303 res=0 errno=0 [ 1042.499005][ T5729] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1042.694419][ T5729] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1042.694447][ T5729] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1043.152046][ T5729] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1044.156379][ T5729] usb 3-1: USB disconnect, device number 63 [ 1044.300612][T17754] input: syz1 as /devices/virtual/input/input17 [ 1044.514299][T17511] udevd[17511]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.964158][T17806] sock: sock_timestamping_bind_phc: sock not bind to device [ 1049.713421][ T5729] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1051.742900][T17853] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1051.742928][T17853] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1051.842568][T17853] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1051.842757][T17853] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1052.635137][ T1499] hsr_slave_0: left promiscuous mode [ 1052.756464][ T1499] hsr_slave_1: left promiscuous mode [ 1052.765393][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.765420][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.767799][ T198] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1052.799968][ T1499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.799996][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.901326][ T1499] veth1_macvtap: left promiscuous mode [ 1052.901431][ T1499] veth0_macvtap: left promiscuous mode [ 1052.901673][ T1499] veth1_vlan: left promiscuous mode [ 1052.901960][ T1499] veth0_vlan: left promiscuous mode [ 1052.933155][ T198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.933208][ T198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.933230][ T198] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1052.933252][ T198] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1052.933288][ T198] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1052.933300][ T198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.977785][T10776] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1053.014500][ T198] opticon 4-1:1.0: opticon converter detected [ 1053.133624][ T198] usb 4-1: opticon converter now attached to ttyUSB0 [ 1053.134922][T10776] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1053.136133][T10776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.136154][T10776] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1053.136193][T10776] usb 1-1: config 1 interface 1 has no altsetting 0 [ 1053.181306][T10776] usb 1-1: string descriptor 0 read error: -22 [ 1053.181439][T10776] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1053.181462][T10776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.285404][T10776] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1053.287190][ T5736] usb 4-1: USB disconnect, device number 83 [ 1053.380843][ T5736] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1053.383272][ T5736] opticon 4-1:1.0: device disconnected [ 1053.416070][T17511] udevd[17511]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.566167][T17160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1053.616169][T17160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1053.617786][T17160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1053.634504][T17160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1053.637272][T17160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.541877][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1054.585339][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1055.871133][T17160] Bluetooth: hci1: command tx timeout [ 1056.354456][ T5847] usb 1-1: USB disconnect, device number 44 [ 1057.037889][T17934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4072'. [ 1057.223729][T17934] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1057.934504][T17160] Bluetooth: hci1: command tx timeout [ 1059.690761][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.690820][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.007848][T17160] Bluetooth: hci1: command tx timeout [ 1062.057829][ T198] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1062.087827][T17160] Bluetooth: hci1: command tx timeout [ 1062.236783][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.236817][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.236853][ T198] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1062.236873][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.733212][ T198] usb 1-1: config 0 descriptor?? [ 1063.099661][T18029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4098'. [ 1063.310931][ T198] hid_parser_main: 30 callbacks suppressed [ 1063.310957][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.310988][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.311014][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.311040][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.311065][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.311090][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.311116][ T198] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 1063.419790][ T198] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1063.420143][ T198] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints? [ 1063.450466][ C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -32 [ 1063.532124][ T3430] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.532529][T17876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.532763][T17876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.533170][T17876] bridge_slave_0: entered allmulticast mode [ 1063.536060][T17876] bridge_slave_0: entered promiscuous mode [ 1063.539727][T17876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.539917][T17876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.540083][T17876] bridge_slave_1: entered allmulticast mode [ 1063.542739][T17876] bridge_slave_1: entered promiscuous mode [ 1063.607530][T17876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.634582][T17876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.771238][T17876] team0: Port device team_slave_0 added [ 1064.814285][T17876] team0: Port device team_slave_1 added [ 1065.687373][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 1068.672020][T17876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.691662][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.691694][T17876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.709521][T17876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.709538][T17876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.709565][T17876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.854050][ T198] usb 1-1: USB disconnect, device number 45 [ 1069.085519][T18084] serio: Serial port ttyS3 [ 1069.625080][T17876] hsr_slave_0: entered promiscuous mode [ 1069.626419][T17876] hsr_slave_1: entered promiscuous mode [ 1069.645276][T17876] debugfs: 'hsr0' already exists in 'hsr' [ 1069.645302][T17876] Cannot create hsr debugfs directory [ 1069.787794][T10776] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1070.031632][T10776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.031666][T10776] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.031704][T10776] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1070.031727][T10776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.143025][T10776] usb 1-1: config 0 descriptor?? [ 1070.707216][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707255][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707283][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707308][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707332][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707370][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.707397][T10776] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 1070.745901][T10776] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1070.746174][T10776] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 1070.910125][ C1] hid-thrustmaster 0003:044F:B65D.000D: URB to get model id failed with error -32 [ 1071.161782][T18143] overlayfs: failed to resolve './file0': -2 [ 1073.171557][ T198] usb 1-1: USB disconnect, device number 46 [ 1073.436348][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4144'. [ 1073.553267][T18165] macvlan0: entered allmulticast mode [ 1073.553394][T18165] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 1074.592423][T18172] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1074.592449][T18172] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1074.592569][T18172] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1074.592586][T18172] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1075.981703][T18197] netlink: 'syz.0.4152': attribute type 10 has an invalid length. [ 1075.981835][T18197] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1076.619273][T18197] dummy0: entered promiscuous mode [ 1077.648342][T18239] overlayfs: failed to resolve './file1': -2 [ 1078.531160][ T1499] bridge_slave_1: left allmulticast mode [ 1078.531184][ T1499] bridge_slave_1: left promiscuous mode [ 1078.531881][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.545175][ T1499] bridge_slave_0: left allmulticast mode [ 1079.545209][ T1499] bridge_slave_0: left promiscuous mode [ 1079.545424][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.460852][T18262] sock: sock_timestamping_bind_phc: sock not bind to device [ 1083.589270][ T1499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.820240][ T1499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1084.305030][T18304] overlayfs: failed to resolve './file1': -2 [ 1085.240901][ T1499] bond0 (unregistering): Released all slaves [ 1085.450546][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1086.238220][ T1499] hsr_slave_0: left promiscuous mode [ 1086.361714][ T1499] hsr_slave_1: left promiscuous mode [ 1086.382064][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.703975][ T1499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.528113][T18340] input: syz1 as /devices/virtual/input/input20 [ 1088.675364][T18345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1088.700710][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4194'. [ 1089.646713][T18340] input: failed to attach handler evdev to device input20, error: -4 [ 1090.138509][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1090.681677][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1092.741411][T18345] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1094.935671][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1094.949113][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4213'. [ 1096.614811][T18420] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1096.614827][T18420] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1096.614905][T18420] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1096.614916][T18420] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1096.967193][T18426] sock: sock_timestamping_bind_phc: sock not bind to device [ 1098.196884][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4226'. [ 1098.215724][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'. [ 1098.597826][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1098.762904][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1098.765056][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.765095][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1098.765113][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1098.765124][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1098.765136][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.824852][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1098.824883][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1098.824902][ T10] usb 4-1: Manufacturer: syz [ 1098.841815][ T10] usb 4-1: config 0 descriptor?? [ 1098.973094][T18455] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1098.973111][T18455] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1098.973200][T18455] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1098.973210][T18455] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1099.247842][ T10] rc_core: IR keymap rc-hauppauge not found [ 1099.247864][ T10] Registered IR keymap rc-empty [ 1099.248806][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1099.268623][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1099.361533][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1099.597113][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 1100.122708][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.148988][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.178018][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.197967][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.234640][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.277569][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.287953][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.327920][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.357983][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.395573][ T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1100.444022][ T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1100.444049][ T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1100.481439][ T10] usb 4-1: USB disconnect, device number 84 [ 1102.891462][T17876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1102.951942][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1102.953775][T17876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1103.005882][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1103.007497][T17876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1103.260642][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1103.263452][T17876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1103.290683][T18534] overlayfs: failed to resolve './file1': -2 [ 1103.348030][T17876] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1104.061057][T17876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.166239][T17876] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.188544][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.188761][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.206386][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.206556][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.955946][T18579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1104.993378][T18579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1106.382149][T18583] overlayfs: failed to resolve './file1': -2 [ 1107.761757][T18606] fuse: Bad value for 'fd' [ 1109.530004][T17876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.627813][ T5885] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1109.676039][T17876] veth0_vlan: entered promiscuous mode [ 1109.703987][T17876] veth1_vlan: entered promiscuous mode [ 1109.758776][T17876] veth0_macvtap: entered promiscuous mode [ 1109.765513][T17876] veth1_macvtap: entered promiscuous mode [ 1109.792117][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 1109.804409][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.804459][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.807367][ T5885] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1109.807396][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.807413][ T5885] usb 5-1: Product: syz [ 1109.807426][ T5885] usb 5-1: Manufacturer: syz [ 1109.807438][ T5885] usb 5-1: SerialNumber: syz [ 1109.831066][ T5885] usb 5-1: config 0 descriptor?? [ 1109.916264][T17876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.944254][T17876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.159265][T17493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.510815][T18644] fuse: Bad value for 'fd' [ 1110.620800][T11995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.620821][T11995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.750949][T17457] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.753135][T17457] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.753758][T17457] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.893409][T17461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.893429][T17461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.684944][ T198] usb 5-1: USB disconnect, device number 63 [ 1112.957841][T18667] fuse: Bad value for 'fd' [ 1113.123539][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1113.190376][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1113.212441][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1113.291747][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1113.293078][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1115.258970][T18704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4312'. [ 1115.448331][ T5613] Bluetooth: hci0: command tx timeout [ 1116.814067][T18717] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4314'. [ 1117.112985][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.113022][ T3430] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.527978][ T5613] Bluetooth: hci0: command tx timeout [ 1118.459880][T18752] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1119.636925][ T5613] Bluetooth: hci0: command tx timeout [ 1119.753542][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.753578][ T3430] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.166219][T18778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1121.225034][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.225105][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.249077][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.249105][ T3430] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.687902][ T5613] Bluetooth: hci0: command tx timeout [ 1121.999134][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1121.999169][ T3430] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.196609][T18837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1124.707018][T18666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.707316][T18666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.707562][T18666] bridge_slave_0: entered allmulticast mode [ 1124.726380][T18666] bridge_slave_0: entered promiscuous mode [ 1124.826108][T18666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.826239][T18666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.826474][T18666] bridge_slave_1: entered allmulticast mode [ 1124.840369][T18666] bridge_slave_1: entered promiscuous mode [ 1125.278928][T18666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.418979][T18666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1126.249470][T18666] team0: Port device team_slave_0 added [ 1126.253613][T18666] team0: Port device team_slave_1 added [ 1128.938675][ T5846] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1130.728374][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.728433][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.728454][ T5846] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1130.728476][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.728517][ T5846] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1130.728537][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.636467][ T5846] usb 3-1: can't set config #1, error -71 [ 1131.664013][ T5846] usb 3-1: USB disconnect, device number 64 [ 1133.697837][T10776] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1133.850666][T10776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.850721][T10776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.850743][T10776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1133.850762][T10776] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1133.850786][T10776] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1133.850797][T10776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.099630][T10776] opticon 2-1:1.0: opticon converter detected [ 1136.118094][T10776] usb 2-1: opticon converter now attached to ttyUSB0 [ 1136.148534][ T3430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.219964][ T3430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.266940][ T3430] bond0 (unregistering): Released all slaves [ 1136.292194][ T3430] bond1 (unregistering): Released all slaves [ 1136.306309][T10776] usb 2-1: USB disconnect, device number 76 [ 1136.381633][T10776] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1136.385470][T10776] opticon 2-1:1.0: device disconnected [ 1136.401662][ T3430] bond2 (unregistering): Released all slaves [ 1137.032614][ T3430] bond3 (unregistering): Released all slaves [ 1137.051374][ T3430] bond4 (unregistering): Released all slaves [ 1137.074963][ T3430] bond5 (unregistering): Released all slaves [ 1137.100429][ T3430] bond6 (unregistering): Released all slaves [ 1137.323432][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1138.223666][T18666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1138.223682][T18666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.223702][T18666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1138.318455][T18666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1138.318471][T18666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1138.318499][T18666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.635001][T18978] overlayfs: failed to resolve './file1': -2 [ 1139.532384][T18666] hsr_slave_0: entered promiscuous mode [ 1139.533760][T18666] hsr_slave_1: entered promiscuous mode [ 1139.719968][T18666] debugfs: 'hsr0' already exists in 'hsr' [ 1139.719996][T18666] Cannot create hsr debugfs directory [ 1139.784483][T18985] sock: sock_timestamping_bind_phc: sock not bind to device [ 1142.079571][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1142.244495][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.244550][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.244573][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1142.244596][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1142.244637][ T10] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1142.244667][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.324677][ T10] opticon 1-1:1.0: opticon converter detected [ 1142.377522][ T10] usb 1-1: opticon converter now attached to ttyUSB0 [ 1142.555371][ T10] usb 1-1: USB disconnect, device number 47 [ 1142.728955][ T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1142.732725][ T10] opticon 1-1:1.0: device disconnected [ 1143.874353][T19034] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1143.874369][T19034] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1143.874445][T19034] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1143.874455][T19034] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1144.754668][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1144.818043][ T5729] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1144.977816][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 1144.980026][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1144.984137][ T5729] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1144.984166][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.984184][ T5729] usb 1-1: Product: syz [ 1144.984199][ T5729] usb 1-1: Manufacturer: syz [ 1144.984213][ T5729] usb 1-1: SerialNumber: syz [ 1144.994367][ T5729] usb 1-1: config 0 descriptor?? [ 1145.577820][ T5847] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1145.730140][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.730173][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.730210][ T5847] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1145.730233][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.780490][ T5847] usb 2-1: config 0 descriptor?? [ 1146.335552][ T5847] usbhid 2-1:0.0: can't add hid device: -71 [ 1146.335636][ T5847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1146.352794][ T5847] usb 2-1: USB disconnect, device number 77 [ 1146.859551][T19081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1146.859580][T19081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1146.859730][T19081] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1146.859749][T19081] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1147.592394][ T198] usb 1-1: USB disconnect, device number 48 [ 1150.037779][T10776] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1150.207815][T10776] usb 3-1: Using ep0 maxpacket: 8 [ 1150.210520][T10776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1150.213073][T10776] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1150.213100][T10776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.213118][T10776] usb 3-1: Product: syz [ 1150.213129][T10776] usb 3-1: Manufacturer: syz [ 1150.213144][T10776] usb 3-1: SerialNumber: syz [ 1150.346790][T10776] usb 3-1: config 0 descriptor?? [ 1150.944812][T19167] sock: sock_timestamping_bind_phc: sock not bind to device [ 1152.786830][T10776] usb 3-1: USB disconnect, device number 65 [ 1153.027606][T19218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4443'. [ 1154.617794][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1154.788118][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1154.790140][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1154.790166][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1154.792159][ T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1154.792186][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.792204][ T10] usb 1-1: Product: syz [ 1154.792217][ T10] usb 1-1: Manufacturer: syz [ 1154.792230][ T10] usb 1-1: SerialNumber: syz [ 1154.803385][ T10] usb 1-1: config 0 descriptor?? [ 1155.103348][ T10] usb 1-1: USB disconnect, device number 49 [ 1155.132029][T18666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1156.004999][T18666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1156.588720][T18666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1156.633817][T18666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.711771][T18666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1156.818105][T18666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1156.821537][T18666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1156.882648][T18666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.597924][ T3430] hsr_slave_0: left promiscuous mode [ 1157.650706][ T3430] hsr_slave_1: left promiscuous mode [ 1157.651653][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1157.651678][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1157.733748][ T3430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1157.733780][ T3430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1157.752436][T10776] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1157.898069][T10776] usb 3-1: Using ep0 maxpacket: 8 [ 1158.151992][T10776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1158.152022][T10776] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1158.413694][T10776] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1158.413737][T10776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.413756][T10776] usb 3-1: Product: syz [ 1158.413770][T10776] usb 3-1: Manufacturer: syz [ 1158.413785][T10776] usb 3-1: SerialNumber: syz [ 1158.455307][T10776] usb 3-1: config 0 descriptor?? [ 1158.581884][ T3430] veth1_macvtap: left promiscuous mode [ 1158.582012][ T3430] veth0_macvtap: left promiscuous mode [ 1158.582309][ T3430] veth1_vlan: left promiscuous mode [ 1158.582482][ T3430] veth0_vlan: left promiscuous mode [ 1158.687562][T10776] usb 3-1: USB disconnect, device number 66 [ 1160.275925][ T3430] team0 (unregistering): Port device team_slave_1 removed [ 1160.349217][ T3430] team0 (unregistering): Port device team_slave_0 removed [ 1160.475456][T19364] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1160.475495][T19364] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1160.501135][T19364] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1160.501183][T19364] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1162.055363][T18666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.083435][T18666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.347830][ T5847] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1162.497845][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 1162.500168][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1162.500196][ T5847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1162.502442][ T5847] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1162.502471][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.502489][ T5847] usb 2-1: Product: syz [ 1162.502501][ T5847] usb 2-1: Manufacturer: syz [ 1162.502513][ T5847] usb 2-1: SerialNumber: syz [ 1162.627132][ T5847] usb 2-1: config 0 descriptor?? [ 1162.665262][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.778364][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.982307][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.982438][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.093050][ T5847] usb 2-1: USB disconnect, device number 78 [ 1165.194494][T18666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.307422][T18666] veth0_vlan: entered promiscuous mode [ 1165.332070][T18666] veth1_vlan: entered promiscuous mode [ 1165.428852][T18666] veth0_macvtap: entered promiscuous mode [ 1165.440237][T18666] veth1_macvtap: entered promiscuous mode [ 1165.504290][T18666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.544549][T18666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1165.708776][T17471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.849483][T10776] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1166.738926][T17471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1166.797807][T10776] usb 3-1: Using ep0 maxpacket: 8 [ 1166.801202][T10776] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1166.801231][T10776] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1166.903696][T10776] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1166.903725][T10776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.903744][T10776] usb 3-1: Product: syz [ 1166.903756][T10776] usb 3-1: Manufacturer: syz [ 1166.903768][T10776] usb 3-1: SerialNumber: syz [ 1166.997598][T10776] usb 3-1: config 0 descriptor?? [ 1167.337866][T10776] usb 3-1: USB disconnect, device number 67 [ 1167.486594][T17457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.580313][T17457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.702660][T17470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.702682][T17470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.949090][T17470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.949111][T17470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.459627][T19457] overlayfs: failed to resolve './file1': -2 [ 1171.602943][T19473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4525'. [ 1171.624056][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4525'. [ 1173.007770][ T5847] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1173.628852][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 1173.635225][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1173.635254][ T5847] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1173.672729][ T5847] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1173.672760][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.672780][ T5847] usb 4-1: Product: syz [ 1173.672794][ T5847] usb 4-1: Manufacturer: syz [ 1173.672808][ T5847] usb 4-1: SerialNumber: syz [ 1173.737866][ T5847] usb 4-1: config 0 descriptor?? [ 1174.010613][ T5847] usb 4-1: USB disconnect, device number 85 [ 1174.041977][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1175.371950][T19506] overlayfs: failed to resolve './file1': -2 [ 1177.607825][T19536] netlink: 'syz.4.4547': attribute type 10 has an invalid length. [ 1177.607848][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4547'. [ 1178.156053][ T198] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1178.507840][ T198] usb 1-1: Using ep0 maxpacket: 8 [ 1178.546080][ T198] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1178.546099][ T198] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1178.548857][ T198] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1178.548885][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.548904][ T198] usb 1-1: Product: syz [ 1178.548917][ T198] usb 1-1: Manufacturer: syz [ 1178.548928][ T198] usb 1-1: SerialNumber: syz [ 1178.613027][ T198] usb 1-1: config 0 descriptor?? [ 1178.870448][ T198] usb 1-1: USB disconnect, device number 50 [ 1178.906208][T19535] batman_adv: batadv0: Interface deactivated: dummy0 [ 1178.906869][T19535] batman_adv: batadv0: Removing interface: dummy0 [ 1178.976693][T19536] dummy0: entered promiscuous mode [ 1179.087756][ T5729] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1179.227812][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1179.313015][T19553] overlayfs: failed to resolve './file1': -2 [ 1180.288834][ T5613] Bluetooth: hci1: command 0x0406 tx timeout [ 1180.378329][ T5729] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1180.537902][ T5729] usb 2-1: device descriptor read/64, error -71 [ 1180.659571][ T5729] usb usb2-port1: attempt power cycle [ 1180.999345][ T5729] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1181.031776][T19570] sock: sock_timestamping_bind_phc: sock not bind to device [ 1181.159471][ T5729] usb 2-1: device descriptor read/8, error -71 [ 1181.677983][ T5729] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1181.708739][ T5729] usb 2-1: device descriptor read/8, error -71 [ 1181.753167][T19578] netlink: 'syz.3.4560': attribute type 10 has an invalid length. [ 1181.753188][T19578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1181.910436][ T5729] usb usb2-port1: unable to enumerate USB device [ 1182.571499][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.571575][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.471724][T19578] dummy0: entered promiscuous mode [ 1183.605306][T19596] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1183.605323][T19596] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1183.605396][T19596] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1183.605405][T19596] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1183.676908][T19598] overlayfs: failed to resolve './file1': -2 [ 1183.677963][ T5699] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1183.827806][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 1183.832369][ T5699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1183.832398][ T5699] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1183.837372][ T5699] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1183.839965][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.839989][ T5699] usb 3-1: Product: syz [ 1183.840002][ T5699] usb 3-1: Manufacturer: syz [ 1183.840015][ T5699] usb 3-1: SerialNumber: syz [ 1183.871810][ T5699] usb 3-1: config 0 descriptor?? [ 1185.687168][ T5729] usb 3-1: USB disconnect, device number 68 [ 1186.280377][ T5729] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1186.410212][ T5729] usb 4-1: device descriptor read/64, error -71 [ 1186.648186][ T5729] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1186.788016][ T5729] usb 4-1: device descriptor read/64, error -71 [ 1186.899509][ T5729] usb usb4-port1: attempt power cycle [ 1187.268359][ T5729] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1187.305122][ T5729] usb 4-1: device descriptor read/8, error -71 [ 1187.617818][ T5729] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1187.626493][T19622] netlink: 'syz.1.4576': attribute type 10 has an invalid length. [ 1187.626515][T19622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1187.654073][ T5729] usb 4-1: device descriptor read/8, error -71 [ 1187.758854][ T5729] usb usb4-port1: unable to enumerate USB device [ 1187.773781][T19625] overlayfs: failed to resolve './file1': -2 [ 1188.038299][T19622] dummy0: entered promiscuous mode [ 1192.027831][T10776] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1192.188318][T10776] usb 5-1: Using ep0 maxpacket: 8 [ 1192.194082][T10776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1192.194111][T10776] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1192.207079][T10776] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1192.207110][T10776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.207129][T10776] usb 5-1: Product: syz [ 1192.207143][T10776] usb 5-1: Manufacturer: syz [ 1192.207155][T10776] usb 5-1: SerialNumber: syz [ 1192.234959][T10776] usb 5-1: config 0 descriptor?? [ 1193.172134][ T5699] usb 5-1: USB disconnect, device number 64 [ 1193.434403][T19669] overlayfs: failed to resolve './file1': -2 [ 1195.480617][ T5699] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1196.220479][ T5699] usb 1-1: device descriptor read/64, error -71 [ 1196.457812][ T5699] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1196.588323][ T5699] usb 1-1: device descriptor read/64, error -71 [ 1196.699756][ T5699] usb usb1-port1: attempt power cycle [ 1197.037815][ T5699] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1197.058636][ T5699] usb 1-1: device descriptor read/8, error -71 [ 1197.209545][T19711] netlink: 'syz.3.4602': attribute type 10 has an invalid length. [ 1197.209566][T19711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4602'. [ 1197.297847][ T5699] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1197.318794][ T5699] usb 1-1: device descriptor read/8, error -71 [ 1197.429112][ T5699] usb usb1-port1: unable to enumerate USB device [ 1197.602714][T19709] dummy0: left promiscuous mode [ 1197.676616][T19716] sock: sock_timestamping_bind_phc: sock not bind to device [ 1197.690082][T19711] dummy0: entered promiscuous mode [ 1202.286728][T10776] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1202.355057][T19757] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1202.355217][T19757] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1202.379139][T19757] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1202.379382][T19757] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1202.703267][T10776] usb 4-1: device descriptor read/64, error -71 [ 1202.751672][T19758] netlink: 'syz.4.4616': attribute type 10 has an invalid length. [ 1202.751697][T19758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4616'. [ 1202.937939][T10776] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1202.966921][T19754] dummy0: left promiscuous mode [ 1202.967894][T19758] dummy0: entered promiscuous mode [ 1203.067976][T10776] usb 4-1: device descriptor read/64, error -71 [ 1203.637821][T10776] usb usb4-port1: attempt power cycle [ 1204.257797][T10776] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1204.278315][T10776] usb 4-1: device descriptor read/8, error -71 [ 1205.676285][T10776] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1208.090777][T10776] usb 4-1: device descriptor read/8, error -71 [ 1208.243825][T10776] usb usb4-port1: unable to enumerate USB device [ 1208.499839][T19801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1208.526351][T19801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1214.102231][T19844] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1214.102390][T19844] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1214.120868][T19844] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1214.120990][T19844] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1216.287932][ T5752] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1216.438445][ T5752] usb 3-1: device descriptor read/64, error -71 [ 1216.754166][ T5752] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1217.907844][ T5752] usb 3-1: device descriptor read/64, error -71 [ 1217.999987][ T36] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1218.028150][ T5752] usb usb3-port1: attempt power cycle [ 1218.152313][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.152340][ T36] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.152372][ T36] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1218.152385][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.160362][ T36] usb 2-1: config 0 descriptor?? [ 1219.417792][T19442] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1219.437829][ T5752] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1219.495334][ T5752] usb 3-1: device descriptor read/8, error -71 [ 1219.571160][T19442] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1219.573827][T19442] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1219.585072][T19442] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1219.585103][T19442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.585122][T19442] usb 1-1: Product: syz [ 1219.585136][T19442] usb 1-1: Manufacturer: syz [ 1219.585150][T19442] usb 1-1: SerialNumber: syz [ 1219.851961][T19442] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1220.039136][T19442] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1220.039163][T19442] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1220.240939][T19442] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1220.666097][ T5752] usb 2-1: USB disconnect, device number 83 [ 1221.760764][T19442] usb 1-1: USB disconnect, device number 55 [ 1221.785418][T19928] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.785444][T19928] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1221.785577][T19928] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1221.785601][T19928] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1222.438011][T19442] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1222.591372][T19442] usb 1-1: config 0 has no interfaces? [ 1222.591410][T19442] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1222.591433][T19442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.614803][T19442] usb 1-1: config 0 descriptor?? [ 1222.825684][ T36] usb 1-1: USB disconnect, device number 56 [ 1223.148400][T19442] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1223.811340][T19442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.811394][T19442] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1223.811436][T19442] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1223.811460][T19442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.826073][T19442] usb 4-1: config 0 descriptor?? [ 1223.857529][T19442] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1223.857841][ T5736] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1224.013866][ T5736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1224.016547][ T5736] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1224.047244][ T5736] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1224.047270][ T5736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.047280][ T5736] usb 5-1: Product: syz [ 1224.047288][ T5736] usb 5-1: Manufacturer: syz [ 1224.047295][ T5736] usb 5-1: SerialNumber: syz [ 1225.562240][ T5736] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1225.583232][ T5736] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1225.583248][ T5736] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1225.760338][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4684'. [ 1225.782846][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4684'. [ 1225.791135][ T5736] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1226.178646][ T5752] usb 4-1: USB disconnect, device number 94 [ 1226.731340][T19972] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1227.688582][ T5736] usb 5-1: USB disconnect, device number 65 [ 1227.833993][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.885495][T20001] netlink: 'syz.4.4693': attribute type 10 has an invalid length. [ 1227.885517][T20001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4693'. [ 1228.868789][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4702'. [ 1229.871539][ T5847] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1229.903724][T19998] dummy0: left promiscuous mode [ 1229.914313][T20001] dummy0: entered promiscuous mode [ 1230.084503][ T5847] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1230.087362][ T5847] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1230.110426][ T5847] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1230.110456][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.110476][ T5847] usb 3-1: Product: syz [ 1230.110489][ T5847] usb 3-1: Manufacturer: syz [ 1230.110501][ T5847] usb 3-1: SerialNumber: syz [ 1232.953300][ T5847] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1232.955370][ T5847] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1232.955395][ T5847] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1232.976295][ T5847] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1233.334290][ T5847] usb 3-1: USB disconnect, device number 73 [ 1233.465232][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.674426][T20080] netlink: 'syz.3.4726': attribute type 10 has an invalid length. [ 1233.674456][T20080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4726'. [ 1233.717825][ T5847] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1233.869399][T20075] dummy0: left promiscuous mode [ 1233.869617][ T5847] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.869662][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1233.869701][ T5847] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1233.869723][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.934755][ T5847] usb 3-1: config 0 descriptor?? [ 1233.957895][ T5752] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1234.014536][T20089] sock: sock_timestamping_bind_phc: sock not bind to device [ 1234.424699][ T5847] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1234.426414][T20080] dummy0: entered promiscuous mode [ 1234.670485][ T5752] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1234.671702][ T5752] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1234.674277][ T5752] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1234.674305][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.674323][ T5752] usb 5-1: Product: syz [ 1234.674336][ T5752] usb 5-1: Manufacturer: syz [ 1234.674349][ T5752] usb 5-1: SerialNumber: syz [ 1234.985102][ T5752] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1235.174419][ T5752] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1235.174447][ T5752] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 1235.379078][ T5752] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1235.582247][T20100] overlayfs: failed to resolve './file1': -2 [ 1235.847879][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 1236.343033][ T5885] usb 3-1: USB disconnect, device number 74 [ 1236.705176][ T5752] usb 5-1: USB disconnect, device number 66 [ 1236.932438][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.266563][T20140] netlink: 'syz.3.4746': attribute type 10 has an invalid length. [ 1237.266585][T20140] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4746'. [ 1238.009626][T20136] dummy0: left promiscuous mode [ 1238.090183][T20140] dummy0: entered promiscuous mode [ 1238.297890][ T5752] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1238.389983][T20179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1238.390698][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1238.451838][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.451871][ T5752] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1238.451894][ T5752] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1238.451906][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.469723][ T5752] usb 5-1: config 0 descriptor?? [ 1238.508135][ T5752] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1238.875762][T20196] overlayfs: failed to resolve './file1': -2 [ 1241.333640][ T198] usb 5-1: USB disconnect, device number 67 [ 1241.917785][ T198] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1241.950150][T20237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1241.951077][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1242.070175][ T198] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1242.071722][ T198] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1242.092774][ T198] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1242.092804][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.092823][ T198] usb 4-1: Product: syz [ 1242.092836][ T198] usb 4-1: Manufacturer: syz [ 1242.092850][ T198] usb 4-1: SerialNumber: syz [ 1242.377256][ T198] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1242.567372][ T198] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1242.567399][ T198] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1243.035559][ T198] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1243.035586][ T198] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 1243.243819][ T198] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1243.372191][ T198] usb 4-1: USB disconnect, device number 95 [ 1243.591960][T19917] udevd[19917]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.667823][T19442] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1243.822383][T19442] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1243.822431][T19442] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1243.822453][T19442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.851814][T19442] usb 2-1: config 0 descriptor?? [ 1243.872772][T19442] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1244.012274][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.012341][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.346400][T20308] sock: sock_timestamping_bind_phc: sock not bind to device [ 1245.547240][T20338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1245.662259][T20338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4834'. [ 1246.512073][ T5884] usb 2-1: USB disconnect, device number 84 [ 1246.780190][T20370] overlayfs: failed to resolve './file1': -2 [ 1250.547447][T20451] sock: sock_timestamping_bind_phc: sock not bind to device [ 1253.128156][ T5884] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1254.049220][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.049272][ T5884] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1254.049539][ T5884] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1254.049563][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.206127][ T5884] opticon 2-1:1.0: required endpoints missing [ 1254.412491][ T5884] usb 2-1: USB disconnect, device number 85 [ 1256.560130][T19442] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1256.775132][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1256.831002][T20582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1256.901795][T19442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.901842][T19442] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1256.901862][T19442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.919071][T19442] usb 3-1: config 0 descriptor?? [ 1257.148709][T19442] usbhid 3-1:0.0: can't add hid device: -71 [ 1257.148825][T19442] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1257.179921][T19442] usb 3-1: USB disconnect, device number 75 [ 1257.679002][T19442] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1257.840410][T19442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.840439][T19442] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1257.840451][T19442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.862419][T19442] usb 3-1: config 0 descriptor?? [ 1258.679527][T19442] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1258.742392][T19442] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 1259.615812][T19442] usb 3-1: USB disconnect, device number 76 [ 1259.615887][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1261.506023][T20717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1261.551971][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1263.543559][T20742] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1263.543765][T20742] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1263.550935][T20742] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1263.551066][T20742] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1266.227847][ T5752] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1266.380508][ T5752] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1266.382263][ T5752] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1266.388124][ T5752] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1266.388151][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.388184][ T5752] usb 2-1: Product: syz [ 1266.388197][ T5752] usb 2-1: Manufacturer: syz [ 1266.388211][ T5752] usb 2-1: SerialNumber: syz [ 1266.621369][T20869] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1266.621466][T20869] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1266.626538][T20869] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1266.626695][T20869] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1266.733758][ T5752] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1266.883728][ T5752] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1266.883756][ T5752] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 1267.298720][ T5752] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1267.525679][ T5752] usb 2-1: USB disconnect, device number 86 [ 1267.742796][T20780] udevd[20780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.730419][ T5752] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1270.381275][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1270.382639][ T5752] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1270.384981][ T5752] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1270.385009][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.385028][ T5752] usb 3-1: Product: syz [ 1270.385042][ T5752] usb 3-1: Manufacturer: syz [ 1270.385056][ T5752] usb 3-1: SerialNumber: syz [ 1270.636499][ T5752] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1270.639196][T20965] ubi0: attaching mtd0 [ 1270.672829][T20965] ubi0: scanning is finished [ 1270.818114][ T5752] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1270.818142][ T5752] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 1271.982627][ T5752] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 1272.269983][T20965] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1272.348011][ T5752] usb 3-1: USB disconnect, device number 77 [ 1272.817436][T20901] udevd[20901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1284.677261][T21286] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1284.677306][T21286] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1284.700526][T21286] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1284.700569][T21286] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1285.935059][T21317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5278'. [ 1288.027774][ T5752] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1288.184041][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.184089][ T5752] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1288.184112][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.204244][ T5752] usb 4-1: config 0 descriptor?? [ 1288.432018][ T5752] usbhid 4-1:0.0: can't add hid device: -71 [ 1288.432137][ T5752] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1288.442719][ T5752] usb 4-1: USB disconnect, device number 96 [ 1288.527035][ T37] audit: type=1800 audit(1785528604.730:14): pid=21409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5317" name="b_vendor_code" dev="configfs" ino=69601 res=0 errno=0 [ 1288.957925][ T5752] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1289.372813][ T5752] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.373764][ T5752] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1289.373929][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.828039][ T5752] usb 4-1: config 0 descriptor?? [ 1290.720121][ T5752] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1290.740349][ T5752] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 1290.895079][ T5752] usb 4-1: USB disconnect, device number 97 [ 1290.895163][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1292.665171][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1292.665193][T21545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1292.673390][T21545] netlink: 'syz.3.5374': attribute type 18 has an invalid length. [ 1294.133238][T21545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1294.133265][T21545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1294.189148][T21564] vhci_hcd: connection closed [ 1294.334282][T21545] vhci_hcd vhci_hcd.0: Device attached [ 1294.353680][ T3430] vhci_hcd vhci_hcd.3: stop threads [ 1294.362799][ T3430] vhci_hcd vhci_hcd.3: release socket [ 1294.363062][ T3430] vhci_hcd vhci_hcd.3: disconnect device [ 1296.206858][T21651] tipc: Started in network mode [ 1296.206877][T21651] tipc: Node identity 361c0432118c, cluster identity 4711 [ 1296.235014][T21651] tipc: Enabled bearer , priority 0 [ 1296.235868][T21651] syzkaller0: entered promiscuous mode [ 1296.235883][T21651] syzkaller0: entered allmulticast mode [ 1296.688014][T21656] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5418'. [ 1296.876191][T21661] tipc: Resetting bearer [ 1296.991104][T21650] tipc: Resetting bearer [ 1297.282882][T21650] tipc: Disabling bearer [ 1297.460830][ T36] tipc: Node number set to 663749682 [ 1298.977842][ T36] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1299.127770][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 1299.133797][ T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1299.133826][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.133845][ T36] usb 2-1: Product: syz [ 1299.133859][ T36] usb 2-1: Manufacturer: syz [ 1299.133872][ T36] usb 2-1: SerialNumber: syz [ 1299.176438][ T36] usb 2-1: config 0 descriptor?? [ 1299.383177][ T36] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1299.605019][ T36] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1299.629839][ T36] usb 2-1: USB disconnect, device number 87 [ 1300.307894][ T36] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1300.457779][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 1300.467107][ T36] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1300.467138][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.467158][ T36] usb 4-1: Product: syz [ 1300.467172][ T36] usb 4-1: Manufacturer: syz [ 1300.467187][ T36] usb 4-1: SerialNumber: syz [ 1300.627825][T10776] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1300.688108][ T37] audit: type=1800 audit(1785528616.900:15): pid=21791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.5485" name="idProduct" dev="configfs" ino=71277 res=0 errno=0 [ 1300.753870][ T36] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1300.811129][T10776] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1300.811159][T10776] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1300.811181][T10776] usb 3-1: Product: syz [ 1300.811195][T10776] usb 3-1: Manufacturer: syz [ 1300.811209][T10776] usb 3-1: SerialNumber: syz [ 1300.859213][T10776] usb 3-1: config 0 descriptor?? [ 1301.100699][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5478'. [ 1301.162934][T21777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5478'. [ 1301.180815][ T36] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1301.222840][ T36] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1301.239706][ T36] usb 4-1: media controller created [ 1301.442582][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1301.762542][ T36] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1301.832777][T10776] usb 3-1: USB disconnect, device number 78 [ 1303.132808][T21869] netlink: 'syz.1.5517': attribute type 9 has an invalid length. [ 1303.274081][T21869] macvlan2: entered promiscuous mode [ 1303.274109][T21869] macvlan2: entered allmulticast mode [ 1303.366787][ T36] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1303.392192][ T36] usb 4-1: USB disconnect, device number 98 [ 1303.694187][T21703] udevd[21703]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.725817][ T37] audit: type=1326 audit(1785528620.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.727602][ T37] audit: type=1326 audit(1785528620.930:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.735387][ T37] audit: type=1326 audit(1785528620.940:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.735822][ T37] audit: type=1326 audit(1785528620.940:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.736176][ T37] audit: type=1326 audit(1785528620.940:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.747552][ T37] audit: type=1326 audit(1785528620.940:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.876611][ T37] audit: type=1326 audit(1785528621.080:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.876750][ T37] audit: type=1326 audit(1785528621.080:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1304.877740][ T37] audit: type=1326 audit(1785528621.080:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21898 comm="syz.2.5533" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4baca1e019 code=0x7ffc0000 [ 1305.239078][ T5752] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1305.354196][T21926] vivid-002: ================= START STATUS ================= [ 1305.354222][T21926] vivid-002: Radio HW Seek Mode: Bounded [ 1305.354329][T21926] vivid-002: Radio Programmable HW Seek: false [ 1305.354349][T21926] vivid-002: RDS Rx I/O Mode: Block I/O [ 1305.354368][T21926] vivid-002: Generate RBDS Instead of RDS: false [ 1305.354386][T21926] vivid-002: RDS Reception: true [ 1305.354404][T21926] vivid-002: RDS Program Type: 0 inactive [ 1305.354879][T21926] vivid-002: RDS PS Name: inactive [ 1305.354902][T21926] vivid-002: RDS Radio Text: inactive [ 1305.354925][T21926] vivid-002: RDS Traffic Announcement: false inactive [ 1305.354948][T21926] vivid-002: RDS Traffic Program: false inactive [ 1305.354970][T21926] vivid-002: RDS Music: false inactive [ 1305.354993][T21926] vivid-002: ================== END STATUS ================== [ 1305.441390][ T5752] usb 4-1: Using ep0 maxpacket: 32 [ 1305.444723][ T5752] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1305.444751][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.452471][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.452535][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.467865][ T36] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1305.518753][ T5752] usb 4-1: config 0 descriptor?? [ 1305.538802][ T5752] as10x_usb: device has been detected [ 1305.539795][ T5752] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1305.635637][ T5752] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1305.638333][ T36] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.638393][ T36] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.638415][ T36] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1305.638455][ T36] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1305.638477][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.797314][ T36] opticon 3-1:1.0: required endpoints missing [ 1305.932129][ T36] usb 3-1: USB disconnect, device number 79 [ 1306.571113][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.636374][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.640666][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.706501][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.707226][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1306.881822][ T5752] as10x_usb: error during firmware upload part1 [ 1306.882469][ T5752] Registered device nBox DVB-T Dongle [ 1306.894975][ T5752] usb 4-1: USB disconnect, device number 99 [ 1307.033781][ T5752] Unregistered device nBox DVB-T Dongle [ 1307.043996][ T5752] as10x_usb: device has been disconnected [ 1307.757907][ T36] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1307.920053][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.920101][ T36] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1307.920125][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.957774][ T36] usb 3-1: config 0 descriptor?? [ 1308.193730][ T36] usbhid 3-1:0.0: can't add hid device: -71 [ 1308.193848][ T36] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1308.207435][ T36] usb 3-1: USB disconnect, device number 80 [ 1308.338210][T10776] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1308.491035][T10776] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.491086][T10776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1308.491107][T10776] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1308.491131][T10776] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1308.491169][T10776] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 1308.491190][T10776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.511838][T10776] opticon 2-1:1.0: opticon converter detected [ 1308.523643][T10776] usb 2-1: opticon converter now attached to ttyUSB0 [ 1308.687787][ T36] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1308.719983][T10776] usb 2-1: USB disconnect, device number 88 [ 1308.803211][T10776] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1308.803892][T10776] opticon 2-1:1.0: device disconnected [ 1308.887835][T17160] Bluetooth: hci4: command tx timeout [ 1308.906299][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1308.906336][ T36] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1308.906348][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.922816][ T36] usb 3-1: config 0 descriptor?? [ 1309.655946][T17475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.760491][ T36] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1309.773118][ T36] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input24 [ 1310.133419][ T5752] usb 3-1: USB disconnect, device number 81 [ 1310.133425][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1310.977920][T17160] Bluetooth: hci4: command tx timeout [ 1312.158574][T17475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.476584][T22122] UDC core: g1: couldn't find an available UDC or it's busy [ 1312.724880][T17475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.047812][T17160] Bluetooth: hci4: command tx timeout [ 1315.127780][T17160] Bluetooth: hci4: command tx timeout [ 1317.665774][T22189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5656'. [ 1317.967428][T17475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.323943][T22200] efs: cannot read volume header [ 1319.640756][T21949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.640911][T21949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.641083][T21949] bridge_slave_0: entered allmulticast mode [ 1319.672606][T21949] bridge_slave_0: entered promiscuous mode [ 1319.677509][T21949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.697105][T21949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.709040][T21949] bridge_slave_1: entered allmulticast mode [ 1319.718845][T21949] bridge_slave_1: entered promiscuous mode [ 1319.932963][T21949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.947531][T21949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1320.340648][T21949] team0: Port device team_slave_0 added [ 1320.344092][T21949] team0: Port device team_slave_1 added [ 1320.909706][T22222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1321.061435][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'. [ 1321.669581][T21949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.669600][T21949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.669626][T21949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.796191][T22222] bond0: entered allmulticast mode [ 1321.796208][T22222] bond_slave_0: entered allmulticast mode [ 1321.796222][T22222] bond_slave_1: entered allmulticast mode [ 1321.796272][T22222] bond_slave_0: entered promiscuous mode [ 1321.796297][T22222] bond_slave_1: entered promiscuous mode [ 1321.796309][T22222] bond0: entered promiscuous mode [ 1321.854048][T22222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1321.945923][T21949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.945952][T21949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1321.945981][T21949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.767892][T21949] hsr_slave_0: entered promiscuous mode [ 1322.802319][T21949] hsr_slave_1: entered promiscuous mode [ 1322.830871][T21949] debugfs: 'hsr0' already exists in 'hsr' [ 1322.830900][T21949] Cannot create hsr debugfs directory [ 1323.316451][T22278] sock: sock_timestamping_bind_phc: sock not bind to device [ 1324.487882][ T5846] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1324.637904][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1324.641331][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1324.641359][ T5846] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1324.641382][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1324.653960][ T5846] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1324.653989][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.654009][ T5846] usb 3-1: Product: syz [ 1324.654023][ T5846] usb 3-1: Manufacturer: syz [ 1324.654038][ T5846] usb 3-1: SerialNumber: syz [ 1324.672391][ T5846] usb 3-1: config 0 descriptor?? [ 1325.910142][ T5846] gs_usb 3-1:0.0: Configuring for 2 interfaces [ 1326.314475][ T5846] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1328.037120][T22333] Bluetooth: MGMT ver 1.23 [ 1328.037264][T22333] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 1328.908674][T17475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.989795][T17475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.136279][T17475] bond0 (unregistering): Released all slaves [ 1329.172679][T17475] bond1 (unregistering): Released all slaves [ 1329.396544][ T5846] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1329.634442][T17475] tipc: Left network mode [ 1329.734763][ T5846] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1329.746190][ T5846] usb 3-1: USB disconnect, device number 82 [ 1334.492432][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1334.911641][T17475] hsr_slave_0: left promiscuous mode [ 1334.950713][T17475] hsr_slave_1: left promiscuous mode [ 1334.951587][T17475] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.951605][T17475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.988586][T17475] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.988624][T17475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1335.234084][T17475] veth1_macvtap: left promiscuous mode [ 1335.403558][T17475] veth0_macvtap: left promiscuous mode [ 1335.629624][T17475] veth1_vlan: left promiscuous mode [ 1335.629816][T17475] veth0_vlan: left promiscuous mode [ 1335.677894][ T36] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1335.877851][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 1335.879647][ T36] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1335.879674][ T36] usb 4-1: config 0 has no interface number 0 [ 1335.882025][ T36] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1335.882054][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.882074][ T36] usb 4-1: Product: syz [ 1335.882089][ T36] usb 4-1: Manufacturer: syz [ 1335.882103][ T36] usb 4-1: SerialNumber: syz [ 1335.919596][ T36] usb 4-1: config 0 descriptor?? [ 1335.962118][ T36] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1336.019835][ T5846] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1336.177275][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1336.185730][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.185763][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.185852][ T5846] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1336.185875][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.242975][ T5846] usb 3-1: config 0 descriptor?? [ 1336.485117][ T36] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1336.539359][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1336.688363][ T36] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1336.731815][ T5846] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 1336.731854][ T5846] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 1336.760465][ T36] usb 4-1: USB disconnect, device number 100 [ 1336.874200][ T36] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1336.929427][ T36] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1336.931964][ T36] quatech2 4-1:0.51: device disconnected [ 1337.020140][ T5846] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 1337.182686][ T5846] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1337.593773][ T5846] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 1337.601282][ T5846] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 1338.071952][ T5846] usb 3-1: USB disconnect, device number 83 [ 1339.908902][ T5846] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1340.257842][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 1340.259702][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.259735][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.259765][ T5846] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1340.259784][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.375451][ T5846] usb 3-1: config 0 descriptor?? [ 1341.063231][T22648] printk: legacy console [ttyGS0] disabled [ 1341.074230][T17475] team0 (unregistering): Port device team_slave_1 removed [ 1341.200670][T17475] team0 (unregistering): Port device team_slave_0 removed [ 1341.281788][ T5846] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1341.281827][ T5846] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1341.436112][ T5846] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 1341.647788][ T5846] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1341.669355][T22679] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1341.669401][T22679] CPU: 0 UID: 0 PID: 22679 Comm: syz.3.5857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1341.669432][T22679] Tainted: [L]=SOFTLOCKUP [ 1341.669440][T22679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1341.669457][T22679] Call Trace: [ 1341.669465][T22679] [ 1341.669474][T22679] dump_stack_lvl+0xe8/0x150 [ 1341.669693][T22679] sysfs_create_dir_ns+0x271/0x2a0 [ 1341.669752][T22679] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1341.669778][T22679] ? rt_spin_unlock+0x163/0x200 [ 1341.669802][T22679] kobject_add_internal+0x62c/0xce0 [ 1341.669840][T22679] kobject_add+0x163/0x240 [ 1341.669868][T22679] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1341.669892][T22679] ? __pfx_kobject_add+0x10/0x10 [ 1341.669925][T22679] ? get_device_parent+0x370/0x3a0 [ 1341.669950][T22679] ? __pfx_klist_children_get+0x10/0x10 [ 1341.669973][T22679] device_add+0x3fa/0xb80 [ 1341.669999][T22679] tty_register_device_attr+0x422/0x950 [ 1341.670094][T22679] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1341.670129][T22679] ? tty_port_init+0x140/0x1b0 [ 1341.670184][T22679] ? gsm_dlci_alloc+0x341/0x650 [ 1341.670217][T22679] gsm_activate_mux+0x110/0x2a0 [ 1341.670250][T22679] gsmld_ioctl+0xcf5/0x1930 [ 1341.670284][T22679] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1341.670320][T22679] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1341.670360][T22679] ? ldsem_down_read+0x12/0x40 [ 1341.670390][T22679] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1341.670414][T22679] tty_ioctl+0x9c3/0xde0 [ 1341.670438][T22679] ? __pfx_tty_ioctl+0x10/0x10 [ 1341.670463][T22679] __se_sys_ioctl+0xff/0x170 [ 1341.670531][T22679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.670554][T22679] do_syscall_64+0x174/0x580 [ 1341.670580][T22679] ? clear_bhb_loop+0x40/0x90 [ 1341.670605][T22679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.670632][T22679] RIP: 0033:0x7f7715b4e019 [ 1341.670657][T22679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.670676][T22679] RSP: 002b:00007f7713da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.670698][T22679] RAX: ffffffffffffffda RBX: 00007f7715dd5fa0 RCX: 00007f7715b4e019 [ 1341.670714][T22679] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1341.670726][T22679] RBP: 00007f7715be500c R08: 0000000000000000 R09: 0000000000000000 [ 1341.670739][T22679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.670750][T22679] R13: 00007f7715dd6038 R14: 00007f7715dd5fa0 R15: 00007ffe4ac7fcb8 [ 1341.670782][T22679] [ 1341.670933][T22679] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1342.063413][ T5846] ft260 0003:0403:6030.000F: failed to retrieve status: -71 [ 1342.065149][ T5846] ft260 0003:0403:6030.000F: failed to reset I2C controller: -71 [ 1342.235682][ T5846] usb 3-1: USB disconnect, device number 84 [ 1342.612149][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1343.551273][ T5884] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1343.747903][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 1343.751852][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1343.751882][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.751902][ T5884] usb 2-1: Product: syz [ 1343.751924][ T5884] usb 2-1: Manufacturer: syz [ 1343.751937][ T5884] usb 2-1: SerialNumber: syz [ 1343.780005][ T5884] usb 2-1: config 0 descriptor?? [ 1344.002098][ T5884] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1344.669484][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1344.669907][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1344.670128][ T5884] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1344.724541][ T5884] usb 2-1: USB disconnect, device number 89 [ 1345.805843][T22783] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5901'. [ 1347.729452][T22811] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1347.729480][T22811] CPU: 1 UID: 0 PID: 22811 Comm: syz.3.5910 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1347.729520][T22811] Tainted: [L]=SOFTLOCKUP [ 1347.729528][T22811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1347.729542][T22811] Call Trace: [ 1347.729550][T22811] [ 1347.729559][T22811] dump_stack_lvl+0xe8/0x150 [ 1347.729598][T22811] sysfs_create_dir_ns+0x271/0x2a0 [ 1347.729625][T22811] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1347.729651][T22811] ? rt_spin_unlock+0x163/0x200 [ 1347.729675][T22811] kobject_add_internal+0x62c/0xce0 [ 1347.729716][T22811] kobject_add+0x163/0x240 [ 1347.729745][T22811] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1347.729769][T22811] ? __pfx_kobject_add+0x10/0x10 [ 1347.729804][T22811] ? get_device_parent+0x370/0x3a0 [ 1347.729830][T22811] ? __pfx_klist_children_get+0x10/0x10 [ 1347.729852][T22811] device_add+0x3fa/0xb80 [ 1347.729881][T22811] tty_register_device_attr+0x422/0x950 [ 1347.729915][T22811] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1347.729950][T22811] ? tty_port_init+0x140/0x1b0 [ 1347.729979][T22811] ? gsm_dlci_alloc+0x341/0x650 [ 1347.730011][T22811] gsm_activate_mux+0x110/0x2a0 [ 1347.730043][T22811] gsmld_ioctl+0xcf5/0x1930 [ 1347.730078][T22811] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1347.730116][T22811] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1347.730157][T22811] ? ldsem_down_read+0x12/0x40 [ 1347.730185][T22811] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1347.730210][T22811] tty_ioctl+0x9c3/0xde0 [ 1347.730236][T22811] ? __pfx_tty_ioctl+0x10/0x10 [ 1347.730261][T22811] __se_sys_ioctl+0xff/0x170 [ 1347.730289][T22811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.730311][T22811] do_syscall_64+0x174/0x580 [ 1347.730336][T22811] ? trace_irq_disable+0x3b/0x140 [ 1347.730448][T22811] ? clear_bhb_loop+0x40/0x90 [ 1347.730474][T22811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.730494][T22811] RIP: 0033:0x7f7715b4e019 [ 1347.730538][T22811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.730557][T22811] RSP: 002b:00007f7713d85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.730580][T22811] RAX: ffffffffffffffda RBX: 00007f7715dd6090 RCX: 00007f7715b4e019 [ 1347.730596][T22811] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1347.730611][T22811] RBP: 00007f7715be500c R08: 0000000000000000 R09: 0000000000000000 [ 1347.730622][T22811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.730633][T22811] R13: 00007f7715dd6128 R14: 00007f7715dd6090 R15: 00007ffe4ac7fcb8 [ 1347.730665][T22811] [ 1347.730717][T22811] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1350.389769][T22876] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 1350.389795][T22876] CPU: 0 UID: 0 PID: 22876 Comm: syz.1.5931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1350.389834][T22876] Tainted: [L]=SOFTLOCKUP [ 1350.389841][T22876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.389853][T22876] Call Trace: [ 1350.389861][T22876] [ 1350.389870][T22876] dump_stack_lvl+0xe8/0x150 [ 1350.389908][T22876] sysfs_create_dir_ns+0x271/0x2a0 [ 1350.389932][T22876] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1350.389957][T22876] ? rt_spin_unlock+0x163/0x200 [ 1350.389982][T22876] kobject_add_internal+0x62c/0xce0 [ 1350.390019][T22876] kobject_add+0x163/0x240 [ 1350.390052][T22876] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1350.390080][T22876] ? __pfx_kobject_add+0x10/0x10 [ 1350.390114][T22876] ? get_device_parent+0x370/0x3a0 [ 1350.390142][T22876] ? __pfx_klist_children_get+0x10/0x10 [ 1350.390165][T22876] device_add+0x3fa/0xb80 [ 1350.390195][T22876] tty_register_device_attr+0x422/0x950 [ 1350.390233][T22876] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1350.390265][T22876] ? tty_port_init+0x140/0x1b0 [ 1350.390292][T22876] ? gsm_dlci_alloc+0x341/0x650 [ 1350.390324][T22876] gsm_activate_mux+0x110/0x2a0 [ 1350.390357][T22876] gsmld_ioctl+0xcf5/0x1930 [ 1350.390392][T22876] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1350.390427][T22876] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1350.390464][T22876] ? ldsem_down_read+0x12/0x40 [ 1350.390492][T22876] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1350.390517][T22876] tty_ioctl+0x9c3/0xde0 [ 1350.390545][T22876] ? __pfx_tty_ioctl+0x10/0x10 [ 1350.390570][T22876] __se_sys_ioctl+0xff/0x170 [ 1350.390599][T22876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.390622][T22876] do_syscall_64+0x174/0x580 [ 1350.390648][T22876] ? trace_irq_disable+0x3b/0x140 [ 1350.390669][T22876] ? clear_bhb_loop+0x40/0x90 [ 1350.390694][T22876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.390714][T22876] RIP: 0033:0x7ff02365e019 [ 1350.390735][T22876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1350.390754][T22876] RSP: 002b:00007ff021895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.390778][T22876] RAX: ffffffffffffffda RBX: 00007ff0238e6090 RCX: 00007ff02365e019 [ 1350.390794][T22876] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1350.390808][T22876] RBP: 00007ff0236f500c R08: 0000000000000000 R09: 0000000000000000 [ 1350.390819][T22876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.390838][T22876] R13: 00007ff0238e6128 R14: 00007ff0238e6090 R15: 00007ffd8d099b58 [ 1350.390868][T22876] [ 1350.393405][T22876] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 1353.905815][T21949] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1353.994615][T21949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1354.033979][T21949] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1354.228399][T21949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1354.233959][T21949] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1354.298755][T21949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1354.300600][T21949] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1354.352203][T21949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1354.761568][T21949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1354.909961][T21949] 8021q: adding VLAN 0 to HW filter on device team0 [ 1354.952369][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.952443][T17471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.955053][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.955127][T17471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.168836][T22961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1356.204953][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5958'. [ 1356.393269][ T37] audit: type=1800 audit(1785528672.590:25): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5955" name="ifname" dev="configfs" ino=75321 res=0 errno=0 [ 1356.839228][T22978] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1356.839258][T22978] CPU: 0 UID: 0 PID: 22978 Comm: syz.2.5962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1356.839287][T22978] Tainted: [L]=SOFTLOCKUP [ 1356.839296][T22978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1356.839309][T22978] Call Trace: [ 1356.839316][T22978] [ 1356.839325][T22978] dump_stack_lvl+0xe8/0x150 [ 1356.839364][T22978] sysfs_create_dir_ns+0x271/0x2a0 [ 1356.839387][T22978] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1356.839411][T22978] ? rt_spin_unlock+0x163/0x200 [ 1356.839437][T22978] kobject_add_internal+0x62c/0xce0 [ 1356.839471][T22978] kobject_add+0x163/0x240 [ 1356.839498][T22978] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1356.839522][T22978] ? __pfx_kobject_add+0x10/0x10 [ 1356.839554][T22978] ? get_device_parent+0x370/0x3a0 [ 1356.839578][T22978] ? __pfx_klist_children_get+0x10/0x10 [ 1356.839599][T22978] device_add+0x3fa/0xb80 [ 1356.839625][T22978] tty_register_device_attr+0x422/0x950 [ 1356.839659][T22978] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1356.839692][T22978] ? tty_port_init+0x140/0x1b0 [ 1356.839718][T22978] ? gsm_dlci_alloc+0x341/0x650 [ 1356.839747][T22978] gsm_activate_mux+0x110/0x2a0 [ 1356.839779][T22978] gsmld_ioctl+0xcf5/0x1930 [ 1356.839810][T22978] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1356.839845][T22978] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1356.839883][T22978] ? ldsem_down_read+0x12/0x40 [ 1356.839910][T22978] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1356.839935][T22978] tty_ioctl+0x9c3/0xde0 [ 1356.839960][T22978] ? __pfx_tty_ioctl+0x10/0x10 [ 1356.839992][T22978] __se_sys_ioctl+0xff/0x170 [ 1356.840020][T22978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.840041][T22978] do_syscall_64+0x174/0x580 [ 1356.840064][T22978] ? trace_irq_disable+0x3b/0x140 [ 1356.840083][T22978] ? clear_bhb_loop+0x40/0x90 [ 1356.840105][T22978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.840123][T22978] RIP: 0033:0x7f4baca1e019 [ 1356.840141][T22978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.840158][T22978] RSP: 002b:00007f4baac55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.840180][T22978] RAX: ffffffffffffffda RBX: 00007f4bacca6090 RCX: 00007f4baca1e019 [ 1356.840196][T22978] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1356.840210][T22978] RBP: 00007f4bacab500c R08: 0000000000000000 R09: 0000000000000000 [ 1356.840221][T22978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.840232][T22978] R13: 00007f4bacca6128 R14: 00007f4bacca6090 R15: 00007ffee8864f88 [ 1356.840264][T22978] [ 1356.840404][T22978] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1356.862050][T17471] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1356.868480][T17471] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.625434][T22982] efs: cannot read volume header [ 1358.316464][ T5752] IPVS: starting estimator thread 0... [ 1358.390760][T17493] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.398076][T22996] IPVS: using max 9 ests per chain, 21600 per kthread [ 1358.408109][T17493] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1358.777830][ T36] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1358.927912][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 1358.929690][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.929722][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.929757][ T36] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1358.929778][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.988298][ T36] usb 2-1: config 0 descriptor?? [ 1359.398518][T21949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.490003][ T36] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 1359.490040][ T36] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 1359.668385][ T36] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 1359.867455][ T36] ft260 0003:0403:6030.0010: failed to retrieve system status [ 1359.868002][ T36] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -32 [ 1359.929450][T23020] ------------[ cut here ]------------ [ 1359.929466][T23020] failed to allocate ring buffer on CPU 0 [ 1359.929487][T23020] WARNING: kernel/trace/ring_buffer.c:7975 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#1: syz.3.5980/23020 [ 1359.929636][T23020] Modules linked in: [ 1359.929659][T23020] CPU: 1 UID: 0 PID: 23020 Comm: syz.3.5980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.929690][T23020] Tainted: [L]=SOFTLOCKUP [ 1359.929698][T23020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.929711][T23020] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1359.929743][T23020] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fd 8f 7e 09 cc e8 47 3b fc ff 48 8d 3d b0 01 ea 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 2d 3b fc ff e9 ef fe ff ff [ 1359.929761][T23020] RSP: 0018:ffffc900066e77e0 EFLAGS: 00010287 [ 1359.929779][T23020] RAX: ffffffff81c9a069 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1359.929796][T23020] RDX: ffffc9001b0ea000 RSI: 0000000000000000 RDI: ffffffff8fb3a220 [ 1359.929825][T23020] RBP: 0000000000000000 R08: ffffffff8faf9f37 R09: 1ffffffff1f5f3e6 [ 1359.929841][T23020] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: 0000000000000000 [ 1359.929858][T23020] R13: ffff8880303c2100 R14: ffff888037b8c8a0 R15: 0000000000000000 [ 1359.929874][T23020] FS: 00007f7713da66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1359.929894][T23020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1359.929909][T23020] CR2: 00007f2e8ded2d58 CR3: 000000003761e000 CR4: 00000000003526f0 [ 1359.929929][T23020] Call Trace: [ 1359.929939][T23020] [ 1359.929952][T23020] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1359.929985][T23020] cpuhp_invoke_callback+0x498/0x810 [ 1359.930064][T23020] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1359.930099][T23020] cpuhp_issue_call+0x3f0/0x750 [ 1359.930126][T23020] ? mutex_lock_nested+0x152/0x1d0 [ 1359.930145][T23020] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1359.930174][T23020] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1359.930203][T23020] __cpuhp_state_add_instance+0x25/0x40 [ 1359.930227][T23020] alloc_buffer+0x18aa/0x1d50 [ 1359.930284][T23020] __ring_buffer_alloc+0x2c/0x40 [ 1359.930307][T23020] allocate_trace_buffer+0x1d2/0x950 [ 1359.930340][T23020] ? trace_array_create_systems+0x75/0xe60 [ 1359.930369][T23020] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1359.930402][T23020] ? __raw_spin_lock_init+0x45/0x100 [ 1359.930476][T23020] trace_array_create_systems+0x590/0xe60 [ 1359.930508][T23020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1359.930534][T23020] ? mutex_lock_nested+0x152/0x1d0 [ 1359.930560][T23020] instance_mkdir+0xd5/0x140 [ 1359.930593][T23020] tracefs_syscall_mkdir+0x11a/0x190 [ 1359.930682][T23020] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1359.930847][T23020] ? generic_permission+0x2bf/0x670 [ 1359.930940][T23020] ? __pfx_tracefs_permission+0x10/0x10 [ 1359.930970][T23020] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1359.931069][T23020] vfs_mkdir+0x402/0x620 [ 1359.931156][T23020] filename_mkdirat+0x289/0x520 [ 1359.931200][T23020] ? __pfx_filename_mkdirat+0x10/0x10 [ 1359.931232][T23020] ? do_getname+0x151/0x250 [ 1359.931318][T23020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.931341][T23020] __se_sys_mkdirat+0x35/0x150 [ 1359.931369][T23020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.931392][T23020] do_syscall_64+0x174/0x580 [ 1359.931417][T23020] ? trace_irq_disable+0x3b/0x140 [ 1359.931437][T23020] ? clear_bhb_loop+0x40/0x90 [ 1359.931462][T23020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.931482][T23020] RIP: 0033:0x7f7715b4e019 [ 1359.931503][T23020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.931520][T23020] RSP: 002b:00007f7713da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1359.931542][T23020] RAX: ffffffffffffffda RBX: 00007f7715dd5fa0 RCX: 00007f7715b4e019 [ 1359.931558][T23020] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1359.931574][T23020] RBP: 00007f7715be500c R08: 0000000000000000 R09: 0000000000000000 [ 1359.931588][T23020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.931602][T23020] R13: 00007f7715dd6038 R14: 00007f7715dd5fa0 R15: 00007ffe4ac7fcb8 [ 1359.931637][T23020] [ 1359.931649][T23020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1359.931668][T23020] CPU: 1 UID: 0 PID: 23020 Comm: syz.3.5980 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1359.931696][T23020] Tainted: [L]=SOFTLOCKUP [ 1359.931704][T23020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1359.931718][T23020] Call Trace: [ 1359.931727][T23020] [ 1359.931736][T23020] vpanic+0x56c/0xa60 [ 1359.931759][T23020] ? __pfx__printk+0x10/0x10 [ 1359.931785][T23020] ? __pfx_vpanic+0x10/0x10 [ 1359.931802][T23020] ? is_bpf_text_address+0x292/0x2b0 [ 1359.931863][T23020] ? is_bpf_text_address+0x26/0x2b0 [ 1359.931894][T23020] panic+0xc5/0xd0 [ 1359.931914][T23020] ? __pfx_panic+0x10/0x10 [ 1359.931954][T23020] __warn+0x315/0x4c0 [ 1359.931973][T23020] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1359.932010][T23020] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1359.932038][T23020] __report_bug+0x276/0x570 [ 1359.932066][T23020] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 1359.932095][T23020] ? __pfx___report_bug+0x10/0x10 [ 1359.932124][T23020] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 1359.932154][T23020] report_bug_entry+0x19a/0x290 [ 1359.932176][T23020] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 1359.932259][T23020] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 1359.932289][T23020] handle_bug+0xce/0x200 [ 1359.932320][T23020] exc_invalid_op+0x1a/0x50 [ 1359.932348][T23020] asm_exc_invalid_op+0x1a/0x20 [ 1359.932369][T23020] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 1359.932400][T23020] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 fd 8f 7e 09 cc e8 47 3b fc ff 48 8d 3d b0 01 ea 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 2d 3b fc ff e9 ef fe ff ff [ 1359.932418][T23020] RSP: 0018:ffffc900066e77e0 EFLAGS: 00010287 [ 1359.932436][T23020] RAX: ffffffff81c9a069 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1359.932452][T23020] RDX: ffffc9001b0ea000 RSI: 0000000000000000 RDI: ffffffff8fb3a220 [ 1359.932467][T23020] RBP: 0000000000000000 R08: ffffffff8faf9f37 R09: 1ffffffff1f5f3e6 [ 1359.932482][T23020] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: 0000000000000000 [ 1359.932497][T23020] R13: ffff8880303c2100 R14: ffff888037b8c8a0 R15: 0000000000000000 [ 1359.932519][T23020] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 1359.932558][T23020] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1359.932587][T23020] cpuhp_invoke_callback+0x498/0x810 [ 1359.932622][T23020] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 1359.932659][T23020] cpuhp_issue_call+0x3f0/0x750 [ 1359.932685][T23020] ? mutex_lock_nested+0x152/0x1d0 [ 1359.932705][T23020] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 1359.932738][T23020] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 1359.932770][T23020] __cpuhp_state_add_instance+0x25/0x40 [ 1359.932799][T23020] alloc_buffer+0x18aa/0x1d50 [ 1359.932853][T23020] __ring_buffer_alloc+0x2c/0x40 [ 1359.932879][T23020] allocate_trace_buffer+0x1d2/0x950 [ 1359.932915][T23020] ? trace_array_create_systems+0x75/0xe60 [ 1359.932946][T23020] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 1359.932983][T23020] ? __raw_spin_lock_init+0x45/0x100 [ 1359.933016][T23020] trace_array_create_systems+0x590/0xe60 [ 1359.933048][T23020] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1359.933074][T23020] ? mutex_lock_nested+0x152/0x1d0 [ 1359.933100][T23020] instance_mkdir+0xd5/0x140 [ 1359.933131][T23020] tracefs_syscall_mkdir+0x11a/0x190 [ 1359.933163][T23020] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 1359.933199][T23020] ? generic_permission+0x2bf/0x670 [ 1359.933226][T23020] ? __pfx_tracefs_permission+0x10/0x10 [ 1359.933261][T23020] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 1359.933294][T23020] vfs_mkdir+0x402/0x620 [ 1359.933331][T23020] filename_mkdirat+0x289/0x520 [ 1359.933367][T23020] ? __pfx_filename_mkdirat+0x10/0x10 [ 1359.933399][T23020] ? do_getname+0x151/0x250 [ 1359.933432][T23020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.933454][T23020] __se_sys_mkdirat+0x35/0x150 [ 1359.933483][T23020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.933506][T23020] do_syscall_64+0x174/0x580 [ 1359.933531][T23020] ? trace_irq_disable+0x3b/0x140 [ 1359.933551][T23020] ? clear_bhb_loop+0x40/0x90 [ 1359.933574][T23020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1359.933594][T23020] RIP: 0033:0x7f7715b4e019 [ 1359.933613][T23020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1359.933631][T23020] RSP: 002b:00007f7713da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1359.933653][T23020] RAX: ffffffffffffffda RBX: 00007f7715dd5fa0 RCX: 00007f7715b4e019 [ 1359.933669][T23020] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1359.933683][T23020] RBP: 00007f7715be500c R08: 0000000000000000 R09: 0000000000000000 [ 1359.933697][T23020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1359.933710][T23020] R13: 00007f7715dd6038 R14: 00007f7715dd5fa0 R15: 00007ffe4ac7fcb8 [ 1359.933740][T23020] [ 1359.934106][T23020] Kernel Offset: disabled