last executing test programs: 9.374497407s ago: executing program 0 (id=50): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa401020301090224000100000000090400"], 0x0) 7.871045636s ago: executing program 0 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080008000600060014000000450a011600660d7f0b"], 0x124) 4.074970241s ago: executing program 1 (id=67): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67"], 0x0) 4.07357526s ago: executing program 3 (id=68): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x800, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x401, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 3.955042541s ago: executing program 0 (id=69): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000380)='./file1/file0\x00') 3.896825185s ago: executing program 3 (id=70): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000005c0)={0x9e0000, 0x240000, 0x7, 0xffffffffffffffff, 0x0, 0x0}) 3.877757022s ago: executing program 0 (id=71): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f0000000040), 0x8600, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, 0x0, 0x0) syz_usb_disconnect(r1) r3 = fsopen(&(0x7f00000003c0)='gfs2\x00', 0x0) fsopen(0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, 0x0, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.842904887s ago: executing program 3 (id=72): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000cc0)=""/236, 0xec, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) 3.704938502s ago: executing program 3 (id=74): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$midi(0xffffffffffffffff, &(0x7f0000000000)='r', 0x1) r0 = socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) 3.581023405s ago: executing program 2 (id=76): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="20168a00000031c8"], 0x0, 0x0, 0x0, 0x0}) 3.580634416s ago: executing program 3 (id=77): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0xf21, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) 3.396690714s ago: executing program 3 (id=78): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080008000600060014000000450a011600660d7f0b"], 0x124) 2.7834143s ago: executing program 1 (id=79): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.610855353s ago: executing program 1 (id=80): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 2.497278367s ago: executing program 1 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x11, 0x7efffeff00000000) 1.469761964s ago: executing program 1 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0x81, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100020000000863071a2040000102030109026f0003010990000904000000010100000a24017f000a00020102090401000001020000090401010101"], 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 939.53716ms ago: executing program 2 (id=83): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040), 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000280)=""/6) 721.140061ms ago: executing program 2 (id=84): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, 0x0, 0x0) close(r0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x1}}], 0x1, 0x0) 648.899838ms ago: executing program 2 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x30) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 443.771753ms ago: executing program 2 (id=86): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r0, 0xf21, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) 288.980556ms ago: executing program 0 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000003c0)={0xc1, 0x0, 0x1}) 145.324394ms ago: executing program 2 (id=88): syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67"], 0x0) 47.737356ms ago: executing program 1 (id=89): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getitimer(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x296}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 0s ago: executing program 0 (id=90): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4044000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. [ 74.583195][ T5596] cgroup: Unknown subsys name 'net' [ 74.823205][ T5596] cgroup: Unknown subsys name 'cpuset' [ 74.878905][ T5596] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.495512][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.642531][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.652843][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.657752][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.662663][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.665385][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.667951][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.669099][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.670683][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.674236][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.674632][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.676454][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.678392][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.680046][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.680731][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.747777][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.766536][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.773273][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.776878][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.811835][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.813035][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.696010][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.697236][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.697399][ T5614] bridge_slave_0: entered allmulticast mode [ 82.702313][ T5614] bridge_slave_0: entered promiscuous mode [ 82.719588][ T60] Bluetooth: hci3: command tx timeout [ 82.731630][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.731787][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.731953][ T5616] bridge_slave_0: entered allmulticast mode [ 82.733849][ T5616] bridge_slave_0: entered promiscuous mode [ 82.750543][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.750856][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.751101][ T5614] bridge_slave_1: entered allmulticast mode [ 82.754586][ T5614] bridge_slave_1: entered promiscuous mode [ 82.780638][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.780905][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.781178][ T5616] bridge_slave_1: entered allmulticast mode [ 82.785644][ T5616] bridge_slave_1: entered promiscuous mode [ 82.798527][ T60] Bluetooth: hci1: command tx timeout [ 82.878353][ T60] Bluetooth: hci0: command tx timeout [ 82.878473][ T60] Bluetooth: hci2: command tx timeout [ 82.914135][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.931481][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.956766][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.977454][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.977783][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.977988][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.978128][ T5615] bridge_slave_0: entered allmulticast mode [ 82.982925][ T5615] bridge_slave_0: entered promiscuous mode [ 83.036288][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.036466][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.036796][ T5615] bridge_slave_1: entered allmulticast mode [ 83.041429][ T5615] bridge_slave_1: entered promiscuous mode [ 83.066572][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.066856][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.067085][ T5613] bridge_slave_0: entered allmulticast mode [ 83.070814][ T5613] bridge_slave_0: entered promiscuous mode [ 83.115208][ T5614] team0: Port device team_slave_0 added [ 83.115576][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.115843][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.116377][ T5613] bridge_slave_1: entered allmulticast mode [ 83.118113][ T5613] bridge_slave_1: entered promiscuous mode [ 83.127112][ T5616] team0: Port device team_slave_0 added [ 83.156193][ T5614] team0: Port device team_slave_1 added [ 83.175817][ T5616] team0: Port device team_slave_1 added [ 83.181062][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.227300][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.475884][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.510604][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.510615][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.510629][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.522382][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.524357][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.524370][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.524392][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.554943][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.554958][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.554981][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.585089][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.585105][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.585129][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.591412][ T5615] team0: Port device team_slave_0 added [ 83.661688][ T5615] team0: Port device team_slave_1 added [ 83.681252][ T5613] team0: Port device team_slave_0 added [ 83.714343][ T5613] team0: Port device team_slave_1 added [ 83.784391][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.784401][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.784415][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.848723][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.848734][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.848748][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.855247][ T5614] hsr_slave_0: entered promiscuous mode [ 83.856582][ T5614] hsr_slave_1: entered promiscuous mode [ 83.871106][ T5616] hsr_slave_0: entered promiscuous mode [ 83.873116][ T5616] hsr_slave_1: entered promiscuous mode [ 83.874750][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 83.874850][ T5616] Cannot create hsr debugfs directory [ 83.877733][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.877745][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.877768][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.900435][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.900450][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.900473][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.083129][ T5615] hsr_slave_0: entered promiscuous mode [ 84.084306][ T5615] hsr_slave_1: entered promiscuous mode [ 84.085355][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 84.085376][ T5615] Cannot create hsr debugfs directory [ 84.131509][ T5613] hsr_slave_0: entered promiscuous mode [ 84.134016][ T5613] hsr_slave_1: entered promiscuous mode [ 84.134907][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 84.134929][ T5613] Cannot create hsr debugfs directory [ 84.800112][ T4925] Bluetooth: hci3: command tx timeout [ 84.879158][ T4925] Bluetooth: hci1: command tx timeout [ 84.940920][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.958368][ T4925] Bluetooth: hci2: command tx timeout [ 84.958395][ T4925] Bluetooth: hci0: command tx timeout [ 84.990159][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.006382][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.043344][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.046671][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.084815][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.107534][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.142860][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.254940][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.284759][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.297470][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.321563][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.326684][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.346753][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.377860][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.422584][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.562152][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.604784][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.614005][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.655582][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.662985][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.694720][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.718641][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.751679][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.891968][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.943151][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.952238][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.000820][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.006232][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.026942][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.043820][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.082079][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.142507][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.253272][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.296478][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.296639][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.323710][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.356022][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356173][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.428694][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.449780][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.473291][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.473430][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.525253][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.526696][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.600098][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.647005][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.671531][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.671622][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.684229][ T1254] cfg80211: failed to load regulatory.db [ 86.777718][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.786578][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.873192][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.879718][ T4925] Bluetooth: hci3: command tx timeout [ 86.948013][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.956010][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.958385][ T4925] Bluetooth: hci1: command tx timeout [ 87.012519][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.012648][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.038666][ T4925] Bluetooth: hci2: command tx timeout [ 87.038691][ T4925] Bluetooth: hci0: command tx timeout [ 87.793570][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.102944][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.171392][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.248072][ T5616] veth0_vlan: entered promiscuous mode [ 88.310457][ T5616] veth1_vlan: entered promiscuous mode [ 88.444389][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.447128][ T5615] veth0_vlan: entered promiscuous mode [ 88.484621][ T5614] veth0_vlan: entered promiscuous mode [ 88.504894][ T5615] veth1_vlan: entered promiscuous mode [ 88.533380][ T5614] veth1_vlan: entered promiscuous mode [ 88.537080][ T5616] veth0_macvtap: entered promiscuous mode [ 88.584897][ T5616] veth1_macvtap: entered promiscuous mode [ 88.675182][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.681302][ T5613] veth0_vlan: entered promiscuous mode [ 88.697798][ T5615] veth0_macvtap: entered promiscuous mode [ 88.713746][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.754534][ T5615] veth1_macvtap: entered promiscuous mode [ 88.769938][ T5613] veth1_vlan: entered promiscuous mode [ 88.772800][ T5614] veth0_macvtap: entered promiscuous mode [ 88.794130][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.815622][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.831087][ T5614] veth1_macvtap: entered promiscuous mode [ 88.832929][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856178][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.941184][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.959712][ T60] Bluetooth: hci3: command tx timeout [ 89.028051][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.039178][ T60] Bluetooth: hci1: command tx timeout [ 89.123413][ T60] Bluetooth: hci0: command tx timeout [ 89.123443][ T60] Bluetooth: hci2: command tx timeout [ 89.209554][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.232692][ T3516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.255724][ T3516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.284705][ T3516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.295277][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.309534][ T3516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.334043][ T5613] veth0_macvtap: entered promiscuous mode [ 89.407008][ T1131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.426357][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.426380][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.460791][ T1465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.463614][ T1465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.472866][ T5613] veth1_macvtap: entered promiscuous mode [ 89.493195][ T1465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.738009][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.738026][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.958812][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.970597][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.970616][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123690][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.172507][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.204817][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.224198][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.241489][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.241507][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.266791][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.441964][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.441984][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.652448][ T1465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.652468][ T1465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.003593][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.003612][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.217412][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.217429][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.606378][ T5790] hfsplus: unable to find HFS+ superblock [ 93.039517][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.051221][ T5703] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.238426][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 93.253787][ T5703] usb 1-1: config 246 has an invalid interface number: 166 but max is 0 [ 93.253813][ T5703] usb 1-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 93.253827][ T5703] usb 1-1: config 246 has no interface number 0 [ 93.253858][ T5703] usb 1-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.253872][ T5703] usb 1-1: config 246 interface 166 has no altsetting 0 [ 93.256020][ T5703] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 93.256046][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.256065][ T5703] usb 1-1: Product: syz [ 93.256072][ T5703] usb 1-1: Manufacturer: syz [ 93.256079][ T5703] usb 1-1: SerialNumber: syz [ 93.349526][ T32] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 93.349650][ T32] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.349674][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.377963][ T32] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.377981][ T32] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.377991][ T32] usb 2-1: Product: syz [ 93.377998][ T32] usb 2-1: Manufacturer: syz [ 93.378006][ T32] usb 2-1: SerialNumber: syz [ 93.455451][ T32] usb 2-1: config 0 descriptor?? [ 93.533449][ T32] hub 2-1:0.0: bad descriptor, ignoring hub [ 93.533476][ T32] hub 2-1:0.0: probe with driver hub failed with error -5 [ 93.538169][ T32] usb 2-1: selecting invalid altsetting 0 [ 94.061761][ T32] usb 2-1: USB disconnect, device number 2 [ 94.113679][ T5770] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 94.139083][ T5703] usb 1-1: Invalid number of CPorts: 0 [ 94.139123][ T5703] es2_ap_driver 1-1:246.166: probe with driver es2_ap_driver failed with error -22 [ 94.370233][ T5703] usb 1-1: USB disconnect, device number 2 [ 94.668412][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.819958][ T32] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 94.820013][ T32] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 94.820026][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.824469][ T32] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 94.824496][ T32] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 94.824507][ T32] usb 2-1: Product: syz [ 94.824514][ T32] usb 2-1: Manufacturer: syz [ 94.824521][ T32] usb 2-1: SerialNumber: syz [ 94.889931][ T32] usb 2-1: config 0 descriptor?? [ 94.910108][ T32] hub 2-1:0.0: bad descriptor, ignoring hub [ 94.910142][ T32] hub 2-1:0.0: probe with driver hub failed with error -5 [ 94.913087][ T32] usb 2-1: selecting invalid altsetting 0 [ 94.985648][ T5797] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.268626][ T5620] usb 2-1: USB disconnect, device number 3 [ 96.228373][ T5717] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 96.458529][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.483624][ T5717] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 96.483654][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.483673][ T5717] usb 2-1: Product: syz [ 96.483687][ T5717] usb 2-1: Manufacturer: syz [ 96.483700][ T5717] usb 2-1: SerialNumber: syz [ 96.541696][ T5717] usb 2-1: config 0 descriptor?? [ 96.867927][ T5625] usb 2-1: USB disconnect, device number 4 [ 98.580935][ T5625] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.818312][ T5625] usb 1-1: Using ep0 maxpacket: 8 [ 98.820496][ T5625] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 98.820519][ T5625] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.820538][ T5625] usb 1-1: config 1 has no interface number 0 [ 98.820580][ T5625] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 98.820603][ T5625] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 98.820626][ T5625] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 98.822854][ T5625] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 98.822882][ T5625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.822900][ T5625] usb 1-1: Product: syz [ 98.822913][ T5625] usb 1-1: Manufacturer: syz [ 98.822927][ T5625] usb 1-1: SerialNumber: syz [ 99.040217][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.443668][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.444668][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 99.444703][ T10] usb 4-1: can't read configurations, error -71 [ 99.632447][ T5860] syzkaller1: entered promiscuous mode [ 99.632471][ T5860] syzkaller1: entered allmulticast mode [ 99.753553][ T5843] snd-usb-audio 1-1:1.1: Runtime PM usage count underflow! [ 99.827404][ T1254] usb 1-1: USB disconnect, device number 3 [ 99.910345][ T5717] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.063334][ T5717] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 100.063389][ T5717] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.063404][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.065644][ T5717] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.065670][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 100.065690][ T5717] usb 3-1: Product: syz [ 100.065704][ T5717] usb 3-1: Manufacturer: syz [ 100.065717][ T5717] usb 3-1: SerialNumber: syz [ 100.092560][ T5717] usb 3-1: config 0 descriptor?? [ 100.152482][ T5717] hub 3-1:0.0: bad descriptor, ignoring hub [ 100.152504][ T5717] hub 3-1:0.0: probe with driver hub failed with error -5 [ 100.155566][ T5717] usb 3-1: selecting invalid altsetting 0 [ 100.383816][ T5717] usb 3-1: USB disconnect, device number 2 [ 100.733763][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 100.819635][ T5878] process 'syz.3.37' launched './file0' with NULL argv: empty string added [ 101.013803][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.016205][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 101.016234][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.016254][ T9] usb 1-1: Product: syz [ 101.016268][ T9] usb 1-1: Manufacturer: syz [ 101.016282][ T9] usb 1-1: SerialNumber: syz [ 101.074960][ T9] usb 1-1: config 0 descriptor?? [ 101.268406][ T5717] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.309352][ T5718] usb 1-1: USB disconnect, device number 4 [ 101.347140][ T5880] netlink: 76 bytes leftover after parsing attributes in process `syz.3.38'. [ 101.420930][ T5717] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 101.420991][ T5717] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 101.421015][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.453315][ T5717] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.453345][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 101.453365][ T5717] usb 3-1: Product: syz [ 101.453380][ T5717] usb 3-1: Manufacturer: syz [ 101.453394][ T5717] usb 3-1: SerialNumber: syz [ 101.538371][ T5717] usb 3-1: config 0 descriptor?? [ 101.559201][ T5717] hub 3-1:0.0: bad descriptor, ignoring hub [ 101.559239][ T5717] hub 3-1:0.0: probe with driver hub failed with error -5 [ 101.584595][ T5717] usb 3-1: selecting invalid altsetting 0 [ 102.269647][ T5717] usb 3-1: USB disconnect, device number 3 [ 102.397159][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.718809][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.868324][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 102.869929][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 102.869952][ T10] usb 4-1: config 0 has no interface number 0 [ 102.869993][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 102.870011][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 102.870024][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.870037][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.870059][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 102.870071][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.895955][ T10] usb 4-1: config 0 descriptor?? [ 103.025864][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 103.638395][ T5718] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.801402][ T5718] usb 1-1: Using ep0 maxpacket: 8 [ 103.819015][ T5718] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 103.819040][ T5718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.819061][ T5718] usb 1-1: config 1 has no interface number 0 [ 103.819103][ T5718] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 103.819124][ T5718] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 103.819138][ T5718] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 103.849399][ T5718] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 103.849427][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.849447][ T5718] usb 1-1: Product: syz [ 103.849460][ T5718] usb 1-1: Manufacturer: syz [ 103.849474][ T5718] usb 1-1: SerialNumber: syz [ 104.832585][ T5718] usb 1-1: USB disconnect, device number 5 [ 104.852870][ T5717] kernel read not supported for file /video9 (pid: 5717 comm: kworker/0:6) [ 105.029886][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.286313][ T5906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 105.317298][ T5625] usb 4-1: USB disconnect, device number 4 [ 105.515620][ T5625] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 105.828420][ T5718] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 105.942510][ T5919] ======================================================= [ 105.942510][ T5919] WARNING: The mand mount option has been deprecated and [ 105.942510][ T5919] and is ignored by this kernel. Remove the mand [ 105.942510][ T5919] option from the mount to silence this warning. [ 105.942510][ T5919] ======================================================= [ 105.942719][ T5919] CIFS: VFS: UNC: path must begin with // or \\ [ 105.942729][ T5919] Malformed UNC in devname [ 105.942729][ T5919] [ 105.942783][ T5919] CIFS: VFS: Malformed UNC in devname [ 106.007331][ T5718] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.020456][ T5718] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 106.020484][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.020503][ T5718] usb 1-1: Product: syz [ 106.020517][ T5718] usb 1-1: Manufacturer: syz [ 106.020530][ T5718] usb 1-1: SerialNumber: syz [ 106.031877][ T5718] usb 1-1: config 0 descriptor?? [ 106.158416][ T5717] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.246320][ T5718] usb 1-1: USB disconnect, device number 6 [ 106.311135][ T5717] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 106.311190][ T5717] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.311205][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.313289][ T5717] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.313314][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.313325][ T5717] usb 4-1: Product: syz [ 106.313332][ T5717] usb 4-1: Manufacturer: syz [ 106.313339][ T5717] usb 4-1: SerialNumber: syz [ 106.316464][ T5717] usb 4-1: config 0 descriptor?? [ 106.383206][ T5717] hub 4-1:0.0: bad descriptor, ignoring hub [ 106.383239][ T5717] hub 4-1:0.0: probe with driver hub failed with error -5 [ 106.385974][ T5717] usb 4-1: selecting invalid altsetting 0 [ 106.855639][ T5922] syzkaller1: entered promiscuous mode [ 106.855662][ T5922] syzkaller1: entered allmulticast mode [ 107.487938][ T5913] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 108.145758][ T5933] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 108.228458][ T5935] syz.2.58 (5935) used greatest stack depth: 19432 bytes left [ 108.239056][ T5913] usb 4-1: failed to restore interface 0 altsetting 251 (error=-71) [ 108.246633][ T5718] usb 4-1: USB disconnect, device number 5 [ 110.870122][ T5717] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 111.014152][ T5971] capability: warning: `syz.2.75' uses 32-bit capabilities (legacy support in use) [ 111.020594][ T5717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.020655][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.024010][ T5717] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 111.024035][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.024052][ T5717] usb 2-1: Product: syz [ 111.024066][ T5717] usb 2-1: Manufacturer: syz [ 111.024078][ T5717] usb 2-1: SerialNumber: syz [ 111.076468][ T5717] usb 2-1: config 0 descriptor?? [ 111.148371][ T5828] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.223387][ T5977] syzkaller1: entered promiscuous mode [ 111.223404][ T5977] syzkaller1: entered allmulticast mode [ 111.306683][ T5718] usb 2-1: USB disconnect, device number 5 [ 111.329914][ T5828] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 111.329968][ T5828] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 111.329990][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0 [ 111.332060][ T5828] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.332085][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.332109][ T5828] usb 1-1: Product: syz [ 111.332116][ T5828] usb 1-1: Manufacturer: syz [ 111.332123][ T5828] usb 1-1: SerialNumber: syz [ 111.336932][ T5828] usb 1-1: config 0 descriptor?? [ 111.411191][ T5828] hub 1-1:0.0: bad descriptor, ignoring hub [ 111.411228][ T5828] hub 1-1:0.0: probe with driver hub failed with error -5 [ 111.414346][ T5828] usb 1-1: selecting invalid altsetting 0 [ 111.420457][ T5717] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.568479][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 111.570364][ T5717] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 111.570388][ T5717] usb 3-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 111.570406][ T5717] usb 3-1: config 246 has no interface number 0 [ 111.570445][ T5717] usb 3-1: config 246 interface 166 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.570470][ T5717] usb 3-1: config 246 interface 166 has no altsetting 0 [ 111.573898][ T5717] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 111.573924][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.573942][ T5717] usb 3-1: Product: syz [ 111.573955][ T5717] usb 3-1: Manufacturer: syz [ 111.573968][ T5717] usb 3-1: SerialNumber: syz [ 111.685139][ T9] usb 1-1: USB disconnect, device number 7 [ 112.304734][ T5717] usb 3-1: Limiting number of CPorts to U8_MAX [ 112.315547][ T5717] usb 3-1: Not enough endpoints found in device, aborting! [ 112.534080][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.202900][ T5717] usb 3-1: USB disconnect, device number 4 [ 113.332174][ T9] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 113.332209][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 113.332221][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.334280][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.334309][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.334327][ T9] usb 1-1: Product: syz [ 113.334339][ T9] usb 1-1: Manufacturer: syz [ 113.334352][ T9] usb 1-1: SerialNumber: syz [ 113.341551][ T9] usb 1-1: config 0 descriptor?? [ 113.389314][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 113.389352][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 113.399638][ T9] usb 1-1: selecting invalid altsetting 0 [ 113.558356][ T5828] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.707218][ T9] usb 1-1: USB disconnect, device number 8 [ 113.728507][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 113.732586][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.732609][ T5828] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.732666][ T5828] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.737689][ T5828] usb 2-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40 [ 113.737713][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.737731][ T5828] usb 2-1: Product: syz [ 113.737753][ T5828] usb 2-1: Manufacturer: syz [ 113.737766][ T5828] usb 2-1: SerialNumber: syz [ 114.023123][ T5828] usb 2-1: 0:2 : does not exist [ 114.138828][ T5828] usb 2-1: USB disconnect, device number 6 [ 114.388415][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.781993][ T5828] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 114.821670][ T6013] CIFS: VFS: UNC: missing share name [ 114.821698][ T6013] CIFS: VFS: Malformed UNC in devname [ 114.875053][ T6010] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 114.875069][ T6010] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 114.875093][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.1.89 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 114.875109][ T6010] Tainted: [L]=SOFTLOCKUP [ 114.875118][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.875124][ T6010] RIP: 0010:__schedule+0x4030/0x5550 [ 114.875140][ T6010] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 114.875150][ T6010] RSP: 0018:ffffc900051975c0 EFLAGS: 00010003 [ 114.875160][ T6010] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 114.875167][ T6010] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 114.875174][ T6010] RBP: ffffc900051977b8 R08: 0000000000000003 R09: 0000000000000004 [ 114.875181][ T6010] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 114.875189][ T6010] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 114.875196][ T6010] FS: 00007faf22d766c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 114.875205][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.875212][ T6010] CR2: 00007faf24b6a540 CR3: 000000002c2c4000 CR4: 00000000003526f0 [ 114.875223][ T6010] Call Trace: [ 114.875230][ T6010] [ 114.875240][ T6010] ? __pfx___schedule+0x10/0x10 [ 114.875253][ T6010] ? __lock_acquire+0x6b5/0x2d10 [ 114.875269][ T6010] schedule+0x164/0x360 [ 114.875281][ T6010] schedule_timeout+0xc3/0x2c0 [ 114.875292][ T6010] ? irqentry_exit+0x218/0x8c0 [ 114.875308][ T6010] ? __pfx_schedule_timeout+0x10/0x10 [ 114.875319][ T6010] ? preempt_schedule_thunk+0x16/0x40 [ 114.875335][ T6010] ? preempt_schedule_common+0x82/0xd0 [ 114.875346][ T6010] ? preempt_schedule_thunk+0x16/0x40 [ 114.875361][ T6010] ? wait_for_completion+0x274/0x5e0 [ 114.875373][ T6010] wait_for_completion+0x2cc/0x5e0 [ 114.875387][ T6010] ? __pfx_wait_for_completion+0x10/0x10 [ 114.875399][ T6010] ? generic_exec_single+0x191/0x430 [ 114.875412][ T6010] ? smp_call_function_single_async+0xaa/0x110 [ 114.875426][ T6010] rdmsrq_safe_on_cpu+0x18c/0x240 [ 114.875439][ T6010] ? irqentry_exit+0x218/0x8c0 [ 114.875451][ T6010] ? __pfx_rdmsrq_safe_on_cpu+0x10/0x10 [ 114.875463][ T6010] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 114.875475][ T6010] ? __might_fault+0xaf/0x130 [ 114.875489][ T6010] msr_read+0x13d/0x240 [ 114.875504][ T6010] ? __pfx_msr_read+0x10/0x10 [ 114.875519][ T6010] ? rw_verify_area+0x2ac/0x4e0 [ 114.875531][ T6010] ? __pfx_msr_read+0x10/0x10 [ 114.875545][ T6010] vfs_read+0x212/0xa80 [ 114.875557][ T6010] ? __pfx_vfs_read+0x10/0x10 [ 114.875569][ T6010] ? __fget_files+0x2a/0x420 [ 114.875586][ T6010] ? __fget_files+0x2a/0x420 [ 114.875595][ T6010] ? __fget_files+0x3a6/0x420 [ 114.875604][ T6010] ? __fget_files+0x2a/0x420 [ 114.875615][ T6010] ksys_read+0x156/0x270 [ 114.875627][ T6010] ? __pfx_ksys_read+0x10/0x10 [ 114.875639][ T6010] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 114.875655][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.875665][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.875675][ T6010] do_syscall_64+0x174/0x580 [ 114.875688][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.875698][ T6010] ? clear_bhb_loop+0x40/0x90 [ 114.875709][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.875719][ T6010] RIP: 0033:0x7faf24b1ce59 [ 114.875731][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.875739][ T6010] RSP: 002b:00007faf22d76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.875750][ T6010] RAX: ffffffffffffffda RBX: 00007faf24d95fa0 RCX: 00007faf24b1ce59 [ 114.875757][ T6010] RDX: 0000000000018ff8 RSI: 0000200000019680 RDI: 0000000000000005 [ 114.875763][ T6010] RBP: 00007faf24bb2e6f R08: 0000000000000000 R09: 0000000000000000 [ 114.875770][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.875776][ T6010] R13: 00007faf24d96038 R14: 00007faf24d95fa0 R15: 00007ffdf04ce938 [ 114.875786][ T6010] [ 114.875790][ T6010] Modules linked in: [ 114.875802][ T6010] ---[ end trace 0000000000000000 ]--- [ 114.875812][ T6010] RIP: 0010:__schedule+0x4030/0x5550 [ 114.875824][ T6010] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 114.875831][ T6010] RSP: 0018:ffffc900051975c0 EFLAGS: 00010003 [ 114.875839][ T6010] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 114.875846][ T6010] RDX: 0000000000000003 RSI: 0000000000000001 RDI: ffff8880b863c918 [ 114.875852][ T6010] RBP: ffffc900051977b8 R08: 0000000000000003 R09: 0000000000000004 [ 114.875858][ T6010] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b873c658 [ 114.875866][ T6010] R13: ffff888125b6b000 R14: 1ffff110170e7922 R15: 0000000000000014 [ 114.875873][ T6010] FS: 00007faf22d766c0(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 114.875883][ T6010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.875890][ T6010] CR2: 00007faf24b6a540 CR3: 000000002c2c4000 CR4: 00000000003526f0 [ 114.875900][ T6010] Kernel panic - not syncing: Fatal exception [ 114.876170][ T6010] Kernel Offset: disabled