last executing test programs: 3m42.702101183s ago: executing program 0 (id=213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) listen(r0, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close(0x3) 3m42.429309962s ago: executing program 0 (id=215): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r3) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 3m41.104765586s ago: executing program 0 (id=219): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r0, 0x2}], 0x1, 0x0, 0x0, 0x0) 3m40.830508606s ago: executing program 0 (id=223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x7, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0x8003000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x10, 0xff, 0x42, 0x5, 0x75, 0x3, 0x36, 0xfe, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x1, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x8}, {0x1, 0xeeee0000, 0x1c, 0x6, 0x2, 0x42, 0x0, 0xff, 0x3, 0x7, 0x9}, {0xf000, 0xd000, 0xf, 0x3, 0x12, 0x7, 0xa9, 0x8, 0x9, 0x9, 0xfa, 0x97}, {0xeeefa000, 0xdddd0000, 0xd, 0xa0, 0x1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x9}, {0x3000, 0xb000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0x7000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xb, 0x9, 0x2, 0x5, 0xb0, 0x81}, {0xeeef0000, 0x30}, {0x9000, 0x9}, 0x80000031, 0x0, 0xc000, 0x2024, 0x800000a, 0xc001, 0x100000, [0xe5b5, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m39.301000106s ago: executing program 0 (id=229): madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x1, 0x85, 0x2c, 0x8, 0x525, 0xa4a3, 0xfd97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0x8, 0xa, 0x0, 0xa6, 0x41, 0xa8, 0xed}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x0, 0x0}]}) 3m35.806349486s ago: executing program 0 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='common_pid > 0', 0xe) 3m20.56855844s ago: executing program 32 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='common_pid > 0', 0xe) 2m26.102098527s ago: executing program 5 (id=264): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x6a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 2m24.974987858s ago: executing program 5 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) 2m11.473254847s ago: executing program 1 (id=438): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 2m10.526228481s ago: executing program 1 (id=442): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 2m10.41309128s ago: executing program 1 (id=443): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m8.968299843s ago: executing program 33 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x42000000) 2m8.716510012s ago: executing program 1 (id=450): syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012200d4071040803dfe4000000010902b901010000003f09"], 0x0) 2m6.313411108s ago: executing program 1 (id=457): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c000280050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000000)={0x0, 0x23, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x6, 0x1, 0x203, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c030}, 0x20004080) 2m5.091970094s ago: executing program 1 (id=462): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)='a', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x12, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000006100)}, 0x53}], 0x1, 0x40, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) pread64(r7, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1m47.829071487s ago: executing program 34 (id=462): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)='a', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x12, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000006100)}, 0x53}], 0x1, 0x40, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) pread64(r7, 0x0, 0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1m1.352564841s ago: executing program 4 (id=647): writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) readlink(0x0, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) ioctl(r0, 0x3b8e, &(0x7f0000000580)="10") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) close_range(r2, 0xffffffffffffffff, 0x0) 1m1.082180722s ago: executing program 4 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(0x0, 0x9, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) 59.559772693s ago: executing program 4 (id=660): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\x92\b\xdc\xcc\xf0CM\x92\xbe\xe4\xb3,t\xf1\xf0\xcb\a\x97\xb2\xdd\xcd\x9dP\x9e\xd7\xe3/\xd2$#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x18, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 51.746898632s ago: executing program 4 (id=684): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xa5}, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @random="dd6bea1c19ce", {0x5, 0x81}}, 0x8000, 0x68, @random=0x2, @void, @val={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0x3, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0xff}}, [{0xdd, 0x9, "24621542d0621d5e94"}, {0xdd, 0x66, "a17807492d2eff164aea72aba62bd242d5819f6a67178ecde77bc73fcea6ba256a8833ef52b52e3b2faf8a8d0fefa7d2142db9fa01b4fb636b280d90192c799500b53445facf59878703abcfe1501b440be0e33f3755853e35c56aeb5c7085ca9dff78b92f55"}, {0xdd, 0xf6, "123c86e44e25ec9ec8a8fef0365b061c57795c6f25ec6a0f1e4541887bd8140576e0b9dec4aae8ef6d4251b46b9b1fc0828c900dec87b6adc2f6c5bb99a52a5dd9564f6b8e4699b1444b50c0a39dc75342b2754404d4a6d97b05d4b9bc8f5631d9a95ecc0f147a46d142b0739bb3cb3e35393f1f01685193bb4554a6bba5a22fabe8ef764b8e57d20e783c65e9c7b1e11639d230ca65625d4ee304078a1d97bee99515e812a7c5380eb9859a5a0b03853108a4e3ec0347d21d9438a4222dd57af083517d9798e7fd47d77d5a7469d4364585b7df22b9516054b087ea155d0907ac11be03306b6d7ee7ad1d3d002bc5cdc1eec7f19766"}, {0xdd, 0x6, "1934c33ff448"}]}, 0x1ad) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_io_uring_complete(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 36.46243787s ago: executing program 35 (id=684): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xa5}, @void, @void, @void, @void, @void}, 0x31) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000900)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @random="dd6bea1c19ce", {0x5, 0x81}}, 0x8000, 0x68, @random=0x2, @void, @val={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0x3, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x1, 0xff}}, [{0xdd, 0x9, "24621542d0621d5e94"}, {0xdd, 0x66, "a17807492d2eff164aea72aba62bd242d5819f6a67178ecde77bc73fcea6ba256a8833ef52b52e3b2faf8a8d0fefa7d2142db9fa01b4fb636b280d90192c799500b53445facf59878703abcfe1501b440be0e33f3755853e35c56aeb5c7085ca9dff78b92f55"}, {0xdd, 0xf6, "123c86e44e25ec9ec8a8fef0365b061c57795c6f25ec6a0f1e4541887bd8140576e0b9dec4aae8ef6d4251b46b9b1fc0828c900dec87b6adc2f6c5bb99a52a5dd9564f6b8e4699b1444b50c0a39dc75342b2754404d4a6d97b05d4b9bc8f5631d9a95ecc0f147a46d142b0739bb3cb3e35393f1f01685193bb4554a6bba5a22fabe8ef764b8e57d20e783c65e9c7b1e11639d230ca65625d4ee304078a1d97bee99515e812a7c5380eb9859a5a0b03853108a4e3ec0347d21d9438a4222dd57af083517d9798e7fd47d77d5a7469d4364585b7df22b9516054b087ea155d0907ac11be03306b6d7ee7ad1d3d002bc5cdc1eec7f19766"}, {0xdd, 0x6, "1934c33ff448"}]}, 0x1ad) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_io_uring_complete(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 12.426400623s ago: executing program 6 (id=802): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.163168539s ago: executing program 6 (id=806): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x104, 0x8080) syz_usb_connect$uac3(0x3, 0xeb, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd9, 0x3, 0x1, 0x6, 0x20, 0xa, {0x8, 0xb, 0x2, 0x1, 0x1, 0x26, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x3b, 0x3}, [@extension_unit={0x1d, 0x24, 0xa, 0x4, 0x5, [0x2, 0x0, 0x2, 0x1, 0x3, 0x3]}, @input_terminal={0x14, 0x24, 0x2, 0x1, 0x204, 0x5, 0x3, 0x0, 0x10, 0x1ff, 0x7f, 0x4f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0xa9, 0x4, 0x9, 0x4, 0x1, 0x2, 0x1b9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0xad, 0x2, {0xa, 0x25, 0x25, 0x7, 0xd4, 0x378d}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x8, 0x9, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x8001, 0x7, 0xf7}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6b, 0x0, 0x1, 0xf}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x468, 0xda, 0x4, 0x4, {0xa, 0x25, 0x25, 0x689, 0x10, 0xaf11}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x4, 0x9, 0x7f, 0xff, 0x1}, 0x1c, &(0x7f00000002c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x30, "0e3b8b84410e93f31e1e81ad7cbb7548"}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc68}}, {0xbe, &(0x7f00000003c0)=@string={0xbe, 0x3, "3aad42fc679a596cedd0f3b212a07a577d0e45c80db1c7e91f478947cab85148f99b6f29ddfc14611d7c6252cb1aa4ffaa15d7acf8733aa383b1490bb3546c663f19fa1ab966a0f321edf780d5563edc7247545d1f551d48b9f6993071f8d85405416a96add350384163aa00991fab682abc2447047329a9bffbc9d2bfb968eec1522a342bd6d37476ff1451029a04f23bcdf0c89d00d688776fb2929457e9fb27f317780e405ee5746ed19c16e9c5b46fc366dbbb85cd2953ae12bb"}}]}) syz_usb_ep_write(r1, 0x81, 0x2, &(0x7f0000000040)="10d6") syz_usb_ep_write(r0, 0x81, 0x1b, &(0x7f0000000140)="b9425bd023c63d4b7e172ce23a8706b66c78dd26900030fd1059bd") 9.472966241s ago: executing program 2 (id=808): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) lchown(&(0x7f0000000280)='./mnt\x00', 0x0, 0x0) 9.362876522s ago: executing program 2 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x40c0) 7.684281932s ago: executing program 3 (id=814): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x4, 0x1}, 0x10) 7.607496031s ago: executing program 7 (id=815): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, 0x0, 0x800) 7.520889552s ago: executing program 3 (id=816): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x40) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x8000) r5 = memfd_create(&(0x7f0000000100)='huge\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x10, r5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000010601010000000000000000030000010500019ee7c64b"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x2000c004) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.443738078s ago: executing program 2 (id=817): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 7.343690059s ago: executing program 6 (id=818): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) lchown(&(0x7f0000000280)='./mnt\x00', 0x0, 0x0) 7.341073064s ago: executing program 7 (id=819): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00'], 0x28}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 7.279620347s ago: executing program 6 (id=820): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) 7.117491677s ago: executing program 2 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 5.992875593s ago: executing program 6 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) io_submit(r3, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xc, r4, 0x0, 0x0, 0x6}]) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@local}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) io_getevents(r3, 0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5.991302283s ago: executing program 7 (id=823): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/132, 0x84}], 0x1) read(r1, &(0x7f0000000380)=""/66, 0x42) write$snddsp(r1, 0x0, 0x0) 5.990855266s ago: executing program 2 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), &(0x7f0000000100)={'U-', 0x7}, 0x16, 0x2) syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(0x0, 0x9, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, 0x0) socket$inet(0x2, 0x1, 0x100) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7e) io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000940)={0x3, 0x0, 0xffffffff, 0x2, 0xb3}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 5.602032451s ago: executing program 7 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write(r0, &(0x7f0000000380)='z', 0x1) 2.606934444s ago: executing program 2 (id=826): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="201504000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000980)={0x20, 0x15, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f00000014c0)={0x40, 0xa, 0x4, "b43b29fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x416, 0xc168, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x22, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2.308595652s ago: executing program 7 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 1.854053388s ago: executing program 6 (id=828): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828f27b6ea5ef0a53"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000001340)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)={0x40, 0x12, 0x14, "49e0612e64475a1b2141f518552ab67d28dcae40"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/241) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x6f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0xb, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "59f808a5"}, @local, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.632375838s ago: executing program 3 (id=829): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) lchown(&(0x7f0000000280)='./mnt\x00', 0x0, 0x0) 1.394524539s ago: executing program 3 (id=830): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 1.264176512s ago: executing program 7 (id=831): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1397, 0xbd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x40, 0x0, {0x8, 0xb, 0x1, 0x0, 0x1, 0x26, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7f, 0x5, 0x6, {0xa, 0x25, 0x25, 0x10000, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0xbf, 0xf7, {0xa, 0x25, 0x25, 0x200, 0x6, 0x6c8c}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040000010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x20002) ioctl$EVIOCSMASK(r3, 0x401c5820, &(0x7f0000000000)={0x1b, 0x0, 0x0}) syz_usb_connect(0x2, 0x8f, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201030c2408050600070d0a329ce20905860c0004f40804072501"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20c81e0000004d61501d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) 1.188840891s ago: executing program 3 (id=832): socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6a) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff2f}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x8004001}, 0x800) 0s ago: executing program 3 (id=833): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r1 = syz_usb_connect(0x5, 0xc7, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c000201000000090400000102060000052406000105240000000d240f0100000000000000000006241a0000000905810300000000000904019d080a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000000c0)=0x2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 52.897478][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.929493][ T5247] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. syzkaller login: [ 74.801904][ T5572] cgroup: Unknown subsys name 'net' [ 75.072932][ T5572] cgroup: Unknown subsys name 'cpuset' [ 75.128491][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.750503][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.443169][ T4901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.490056][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.493400][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.499945][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.523177][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.523934][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.525132][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.525422][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.527098][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.530928][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.539067][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.559077][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.562316][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.563039][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.579993][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.614636][ T5601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.633086][ T5601] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.635022][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.640539][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.654464][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.655445][ T5590] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.666368][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.670785][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.773212][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.775633][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.589376][ T5599] Bluetooth: hci1: command tx timeout [ 81.737945][ T5599] Bluetooth: hci4: command tx timeout [ 81.739710][ T5599] Bluetooth: hci3: command tx timeout [ 81.817981][ T5595] Bluetooth: hci2: command tx timeout [ 81.818738][ T5599] Bluetooth: hci0: command tx timeout [ 82.171262][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.172388][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.172575][ T5584] bridge_slave_0: entered allmulticast mode [ 82.176187][ T5584] bridge_slave_0: entered promiscuous mode [ 82.238762][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.239026][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.239214][ T5584] bridge_slave_1: entered allmulticast mode [ 82.241768][ T5584] bridge_slave_1: entered promiscuous mode [ 82.265526][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.265768][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.266270][ T5585] bridge_slave_0: entered allmulticast mode [ 82.269561][ T5585] bridge_slave_0: entered promiscuous mode [ 82.278856][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.278972][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.279217][ T5583] bridge_slave_0: entered allmulticast mode [ 82.281712][ T5583] bridge_slave_0: entered promiscuous mode [ 82.283870][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.283981][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.284149][ T5582] bridge_slave_0: entered allmulticast mode [ 82.292131][ T5582] bridge_slave_0: entered promiscuous mode [ 82.333566][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.333684][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.334229][ T5585] bridge_slave_1: entered allmulticast mode [ 82.336940][ T5585] bridge_slave_1: entered promiscuous mode [ 82.339209][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.339319][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.340972][ T5583] bridge_slave_1: entered allmulticast mode [ 82.343551][ T5583] bridge_slave_1: entered promiscuous mode [ 82.344787][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.344915][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.345403][ T5582] bridge_slave_1: entered allmulticast mode [ 82.349408][ T5582] bridge_slave_1: entered promiscuous mode [ 82.444736][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.499244][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.499705][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.499819][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.499965][ T5586] bridge_slave_0: entered allmulticast mode [ 82.502551][ T5586] bridge_slave_0: entered promiscuous mode [ 82.511147][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.516454][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.525757][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.549357][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.549475][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.549615][ T5586] bridge_slave_1: entered allmulticast mode [ 82.552436][ T5586] bridge_slave_1: entered promiscuous mode [ 82.557209][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.563189][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.566613][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.650999][ T5584] team0: Port device team_slave_0 added [ 82.702433][ T5584] team0: Port device team_slave_1 added [ 82.709444][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.715796][ T5585] team0: Port device team_slave_0 added [ 82.722860][ T5583] team0: Port device team_slave_0 added [ 82.729647][ T5582] team0: Port device team_slave_0 added [ 82.748529][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.752086][ T5585] team0: Port device team_slave_1 added [ 82.754875][ T5583] team0: Port device team_slave_1 added [ 82.760627][ T5582] team0: Port device team_slave_1 added [ 82.826720][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.826784][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.826805][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.898200][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.898517][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.898555][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.904189][ T5586] team0: Port device team_slave_0 added [ 82.905540][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.905553][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.905575][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.914331][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.914347][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.914369][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.925247][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.925262][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.925284][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.948211][ T5586] team0: Port device team_slave_1 added [ 82.949242][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.949255][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.949292][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.950878][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.950890][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.950912][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.955513][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.955528][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.955554][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.084370][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.084387][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.084410][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.174600][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.174618][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.174641][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.187165][ T5584] hsr_slave_0: entered promiscuous mode [ 83.190189][ T5584] hsr_slave_1: entered promiscuous mode [ 83.284023][ T5582] hsr_slave_0: entered promiscuous mode [ 83.285234][ T5582] hsr_slave_1: entered promiscuous mode [ 83.286176][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 83.290107][ T5582] Cannot create hsr debugfs directory [ 83.301981][ T5583] hsr_slave_0: entered promiscuous mode [ 83.303341][ T5583] hsr_slave_1: entered promiscuous mode [ 83.304200][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 83.304236][ T5583] Cannot create hsr debugfs directory [ 83.316574][ T5585] hsr_slave_0: entered promiscuous mode [ 83.318120][ T5585] hsr_slave_1: entered promiscuous mode [ 83.319346][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 83.319369][ T5585] Cannot create hsr debugfs directory [ 83.481424][ T5586] hsr_slave_0: entered promiscuous mode [ 83.483620][ T5586] hsr_slave_1: entered promiscuous mode [ 83.484425][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 83.484447][ T5586] Cannot create hsr debugfs directory [ 83.658075][ T5595] Bluetooth: hci1: command tx timeout [ 83.818025][ T5595] Bluetooth: hci3: command tx timeout [ 83.818186][ T5599] Bluetooth: hci4: command tx timeout [ 83.898467][ T5595] Bluetooth: hci2: command tx timeout [ 83.899607][ T5599] Bluetooth: hci0: command tx timeout [ 84.800879][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.837707][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.849984][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.881951][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.886657][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.921716][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.941784][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.981423][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.172687][ T5583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.205389][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.213427][ T5583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.243049][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.251297][ T5583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.282445][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.303287][ T5583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.341171][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.431430][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.461766][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.486118][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.514628][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.538924][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.574194][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.600113][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.630410][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.721482][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.738008][ T5595] Bluetooth: hci1: command tx timeout [ 85.769096][ T5585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.811040][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.824197][ T5585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.851670][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.870047][ T5585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.894288][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.899062][ T5595] Bluetooth: hci4: command tx timeout [ 85.899081][ T5599] Bluetooth: hci3: command tx timeout [ 85.924088][ T5585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.950691][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.979370][ T5599] Bluetooth: hci0: command tx timeout [ 85.988461][ T5599] Bluetooth: hci2: command tx timeout [ 86.072000][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.142037][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.143273][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.153601][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.191669][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.204761][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.243258][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.254903][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.280822][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.292129][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.293075][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.304372][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.322047][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.406813][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.492944][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.544504][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.553617][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.555738][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.610532][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.613456][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.713308][ T197] cfg80211: failed to load regulatory.db [ 86.738911][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.767399][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.796724][ T767] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.796961][ T767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.843775][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.843920][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.927641][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.960971][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.961192][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.985739][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.034708][ T767] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.036840][ T767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.136615][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.230444][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.230686][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.318444][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.318613][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.545263][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.818011][ T5599] Bluetooth: hci1: command tx timeout [ 87.981938][ T5599] Bluetooth: hci3: command tx timeout [ 87.982028][ T5599] Bluetooth: hci4: command tx timeout [ 88.058415][ T5595] Bluetooth: hci2: command tx timeout [ 88.059968][ T5595] Bluetooth: hci0: command tx timeout [ 88.586901][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.735316][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.791672][ T5584] veth0_vlan: entered promiscuous mode [ 88.815040][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.861987][ T5584] veth1_vlan: entered promiscuous mode [ 88.912162][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.962207][ T5583] veth0_vlan: entered promiscuous mode [ 89.010606][ T5582] veth0_vlan: entered promiscuous mode [ 89.018971][ T5583] veth1_vlan: entered promiscuous mode [ 89.045921][ T5584] veth0_macvtap: entered promiscuous mode [ 89.076841][ T5585] veth0_vlan: entered promiscuous mode [ 89.084488][ T5584] veth1_macvtap: entered promiscuous mode [ 89.091091][ T5582] veth1_vlan: entered promiscuous mode [ 89.149660][ T5585] veth1_vlan: entered promiscuous mode [ 89.164275][ T5586] veth0_vlan: entered promiscuous mode [ 89.181839][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.220457][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.231634][ T5583] veth0_macvtap: entered promiscuous mode [ 89.236552][ T5586] veth1_vlan: entered promiscuous mode [ 89.267083][ T5583] veth1_macvtap: entered promiscuous mode [ 89.297660][ T5582] veth0_macvtap: entered promiscuous mode [ 89.399964][ T5582] veth1_macvtap: entered promiscuous mode [ 89.413969][ T5585] veth0_macvtap: entered promiscuous mode [ 89.424990][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.505129][ T5585] veth1_macvtap: entered promiscuous mode [ 89.537596][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.716094][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.726418][ T5586] veth0_macvtap: entered promiscuous mode [ 89.774235][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.782377][ T5586] veth1_macvtap: entered promiscuous mode [ 89.834342][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.924511][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.931773][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.953130][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.276771][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.386843][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.479212][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.487179][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.774307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.782307][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.932087][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.301253][ T1919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.301319][ T1919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.506039][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.506106][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.519560][ T1919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.520042][ T1919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.520216][ T1919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.664925][ T1864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.677493][ T1864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.831121][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.831249][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.078582][ T5723] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.181674][ T1919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.181694][ T1919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.286412][ T5723] usb 5-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 95.310931][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.322700][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.415856][ T5723] usb 5-1: config 0 descriptor?? [ 95.679105][ T5723] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 95.855035][ T1846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.865422][ T1846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.952030][ T5809] process 'syz.2.10' launched '/dev/fd/3' with NULL argv: empty string added [ 96.416099][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.574549][ T5723] pwc: recv_control_msg error -71 req 02 val 2b00 [ 96.607445][ T5723] pwc: recv_control_msg error -71 req 02 val 2700 [ 96.617294][ T5723] pwc: recv_control_msg error -71 req 04 val 1700 [ 96.625752][ T5723] pwc: recv_control_msg error -71 req 02 val 2c00 [ 96.637764][ T5723] pwc: recv_control_msg error -71 req 04 val 1000 [ 96.645772][ T5723] pwc: recv_control_msg error -71 req 04 val 1300 [ 96.646191][ T5723] pwc: recv_control_msg error -71 req 04 val 1400 [ 96.682510][ T767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.682603][ T767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.700332][ T5723] pwc: recv_control_msg error -71 req 02 val 2000 [ 96.707255][ T5723] pwc: recv_control_msg error -71 req 02 val 2100 [ 96.712283][ T5723] pwc: recv_control_msg error -71 req 02 val 2200 [ 96.725865][ T5723] pwc: recv_control_msg error -71 req 06 val 0600 [ 96.731732][ T779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.731963][ T779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.732403][ T779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.738017][ T5723] pwc: recv_control_msg error -71 req 04 val 1500 [ 96.749519][ T5723] pwc: recv_control_msg error -71 req 02 val 2500 [ 96.759438][ T5723] pwc: recv_control_msg error -71 req 02 val 2400 [ 96.779074][ T5723] pwc: recv_control_msg error -71 req 02 val 2600 [ 96.787427][ T5723] pwc: recv_control_msg error -71 req 02 val 2900 [ 96.795133][ T5723] pwc: recv_control_msg error -71 req 02 val 2800 [ 96.804665][ T5723] pwc: recv_control_msg error -71 req 04 val 1100 [ 96.811948][ T5723] pwc: recv_control_msg error -71 req 04 val 1200 [ 96.857110][ T5723] pwc: Registered as video103. [ 96.877519][ T5723] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 96.945316][ T5723] usb 5-1: USB disconnect, device number 2 [ 97.137202][ T5815] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'. [ 97.188955][ T5815] Zero length message leads to an empty skb [ 97.612190][ T779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.902783][ T1029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.903901][ T1029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.910083][ T1029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.212578][ T779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.212853][ T779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.213038][ T779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.213338][ T779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.575232][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.577082][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.577275][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.901289][ T5591] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.094608][ T5591] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 99.200487][ T5591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.210130][ T5591] usb 1-1: Product: syz [ 99.210150][ T5591] usb 1-1: Manufacturer: syz [ 99.210163][ T5591] usb 1-1: SerialNumber: syz [ 100.169076][ T5832] syzkaller0: entered promiscuous mode [ 100.174713][ T5832] syzkaller0: entered allmulticast mode [ 102.162578][ T5591] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 102.178134][ T5591] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 102.178161][ T5591] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.278394][ T5591] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 102.922666][ T5591] usb 1-1: USB disconnect, device number 2 [ 103.552377][ T5855] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.218639][ T89] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.401474][ T5861] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 107.376462][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.010999][ T5893] ======================================================= [ 110.010999][ T5893] WARNING: The mand mount option has been deprecated and [ 110.010999][ T5893] and is ignored by this kernel. Remove the mand [ 110.010999][ T5893] option from the mount to silence this warning. [ 110.010999][ T5893] ======================================================= [ 110.368597][ T37] audit: type=1326 audit(1788498073.393:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5894 comm="syz.0.32" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdea13ce159 code=0x0 [ 110.595298][ T5699] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.783545][ T5699] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 110.832324][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.840479][ T5699] usb 5-1: Product: syz [ 110.840499][ T5699] usb 5-1: Manufacturer: syz [ 110.840512][ T5699] usb 5-1: SerialNumber: syz [ 112.490584][ T197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.628778][ T197] usb 3-1: device descriptor read/64, error -71 [ 112.793333][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 112.809977][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 113.048148][ T197] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.280431][ T197] usb 3-1: device descriptor read/64, error -71 [ 113.390628][ T197] usb usb3-port1: attempt power cycle [ 113.618014][ T999] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 113.857965][ T197] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.960274][ T999] usb 1-1: not running at top speed; connect to a high speed hub [ 113.971158][ T999] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 113.980135][ T999] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 114.007176][ T999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.009834][ T999] usb 1-1: Product: syz [ 114.009850][ T999] usb 1-1: Manufacturer: syz [ 114.009862][ T999] usb 1-1: SerialNumber: syz [ 114.068225][ T197] usb 3-1: device not accepting address 4, error -71 [ 114.136349][ T999] oti6858 1-1:1.0: oti6858 converter detected [ 118.243885][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 118.252148][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 118.259322][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 118.259354][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 118.260434][ T5699] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 118.306673][ T999] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 118.399692][ T5699] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 118.437226][ T999] usb 1-1: USB disconnect, device number 3 [ 118.489465][ T5699] usb 5-1: USB disconnect, device number 3 [ 118.647971][ T5723] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.850950][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 118.864275][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.865838][ T5723] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 118.893061][ T999] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 118.897690][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.897716][ T5723] usb 4-1: Product: syz [ 118.897729][ T5723] usb 4-1: Manufacturer: syz [ 118.897742][ T5723] usb 4-1: SerialNumber: syz [ 118.959799][ T999] oti6858 1-1:1.0: device disconnected [ 119.998325][ T5723] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.020144][ T5723] usb 4-1: MIDIStreaming interface descriptor not found [ 120.331773][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.57'. [ 126.763987][ T5723] usb 4-1: USB disconnect, device number 2 [ 126.869210][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.897903][ T5708] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.903350][ T6018] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 129.893184][ T6001] syzkaller0: entered promiscuous mode [ 129.893265][ T6001] syzkaller0: entered allmulticast mode [ 132.987976][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016657][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275629][ T6032] tipc: Started in network mode [ 133.281132][ T6032] tipc: Node identity a6fec9ca55c2, cluster identity 4711 [ 133.281580][ T6032] tipc: Enabled bearer , priority 0 [ 133.358988][ T6050] netlink: 36 bytes leftover after parsing attributes in process `syz.4.71'. [ 133.972507][ T6033] syzkaller0: entered promiscuous mode [ 133.977857][ T6033] syzkaller0: entered allmulticast mode [ 134.008248][ T6040] tipc: Resetting bearer [ 134.037944][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.057496][ T6029] tipc: Resetting bearer [ 134.717887][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.720777][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 134.762249][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.762357][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.823191][ T9] usb 1-1: config 0 descriptor?? [ 134.884604][ T6029] tipc: Disabling bearer [ 135.169210][ T197] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.142684][ T197] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 136.158315][ T197] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.159181][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.198452][ T5708] tipc: Node number set to 4080847306 [ 136.213025][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 136.213714][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 136.213744][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 136.213768][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 136.213790][ T9] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 136.283944][ T9] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 138.436252][ T197] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 138.661336][ T197] wwan wwan0: port wwan0qmi0 attached [ 139.691069][ T9] usb 1-1: USB disconnect, device number 5 [ 141.170625][ T197] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 22:6a:91:5f:41:35 [ 141.186923][ T197] usb 4-1: USB disconnect, device number 3 [ 141.218565][ T197] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 144.845402][ T197] wwan wwan0: port wwan0qmi0 disconnected [ 146.370060][ T5708] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 146.534041][ T5708] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.544740][ T5708] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.544769][ T5708] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.544809][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.973312][ T5708] usb 2-1: usb_control_msg returned -32 [ 148.977928][ T5708] usbtmc 2-1:16.0: can't read capabilities [ 149.016636][ T5708] usb 2-1: USB disconnect, device number 2 [ 149.559436][ T999] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.720672][ T999] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 149.722197][ T999] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 149.722220][ T999] usb 1-1: config 1 has no interface number 0 [ 149.725692][ T999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.725714][ T999] usb 1-1: Product: syz [ 149.725727][ T999] usb 1-1: Manufacturer: syz [ 149.725739][ T999] usb 1-1: SerialNumber: syz [ 150.945888][ T6163] use of bytesused == 0 is deprecated and will be removed in the future, [ 150.945905][ T6163] use the actual size instead. [ 150.947983][ T999] usb 1-1: 3:1 : does not exist [ 150.948002][ T999] usb 1-1: 3:2 : does not exist [ 151.772069][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'. [ 151.969874][ T999] usb 1-1: USB disconnect, device number 6 [ 152.141778][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.668083][ T999] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.828732][ T999] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 153.839420][ T999] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 153.839466][ T999] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 153.839492][ T999] usb 5-1: config 1 interface 0 has no altsetting 0 [ 153.845633][ T999] usb 5-1: string descriptor 0 read error: -22 [ 153.845772][ T999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.032166][ T999] usbhid 5-1:1.0: can't add hid device: -71 [ 156.052783][ T999] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 156.102755][ T999] usb 5-1: USB disconnect, device number 4 [ 159.047928][ T5591] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.528725][ T5591] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 159.530042][ T5591] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 159.530064][ T5591] usb 3-1: config 0 has no interface number 0 [ 159.530105][ T5591] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.530128][ T5591] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.530151][ T5591] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.530187][ T5591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.543639][ T5591] usb 3-1: config 0 descriptor?? [ 159.544644][ T6216] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.042260][ T6231] jffs2: notice: (6231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.378136][ T5591] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input6 [ 161.710243][ T5591] usb 3-1: USB disconnect, device number 6 [ 161.710331][ C0] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 162.508619][ T6188] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 162.520847][ T6188] syzkaller0: entered promiscuous mode [ 162.520875][ T6188] syzkaller0: entered allmulticast mode [ 163.473859][ T197] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.508678][ T197] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 164.526247][ T197] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 164.527868][ T197] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 164.527898][ T197] usb 5-1: config 1 interface 0 has no altsetting 0 [ 164.561343][ T197] usb 5-1: string descriptor 0 read error: -22 [ 164.562694][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.974516][ T197] usbhid 5-1:1.0: can't add hid device: -71 [ 165.974670][ T197] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 165.993146][ T6239] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 166.007111][ T197] usb 5-1: USB disconnect, device number 5 [ 166.129954][ T6239] usb 2-1: device descriptor read/64, error -71 [ 166.279442][ T6270] binder: 6269:6270 ioctl c018620c 200000000540 returned -1 [ 166.353940][ T6270] bridge_slave_0: left allmulticast mode [ 166.354024][ T6270] bridge_slave_0: left promiscuous mode [ 166.360185][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.181074][ T6239] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.287905][ T999] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.767877][ T6239] usb 2-1: device descriptor read/64, error -71 [ 168.045836][ T6239] usb usb2-port1: attempt power cycle [ 168.190616][ T999] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.193199][ T999] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.193228][ T999] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.193249][ T999] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.199017][ T999] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.199041][ T999] usb 5-1: Product: syz [ 168.199054][ T999] usb 5-1: Manufacturer: syz [ 168.199067][ T999] usb 5-1: SerialNumber: syz [ 168.259534][ T999] usb 5-1: config 0 descriptor?? [ 168.275107][ T999] usb 5-1: selecting invalid altsetting 0 [ 168.361527][ T6270] bridge_slave_1: left allmulticast mode [ 168.361610][ T6270] bridge_slave_1: left promiscuous mode [ 168.361837][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.633608][ T6297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.638360][ T999] usb 5-1: USB disconnect, device number 6 [ 171.773037][ T6270] bond0: (slave bond_slave_0): Releasing backup interface [ 171.876465][ T6270] bond0: (slave bond_slave_1): Releasing backup interface [ 173.178725][ T6270] team0: Port device team_slave_0 removed [ 173.240225][ T6270] team0: Port device team_slave_1 removed [ 173.256303][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.265575][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.292910][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.292973][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.678942][ T6270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 173.928195][ T6271] tipc: Enabling of bearer rejected, failed to enable media [ 175.767236][ T999] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.996028][ T999] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 176.001732][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.001762][ T999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.001798][ T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.103823][ T999] usb 5-1: config 0 descriptor?? [ 176.239964][ T999] usbhid 5-1:0.0: can't add hid device: -71 [ 176.240117][ T999] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 176.333782][ T999] usb 5-1: USB disconnect, device number 7 [ 177.668885][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 177.838143][ T5723] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 177.846601][ T36] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 177.860404][ T36] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 177.873282][ T36] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 177.873316][ T36] usb 4-1: config 1 interface 0 has no altsetting 0 [ 177.905472][ T36] usb 4-1: string descriptor 0 read error: -22 [ 177.911556][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.000470][ T5723] usb 1-1: device descriptor read/64, error -71 [ 178.063110][ T6348] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.261922][ T5723] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.382067][ T6238] IPVS: starting estimator thread 0... [ 178.418262][ T5723] usb 1-1: device descriptor read/64, error -71 [ 178.508109][ T6353] IPVS: using max 10 ests per chain, 24000 per kthread [ 178.543139][ T5723] usb usb1-port1: attempt power cycle [ 178.872120][ T36] usbhid 4-1:1.0: can't add hid device: -71 [ 178.879381][ T36] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 178.924331][ T5723] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 178.948358][ T36] usb 4-1: USB disconnect, device number 4 [ 178.954447][ T5723] usb 1-1: device descriptor read/8, error -71 [ 179.217961][ T5723] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.239355][ T5723] usb 1-1: device descriptor read/8, error -71 [ 179.358979][ T5723] usb usb1-port1: unable to enumerate USB device [ 179.491024][ T6363] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.567926][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.395982][ T36] usb 3-1: device descriptor read/64, error -71 [ 181.218971][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.086209][ T36] usb 3-1: device descriptor read/64, error -71 [ 182.352524][ T36] usb usb3-port1: attempt power cycle [ 185.867928][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 186.008081][ T999] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.027870][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 186.033889][ T5723] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 186.035891][ T5723] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 186.089737][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 186.091413][ T5723] usb 2-1: Product: syz [ 186.091429][ T5723] usb 2-1: Manufacturer: syz [ 186.091442][ T5723] usb 2-1: SerialNumber: syz [ 186.148346][ T999] usb 4-1: device descriptor read/64, error -71 [ 186.181942][ T5723] usb 2-1: config 0 descriptor?? [ 186.191410][ T6402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.280893][ T5723] hub 2-1:0.0: bad descriptor, ignoring hub [ 186.288052][ T5723] hub 2-1:0.0: probe with driver hub failed with error -5 [ 186.402906][ T999] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.547973][ T999] usb 4-1: device descriptor read/64, error -71 [ 186.661935][ T999] usb usb4-port1: attempt power cycle [ 186.698109][ T197] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.837972][ T197] usb 3-1: device descriptor read/64, error -71 [ 186.855220][ T6416] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.030549][ T999] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 187.069312][ T999] usb 4-1: device descriptor read/8, error -71 [ 187.091752][ T197] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.263908][ T197] usb 3-1: device descriptor read/64, error -71 [ 187.348429][ T999] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.369199][ T197] usb usb3-port1: attempt power cycle [ 187.383130][ T999] usb 4-1: device descriptor read/8, error -71 [ 187.489264][ T999] usb usb4-port1: unable to enumerate USB device [ 187.718593][ T197] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.742759][ T197] usb 3-1: device descriptor read/8, error -71 [ 188.807907][ T197] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 188.828598][ T197] usb 3-1: device descriptor read/8, error -71 [ 188.883994][ T6239] usb 2-1: USB disconnect, device number 6 [ 188.944229][ T197] usb usb3-port1: unable to enumerate USB device [ 190.427913][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 190.931348][ T31] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 191.245926][ T31] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 191.254905][ T31] usb 3-1: config 1 has no interface number 0 [ 191.406233][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.417625][ T31] usb 3-1: Product: syz [ 191.417645][ T31] usb 3-1: Manufacturer: syz [ 191.417659][ T31] usb 3-1: SerialNumber: syz [ 191.506043][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.565872][ T31] usb 3-1: 3:1 : does not exist [ 191.573493][ T31] usb 3-1: 3:2 : does not exist [ 192.551190][ T6463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 194.929079][ T6239] usb 3-1: USB disconnect, device number 14 [ 194.952828][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.952905][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.007959][ T5723] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 195.137955][ T5723] usb 4-1: device descriptor read/64, error -71 [ 195.399259][ T5723] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.528026][ T5723] usb 4-1: device descriptor read/64, error -71 [ 195.648330][ T5723] usb usb4-port1: attempt power cycle [ 196.099482][ T5723] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 196.118949][ T5723] usb 4-1: device descriptor read/8, error -71 [ 196.368188][ T5723] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.389409][ T5723] usb 4-1: device descriptor read/8, error -71 [ 196.684364][ T5723] usb usb4-port1: unable to enumerate USB device [ 198.042569][ T6501] ubi0: attaching mtd0 [ 198.143791][ T6501] ubi0: scanning is finished [ 198.144218][ T6501] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 200.068023][ T999] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 200.248794][ T999] usb 3-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 200.259788][ T999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.259818][ T999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 200.259859][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.333454][ T999] usb 3-1: config 0 descriptor?? [ 200.341587][ T6516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.384937][ T6501] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 202.039736][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039815][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039848][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039871][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039895][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039918][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039939][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039962][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.039984][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.040006][ T999] wacom 0003:056A:5012.0002: unknown main item tag 0x0 [ 202.042085][ T999] wacom 0003:056A:5012.0002: ignoring exceeding usage max [ 202.130120][ T999] wacom 0003:056A:5012.0002: reserved main item tag 0xd [ 202.170008][ T999] wacom 0003:056A:5012.0002: Unknown device_type for 'HID 056a:5012'. Ignoring. [ 202.197928][ T197] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 202.208268][ T999] usb 3-1: USB disconnect, device number 15 [ 203.661664][ T6540] syz.3.210 (6540) used greatest stack depth: 18888 bytes left [ 203.662194][ T197] usb 5-1: device descriptor read/64, error -71 [ 203.907943][ T197] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.257933][ T197] usb 5-1: device descriptor read/64, error -71 [ 205.023433][ T197] usb usb5-port1: attempt power cycle [ 206.699617][ T4901] Bluetooth: hci3: command 0x0406 tx timeout [ 207.077909][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 207.078107][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 207.078228][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 208.240648][ T5599] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 209.590846][ T6607] binder_alloc: 6597: binder_alloc_buf, no vma [ 209.953149][ T6239] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 210.577098][ T6617] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.408062][ T6239] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 215.367954][ T6239] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 215.781160][ T6239] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.792411][ T6239] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.792443][ T6239] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.792486][ T6239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.937743][ T6239] usb 2-1: config 0 descriptor?? [ 217.169911][ T6657] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.194756][ T6239] sony 0003:054C:0268.0003: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 218.213002][ T6239] sony 0003:054C:0268.0003: failed to claim input [ 218.250200][ T6239] usb 2-1: USB disconnect, device number 7 [ 218.800333][ T6663] fido_id[6663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 220.348194][ T999] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 220.946124][ T999] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 221.117729][ T999] usb 5-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 221.117990][ T999] usb 5-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 221.118086][ T999] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.684118][ T999] usb 5-1: string descriptor 0 read error: -71 [ 221.684244][ T999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.733404][ T999] usb 5-1: can't set config #1, error -71 [ 221.907490][ T999] usb 5-1: USB disconnect, device number 11 [ 224.979922][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 225.001870][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 225.054564][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 225.077526][ T6705] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 225.094146][ T6705] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 225.117400][ T6705] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 225.146227][ T6705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 225.207008][ T6705] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 225.773722][ T6713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.028452][ T5723] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.053894][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 226.075259][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 226.087678][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 226.110743][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 226.121618][ T6705] hsr0 speed is unknown, defaulting to 1000 [ 226.187958][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 226.194011][ T5723] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.196662][ T5723] usb 5-1: config index 0 descriptor too short (expected 292, got 36) [ 226.196688][ T5723] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 226.196704][ T5723] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.196721][ T5723] usb 5-1: config 0 has no interface number 0 [ 226.196763][ T5723] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 226.196783][ T5723] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.196807][ T5723] usb 5-1: config 0 interface 184 has no altsetting 0 [ 226.272077][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.280295][ T5723] usb 5-1: Product: syz [ 226.280315][ T5723] usb 5-1: Manufacturer: syz [ 226.280326][ T5723] usb 5-1: SerialNumber: syz [ 226.305589][ T5723] usb 5-1: config 0 descriptor?? [ 226.320039][ T5723] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 226.330486][ T5723] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 226.526026][ T5723] usb 5-1: USB disconnect, device number 12 [ 226.597130][ T5591] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 226.736962][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.768734][ T5591] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 226.775214][ T5591] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 226.775261][ T5591] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 226.775285][ T5591] usb 2-1: config 1 interface 0 has no altsetting 0 [ 226.792517][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.799584][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.803632][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.805224][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.853364][ T5591] usb 2-1: string descriptor 0 read error: -22 [ 226.853551][ T5591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.637711][ T5591] usbhid 2-1:1.0: can't add hid device: -71 [ 228.638044][ T5591] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 228.644770][ T5591] usb 2-1: USB disconnect, device number 8 [ 228.749300][ T6746] syzkaller0: entered promiscuous mode [ 228.749396][ T6746] syzkaller0: entered allmulticast mode [ 228.798049][ T5844] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.798133][ T5844] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.798168][ T5844] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.798201][ T5844] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.744904][ T5601] Bluetooth: hci5: command tx timeout [ 231.818855][ T5601] Bluetooth: hci5: command tx timeout [ 231.895809][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.010927][ T5601] Bluetooth: hci5: command tx timeout [ 234.510361][ T6733] hsr0 speed is unknown, defaulting to 1000 [ 234.614993][ T5723] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.627898][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 235.634323][ T5723] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 235.649865][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.659281][ T5723] usb 3-1: Product: syz [ 235.659300][ T5723] usb 3-1: Manufacturer: syz [ 235.659314][ T5723] usb 3-1: SerialNumber: syz [ 235.712138][ T5723] usb 3-1: config 0 descriptor?? [ 235.801663][ T5723] usb 3-1: selecting invalid altsetting 1 [ 235.813087][ T5723] technisat-usb2: could not set alternate setting to 0 [ 236.037066][ T5723] technisat-usb2: firmware version: 0.0 [ 236.042727][ T5723] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 236.068904][ T5590] Bluetooth: hci5: command tx timeout [ 236.078074][ T197] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.259541][ T197] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 236.261910][ T197] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 236.262246][ T197] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 236.262276][ T197] usb 2-1: config 1 interface 0 has no altsetting 0 [ 236.303342][ T197] usb 2-1: string descriptor 0 read error: -22 [ 236.303501][ T197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.456783][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.556432][ T5723] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.573137][ T5723] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 236.573243][ T5723] usb 3-1: media controller created [ 236.574346][ T5723] technisat-usb2: i2c-error: out failed 53 = -22 [ 236.574487][ T5723] dvb-usb: MAC address reading failed. [ 236.670797][ T5723] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.700296][ T6799] technisat-usb2: i2c-error: out failed 41 = -22 [ 237.312655][ T5723] DVB: Unable to find symbol stv090x_attach() [ 237.313185][ T5723] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 237.606660][ T6834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.661549][ T5723] rc_core: IR keymap rc-technisat-usb2 not found [ 237.670589][ T5723] Registered IR keymap rc-empty [ 237.706489][ T5723] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 237.743738][ T5723] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input11 [ 237.805518][ T5723] dvb-usb: schedule remote query interval to 100 msecs. [ 237.814995][ T5723] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 237.836269][ T5723] usb 3-1: USB disconnect, device number 16 [ 239.000235][ T6827] syzkaller0: entered promiscuous mode [ 239.004352][ T6827] syzkaller0: entered allmulticast mode [ 239.157127][ T197] usbhid 2-1:1.0: can't add hid device: -71 [ 239.157284][ T197] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 239.298026][ T197] usb 2-1: USB disconnect, device number 9 [ 239.371570][ T5723] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 241.307205][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.296'. [ 241.307244][ T6865] block nbd0: Unsupported socket: should be TCP or UNIX. [ 241.526787][ T6239] hid_parser_main: 443 callbacks suppressed [ 241.534250][ T6239] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 241.692174][ T5591] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 241.703607][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.966441][ T5591] usb 2-1: unable to get BOS descriptor or descriptor too short [ 241.966542][ T5591] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 241.967705][ T5591] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 241.967728][ T5591] usb 2-1: config 2 has no interface number 0 [ 241.967757][ T5591] usb 2-1: config 2 interface 8 has no altsetting 0 [ 241.996071][ T5591] usb 2-1: string descriptor 0 read error: -22 [ 241.996194][ T5591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.040383][ T6239] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.203367][ T5591] usbtest 2-1:2.8: Linux user mode ISO test driver [ 242.210051][ T5591] usbtest 2-1:2.8: low-speed {control} tests [ 242.337943][ T5699] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 242.883256][ T5699] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 242.888317][ T5699] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.888371][ T5699] usb 4-1: config 0 has no interface number 0 [ 242.892148][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.892284][ T5699] usb 4-1: Product: syz [ 242.892298][ T5699] usb 4-1: Manufacturer: syz [ 242.892312][ T5699] usb 4-1: SerialNumber: syz [ 242.955837][ T5699] usb 4-1: config 0 descriptor?? [ 243.129180][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.171617][ T5699] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 243.184267][ T5699] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.184725][ T5699] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 243.184778][ T5699] usb 4-1: media controller created [ 243.423934][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.670887][ T6239] usb 2-1: USB disconnect, device number 10 [ 244.991446][ T6902] FAULT_INJECTION: forcing a failure. [ 244.991446][ T6902] name failslab, interval 1, probability 0, space 0, times 1 [ 245.004288][ T6902] CPU: 0 UID: 0 PID: 6902 Comm: syz.2.308 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 245.004317][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.004336][ T6902] Call Trace: [ 245.004344][ T6902] [ 245.004353][ T6902] dump_stack_lvl+0xe8/0x150 [ 245.004387][ T6902] should_fail_ex+0x46b/0x600 [ 245.004414][ T6902] should_failslab+0xa8/0x100 [ 245.004443][ T6902] __kvmalloc_node_noprof+0x176/0x890 [ 245.004476][ T6902] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 245.004499][ T6902] ? bpf_int_jit_compile+0x5af/0x17e0 [ 245.004525][ T6902] ? bpf_int_jit_compile+0x5af/0x17e0 [ 245.004557][ T6902] bpf_int_jit_compile+0x5af/0x17e0 [ 245.004600][ T6902] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 245.004637][ T6902] ? bpf_prepare_filter+0xd5d/0x12d0 [ 245.004659][ T6902] __bpf_prog_select_runtime+0x53e/0xc40 [ 245.004680][ T6902] ? bpf_prog_realloc+0x19b/0x240 [ 245.004707][ T6902] bpf_prepare_filter+0x10df/0x12d0 [ 245.004731][ T6902] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.004760][ T6902] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 245.004780][ T6902] ? __asan_memcpy+0x40/0x70 [ 245.004806][ T6902] bpf_prog_create_from_user+0x2c6/0x440 [ 245.004825][ T6902] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.004854][ T6902] do_seccomp+0x770/0xd30 [ 245.004885][ T6902] ? __se_sys_futex+0x3a8/0x450 [ 245.004912][ T6902] ? __pfx_do_seccomp+0x10/0x10 [ 245.004942][ T6902] ? rcu_is_watching+0x16/0xb0 [ 245.004978][ T6902] do_syscall_64+0x166/0x520 [ 245.004999][ T6902] ? trace_irq_disable+0x3b/0x140 [ 245.005020][ T6902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.005038][ T6902] ? clear_bhb_loop+0x70/0xc0 [ 245.005065][ T6902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.005084][ T6902] RIP: 0033:0x7f2bb479e159 [ 245.005108][ T6902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.005123][ T6902] RSP: 002b:00007f2bb29f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.005148][ T6902] RAX: ffffffffffffffda RBX: 00007f2bb4a25fa0 RCX: 00007f2bb479e159 [ 245.005163][ T6902] RDX: 0000200000000140 RSI: 000000000000001d RDI: 0000000000000001 [ 245.005175][ T6902] RBP: 00007f2bb4835024 R08: 0000000000000000 R09: 0000000000000000 [ 245.005187][ T6902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.005198][ T6902] R13: 00007f2bb4a26038 R14: 00007f2bb4a25fa0 R15: 00007ffc484c7698 [ 245.005228][ T6902] [ 245.203283][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.363666][ T5699] usb 4-1: USB disconnect, device number 13 [ 245.375447][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 246.208637][ T5597] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 246.221172][ T6239] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 246.315933][ T37] audit: type=1326 audit(1788498209.313:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.1.314" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb834ee159 code=0x0 [ 246.379727][ T5597] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 246.390363][ T5597] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.390387][ T5597] usb 3-1: config 0 has no interfaces? [ 246.390416][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.396524][ T5597] usb 3-1: config 0 descriptor?? [ 246.468631][ T6239] usb 5-1: Using ep0 maxpacket: 8 [ 246.489285][ T6239] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.489392][ T6239] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 246.518728][ T6239] usb 5-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 246.518796][ T6239] usb 5-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 246.534518][ T6239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.534545][ T6239] usb 5-1: Product: syz [ 246.534557][ T6239] usb 5-1: Manufacturer: syz [ 246.534569][ T6239] usb 5-1: SerialNumber: syz [ 246.690577][ T197] usb 3-1: USB disconnect, device number 17 [ 247.373128][ T5597] hsr0 speed is unknown, defaulting to 1000 [ 248.302180][ T6733] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.302356][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.302550][ T6733] bridge_slave_0: entered allmulticast mode [ 248.315925][ T6733] bridge_slave_0: entered promiscuous mode [ 248.405212][ T6239] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 248.511671][ T6733] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.511865][ T6733] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.512050][ T6733] bridge_slave_1: entered allmulticast mode [ 248.527009][ T6733] bridge_slave_1: entered promiscuous mode [ 248.851351][ T6239] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.902225][ T6733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.923986][ T6733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.944848][ T6239] usb 5-1: device firmware changed [ 249.060409][ T6239] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 249.088062][ T6239] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 249.128497][ T13] bridge_slave_1: left allmulticast mode [ 249.144392][ T13] bridge_slave_1: left promiscuous mode [ 249.166184][ T6239] usb 5-1: USB disconnect, device number 13 [ 249.179487][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.597669][ T197] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 249.597693][ T197] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 249.687669][ T13] bridge_slave_0: left allmulticast mode [ 249.705556][ T13] bridge_slave_0: left promiscuous mode [ 249.706235][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.088535][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.171622][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.230082][ T13] bond0 (unregistering): Released all slaves [ 251.361190][ T6946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.647192][ T6733] team0: Port device team_slave_0 added [ 251.659705][ T6733] team0: Port device team_slave_1 added [ 251.707060][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.714149][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.714175][ T6733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.717324][ T6733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.717339][ T6733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.717363][ T6733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.791440][ T37] audit: type=1326 audit(1788498214.773:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6981 comm="syz.4.326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f013238e159 code=0x0 [ 252.423424][ T6733] hsr_slave_0: entered promiscuous mode [ 252.481366][ T6733] hsr_slave_1: entered promiscuous mode [ 252.487309][ T6733] debugfs: 'hsr0' already exists in 'hsr' [ 252.487336][ T6733] Cannot create hsr debugfs directory [ 252.722677][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 255.198301][ T5597] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 255.278268][ T7022] tipc: Enabling of bearer rejected, failed to enable media [ 255.282301][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.389804][ T5597] usb 3-1: Using ep0 maxpacket: 8 [ 255.395919][ T5597] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.397370][ T5597] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 255.397392][ T5597] usb 3-1: config 0 has no interface number 0 [ 255.397434][ T5597] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.397473][ T5597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.497876][ T5597] usb 3-1: config 0 descriptor?? [ 255.661934][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.667992][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.701877][ T5597] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 255.721895][ T5597] usb 3-1: USB disconnect, device number 18 [ 256.753140][ T7055] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.898196][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 258.849563][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 259.243700][ T7082] tipc: Enabling of bearer rejected, failed to enable media [ 260.799103][ T13] hsr_slave_0: left promiscuous mode [ 260.833170][ T13] hsr_slave_1: left promiscuous mode [ 260.858456][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.898007][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.049599][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.060163][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.254670][ T13] veth1_macvtap: left promiscuous mode [ 261.284770][ T13] veth0_macvtap: left promiscuous mode [ 261.285401][ T13] veth1_vlan: left promiscuous mode [ 261.285722][ T13] veth0_vlan: left promiscuous mode [ 263.990875][ T13] team0 (unregistering): Port device team_slave_1 removed [ 264.049983][ T13] team0 (unregistering): Port device team_slave_0 removed [ 264.543317][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 264.963812][ T7168] syz.2.371 uses obsolete (PF_INET,SOCK_PACKET) [ 266.845465][ T6733] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 266.919883][ T7186] siw: device registration error -23 [ 266.971878][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.981468][ T6733] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 267.135379][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 267.152222][ T6733] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 267.338921][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 267.384524][ T6733] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 267.446591][ T6733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.653438][ T7198] syzkaller0: entered promiscuous mode [ 267.653516][ T7198] syzkaller0: entered allmulticast mode [ 269.025719][ T6733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.171889][ T6733] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.206055][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.220855][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.302173][ T5699] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 269.400877][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.401054][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.468731][ T5699] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 269.471233][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.471257][ T5699] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.471289][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.521783][ T5699] usb 4-1: config 0 descriptor?? [ 269.756125][ T5706] usb 4-1: USB disconnect, device number 14 [ 269.776327][ T7227] siw: device registration error -23 [ 271.093181][ T7257] siw: device registration error -23 [ 271.229110][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 271.230083][ T7262] block nbd0: Unsupported socket: should be TCP or UNIX. [ 272.297960][ T5597] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 272.393463][ T6733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.467337][ T5597] usb 3-1: unable to get BOS descriptor or descriptor too short [ 272.475140][ T5597] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 272.491802][ T5597] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 272.499963][ T5597] usb 3-1: config 2 has no interface number 0 [ 272.500004][ T5597] usb 3-1: config 2 interface 8 has no altsetting 0 [ 272.504567][ T5597] usb 3-1: string descriptor 0 read error: -22 [ 272.504709][ T5597] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.647366][ T5597] usbtest 3-1:2.8: Linux user mode ISO test driver [ 272.657585][ T5597] usbtest 3-1:2.8: low-speed {control} tests [ 272.945233][ T7279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.659485][ T6733] veth0_vlan: entered promiscuous mode [ 273.722408][ T7296] FAULT_INJECTION: forcing a failure. [ 273.722408][ T7296] name failslab, interval 1, probability 0, space 0, times 0 [ 273.735339][ T7296] CPU: 0 UID: 0 PID: 7296 Comm: syz.3.405 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 273.735365][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.735375][ T7296] Call Trace: [ 273.735383][ T7296] [ 273.735391][ T7296] dump_stack_lvl+0xe8/0x150 [ 273.735425][ T7296] should_fail_ex+0x46b/0x600 [ 273.735447][ T7296] ? __d_alloc+0x37/0x6f0 [ 273.735468][ T7296] should_failslab+0xa8/0x100 [ 273.735494][ T7296] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 273.735518][ T7296] ? __d_alloc+0x37/0x6f0 [ 273.735535][ T7296] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 273.735563][ T7296] __d_alloc+0x37/0x6f0 [ 273.735580][ T7296] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 273.735615][ T7296] d_alloc_pseudo+0x21/0xc0 [ 273.735634][ T7296] alloc_path_pseudo+0x107/0x220 [ 273.735660][ T7296] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 273.735685][ T7296] ? preempt_count_add+0x6a/0x140 [ 273.735713][ T7296] alloc_file_pseudo+0xa8/0x1e0 [ 273.735740][ T7296] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 273.735765][ T7296] ? __kasan_kmalloc+0x93/0xb0 [ 273.735796][ T7296] anon_inode_getfile+0xc5/0x1a0 [ 273.735824][ T7296] init_listener+0x10f/0x1d0 [ 273.735852][ T7296] do_seccomp+0x917/0xd30 [ 273.735882][ T7296] ? __se_sys_futex+0x3a8/0x450 [ 273.735906][ T7296] ? __pfx_do_seccomp+0x10/0x10 [ 273.735935][ T7296] ? rcu_is_watching+0x16/0xb0 [ 273.735967][ T7296] do_syscall_64+0x166/0x520 [ 273.735985][ T7296] ? trace_irq_disable+0x3b/0x140 [ 273.736006][ T7296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.736024][ T7296] ? clear_bhb_loop+0x70/0xc0 [ 273.736044][ T7296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.736061][ T7296] RIP: 0033:0x7ff60f04e159 [ 273.736078][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.736094][ T7296] RSP: 002b:00007ff60d2a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 273.736116][ T7296] RAX: ffffffffffffffda RBX: 00007ff60f2d5fa0 RCX: 00007ff60f04e159 [ 273.736130][ T7296] RDX: 0000200000000140 RSI: 000000000000001d RDI: 0000000000000001 [ 273.736141][ T7296] RBP: 00007ff60f0e5024 R08: 0000000000000000 R09: 0000000000000000 [ 273.736151][ T7296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.736162][ T7296] R13: 00007ff60f2d6038 R14: 00007ff60f2d5fa0 R15: 00007ffed3659088 [ 273.736190][ T7296] [ 273.773896][ T6733] veth1_vlan: entered promiscuous mode [ 273.947254][ T6733] veth0_macvtap: entered promiscuous mode [ 273.990247][ T6733] veth1_macvtap: entered promiscuous mode [ 274.159305][ T6240] usb 3-1: USB disconnect, device number 19 [ 275.248031][ T5706] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 275.255644][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.293610][ T6733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.424019][ T5706] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 275.426093][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.426116][ T5706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.426148][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.510222][ T5706] usb 2-1: config 0 descriptor?? [ 275.601490][ T158] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.601829][ T158] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.601866][ T158] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.601899][ T158] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.833292][ T5722] usb 2-1: USB disconnect, device number 11 [ 276.781723][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.781791][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.758659][ T1919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.766678][ T1919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.930900][ T7347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.129417][ T7361] hsr0 speed is unknown, defaulting to 1000 [ 284.350429][ T56] IPVS: starting estimator thread 0... [ 284.353666][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 284.459134][ T7380] IPVS: using max 9 ests per chain, 21600 per kthread [ 285.681840][ T7392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.159657][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.432'. [ 295.910579][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 295.910631][ T7435] netlink: 312 bytes leftover after parsing attributes in process `syz.3.441'. [ 295.955341][ T7405] syz_tun: entered allmulticast mode [ 296.449002][ T7440] netlink: 36 bytes leftover after parsing attributes in process `syz.2.444'. [ 297.454109][ T7447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.807925][ T5722] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 297.944421][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.964962][ T5722] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 297.984441][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.984509][ T5722] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.984546][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.010812][ T5722] usb 2-1: config 0 descriptor?? [ 298.025579][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.037529][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.042464][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.043396][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 299.154066][ T5722] usb 2-1: USB disconnect, device number 12 [ 299.668045][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 299.668095][ T7477] netlink: 312 bytes leftover after parsing attributes in process `syz.2.456'. [ 299.790700][ T7456] hsr0 speed is unknown, defaulting to 1000 [ 300.452638][ T7487] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 301.188003][ T5590] Bluetooth: hci0: command tx timeout [ 301.644214][ T7492] hsr0 speed is unknown, defaulting to 1000 [ 303.267625][ T5590] Bluetooth: hci0: command tx timeout [ 304.455380][ T7506] syz.4.463 (7506) used greatest stack depth: 18864 bytes left [ 305.483643][ T5590] Bluetooth: hci0: command tx timeout [ 306.548468][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.469'. [ 306.548516][ T7523] netlink: 312 bytes leftover after parsing attributes in process `syz.2.469'. [ 306.764792][ T7456] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.766138][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.766344][ T7456] bridge_slave_0: entered allmulticast mode [ 306.768871][ T7456] bridge_slave_0: entered promiscuous mode [ 306.771819][ T7456] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.772034][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.772193][ T7456] bridge_slave_1: entered allmulticast mode [ 306.774864][ T7456] bridge_slave_1: entered promiscuous mode [ 307.256038][ T7536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.471'. [ 308.039993][ T5590] Bluetooth: hci0: command tx timeout [ 309.980925][ T4952] udevd[4952]: worker [5969] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 312.509564][ T197] usb 5-1: [UEAGLE-ATM] firmware is not available [ 312.605759][ T1846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.837349][ T7456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.901061][ T7456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.268188][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 313.268238][ T7576] netlink: 312 bytes leftover after parsing attributes in process `syz.4.482'. [ 313.411155][ T7456] team0: Port device team_slave_0 added [ 314.072128][ T7595] netlink: 36 bytes leftover after parsing attributes in process `syz.2.483'. [ 314.801871][ T1846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.877442][ T7456] team0: Port device team_slave_1 added [ 315.556585][ T1846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.783564][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.790696][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.790723][ T7456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.793931][ T7456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.793946][ T7456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.793969][ T7456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.103550][ T7624] Cannot find set identified by id 0 to match [ 317.101558][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.110809][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.694129][ T7456] hsr_slave_0: entered promiscuous mode [ 318.695651][ T7456] hsr_slave_1: entered promiscuous mode [ 318.696690][ T7456] debugfs: 'hsr0' already exists in 'hsr' [ 318.696714][ T7456] Cannot create hsr debugfs directory [ 320.103432][ T5601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.136164][ T5601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.143400][ T5601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.144968][ T5601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.151172][ T5601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.096416][ T1846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.446987][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.493'. [ 321.447020][ T7648] netlink: 312 bytes leftover after parsing attributes in process `syz.2.493'. [ 321.484875][ T7650] tmpfs: Bad value for 'mpol' [ 322.456567][ T5590] Bluetooth: hci5: command tx timeout [ 324.029597][ T7638] hsr0 speed is unknown, defaulting to 1000 [ 324.541721][ T5590] Bluetooth: hci5: command tx timeout [ 325.101703][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 325.523775][ T7696] overlayfs: failed to resolve './file0': -2 [ 326.618731][ T5590] Bluetooth: hci5: command tx timeout [ 326.845094][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 326.845141][ T7705] netlink: 312 bytes leftover after parsing attributes in process `syz.2.508'. [ 327.088234][ T1846] bridge_slave_1: left allmulticast mode [ 327.088266][ T1846] bridge_slave_1: left promiscuous mode [ 327.088443][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.219069][ T1846] bridge_slave_0: left allmulticast mode [ 327.219104][ T1846] bridge_slave_0: left promiscuous mode [ 327.219350][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.597851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 328.708086][ T5590] Bluetooth: hci5: command tx timeout [ 329.478788][ T1846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.520583][ T1846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.541417][ T1846] bond0 (unregistering): Released all slaves [ 332.081704][ T7456] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 332.151063][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.191886][ T7456] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 332.264780][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.817371][ T7456] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 332.927472][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.052324][ T7456] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.108502][ T7456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.358362][ T1846] hsr_slave_0: left promiscuous mode [ 333.397996][ T1846] hsr_slave_1: left promiscuous mode [ 333.399237][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.399261][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.537493][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.537568][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.744303][ T1846] veth1_macvtap: left promiscuous mode [ 333.744414][ T1846] veth0_macvtap: left promiscuous mode [ 333.744595][ T1846] veth1_vlan: left promiscuous mode [ 333.744718][ T1846] veth0_vlan: left promiscuous mode [ 336.659549][ T1846] team0 (unregistering): Port device team_slave_1 removed [ 336.731714][ T1846] team0 (unregistering): Port device team_slave_0 removed [ 337.216325][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 337.907543][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.907778][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.923069][ T7638] bridge_slave_0: entered allmulticast mode [ 337.925957][ T7638] bridge_slave_0: entered promiscuous mode [ 338.058676][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 338.062914][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.063048][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.063231][ T7638] bridge_slave_1: entered allmulticast mode [ 338.077338][ T7638] bridge_slave_1: entered promiscuous mode [ 338.336735][ T7638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.353356][ T7638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.446574][ T37] audit: type=1800 audit(1788498301.463:5): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.548" name="UDC" dev="configfs" ino=17626 res=0 errno=0 [ 338.794504][ T7638] team0: Port device team_slave_0 added [ 338.862811][ T7638] team0: Port device team_slave_1 added [ 339.041820][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.044201][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.044231][ T7638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.065822][ T7638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.065840][ T7638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.065864][ T7638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.234350][ T7456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.328981][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 339.544747][ T7638] hsr_slave_0: entered promiscuous mode [ 339.546186][ T7638] hsr_slave_1: entered promiscuous mode [ 339.547083][ T7638] debugfs: 'hsr0' already exists in 'hsr' [ 339.547106][ T7638] Cannot create hsr debugfs directory [ 339.565162][ T7456] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.634931][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.640558][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.751686][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.752930][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.369565][ T7638] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 342.464420][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.474705][ T7638] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 342.585973][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.594314][ T7638] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 342.766299][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.776514][ T7638] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 342.910946][ T7638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.908573][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.911410][ T7890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.151842][ T7638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.291921][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 344.377400][ T7638] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.482282][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.482609][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.526443][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.541818][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.116363][ T37] audit: type=1800 audit(1788498308.143:6): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.569" name="(" dev="sda1" ino=2051 res=0 errno=0 [ 345.185018][ T37] audit: type=1804 audit(1788498308.203:7): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.569" name="/newroot/130/mnt/(" dev="sda1" ino=2051 res=1 errno=0 [ 345.224888][ T7456] veth0_vlan: entered promiscuous mode [ 345.405091][ T7456] veth1_vlan: entered promiscuous mode [ 345.728184][ T7456] veth0_macvtap: entered promiscuous mode [ 345.828445][ T7456] veth1_macvtap: entered promiscuous mode [ 346.018805][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.056225][ T7456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.188455][ T1919] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.197283][ T1919] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.198446][ T1919] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.198483][ T1919] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.458151][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.574'. [ 348.058975][ T1846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.070642][ T1846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.625428][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.630559][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.695732][ T197] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 349.155443][ T197] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 349.168719][ T197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.168749][ T197] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 349.168861][ T197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.219507][ T7638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.338611][ T197] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 349.543876][ T197] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 349.633334][ T7997] syz.2.581 (7997) used greatest stack depth: 16816 bytes left [ 350.086602][ T999] usb 5-1: USB disconnect, device number 14 [ 350.275882][ T7638] veth0_vlan: entered promiscuous mode [ 350.356167][ T7638] veth1_vlan: entered promiscuous mode [ 350.584768][ T8025] binder: 8024:8025 ioctl c0306201 0 returned -14 [ 350.682660][ T999] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 350.692010][ T999] spcp8x5 5-1:1.0: device disconnected [ 350.733798][ T7638] veth0_macvtap: entered promiscuous mode [ 350.747060][ T7638] veth1_macvtap: entered promiscuous mode [ 350.779132][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.588402][ T7638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.791324][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 352.201610][ T999] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 352.368935][ T999] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 352.394964][ T999] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.406833][ T999] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 352.420818][ T999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 352.429071][ T999] usb 3-1: SerialNumber: syz [ 352.652425][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.680406][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.928509][ T779] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.929107][ T779] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.929571][ T779] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.949540][ T779] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.066404][ T999] usb 3-1: 0:2 : does not exist [ 354.193537][ T999] usb 3-1: USB disconnect, device number 20 [ 355.215643][ T8056] binder: BINDER_SET_CONTEXT_MGR already set [ 355.311386][ T8056] binder: 8054:8056 ioctl 4018620d 2000000002c0 returned -16 [ 355.320249][ T8056] binder: 8054:8056 ioctl c0306201 0 returned -14 [ 355.976634][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.044644][ T1864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.044728][ T1864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.356130][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.607'. [ 357.356698][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.607'. [ 357.449296][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.449370][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.551047][ T8089] overlay: ./file0 is not a directory [ 357.820768][ T8092] binder: 8090:8092 ioctl c0306201 0 returned -14 [ 359.588513][ T5706] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 359.691612][ T8121] CIFS: Attempting to mount //127.0.0.1/share [ 359.739403][ T5706] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 359.760216][ T5706] usb 3-1: config 1 has an invalid interface number: 3 but max is 0 [ 359.768369][ T5706] usb 3-1: config 1 has no interface number 0 [ 359.780954][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.794058][ T5706] usb 3-1: Product: syz [ 359.794079][ T5706] usb 3-1: Manufacturer: syz [ 359.794092][ T5706] usb 3-1: SerialNumber: syz [ 359.854150][ T5706] usb 3-1: 3:1 : does not exist [ 359.859175][ T5706] usb 3-1: 3:2 : does not exist [ 360.187399][ T8131] syzkaller0: entered promiscuous mode [ 360.193099][ T8131] syzkaller0: entered allmulticast mode [ 360.399982][ T8136] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.347447][ T8121] CIFS: VFS: cifs_mount failed w/return code = -112 [ 362.252772][ T5722] usb 3-1: USB disconnect, device number 21 [ 362.258039][ T5590] Bluetooth: hci1: unexpected event for opcode 0x1001 [ 362.679352][ T8161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.960107][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.635'. [ 362.996719][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.635'. [ 363.394120][ T8176] 9pnet_virtio: no channels available for device syz [ 364.460521][ T8189] syzkaller0: entered promiscuous mode [ 364.460604][ T8189] syzkaller0: entered allmulticast mode [ 364.542399][ T8187] md: invalid raid superblock magic on ram1 [ 364.549509][ T8187] md: ram1 does not have a valid v0.0 superblock, not importing! [ 364.549632][ T8187] md: md_import_device returned -22 [ 364.905242][ T8201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.863641][ T8239] vivid-000: ================= START STATUS ================= [ 366.866843][ T8239] vivid-000: Radio HW Seek Mode: Bounded [ 366.866880][ T8239] vivid-000: Radio Programmable HW Seek: false [ 366.866900][ T8239] vivid-000: RDS Rx I/O Mode: Block I/O [ 366.866918][ T8239] vivid-000: Generate RBDS Instead of RDS: false [ 366.866943][ T8239] vivid-000: RDS Reception: true [ 366.866960][ T8239] vivid-000: RDS Program Type: 0 inactive [ 366.866983][ T8239] vivid-000: RDS PS Name: inactive [ 366.867005][ T8239] vivid-000: RDS Radio Text: inactive [ 366.867027][ T8239] vivid-000: RDS Traffic Announcement: false inactive [ 366.867050][ T8239] vivid-000: RDS Traffic Program: false inactive [ 366.867071][ T8239] vivid-000: RDS Music: false inactive [ 366.867095][ T8239] vivid-000: ================== END STATUS ================== [ 369.719232][ T8250] binder: 8249:8250 ioctl c0306201 200000000040 returned -22 [ 373.488105][ T8277] netlink: 'syz.3.671': attribute type 8 has an invalid length. [ 373.997161][ T8291] overlayfs: missing 'lowerdir' [ 374.792647][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.891015][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.904309][ T8316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.665549][ T8325] netlink: 71 bytes leftover after parsing attributes in process `syz.3.689'. [ 376.377953][ T5590] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 376.468072][ T5590] Bluetooth: hci2: command 0x0406 tx timeout [ 378.546906][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.774980][ T8362] FAULT_INJECTION: forcing a failure. [ 379.774980][ T8362] name failslab, interval 1, probability 0, space 0, times 0 [ 379.775067][ T8362] CPU: 0 UID: 0 PID: 8362 Comm: syz.2.697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 379.775086][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.775100][ T8362] Call Trace: [ 379.775173][ T8362] [ 379.775188][ T8362] dump_stack_lvl+0xe8/0x150 [ 379.775311][ T8362] should_fail_ex+0x46b/0x600 [ 379.775365][ T8362] should_failslab+0xa8/0x100 [ 379.775418][ T8362] __kmalloc_cache_noprof+0xa1/0x680 [ 379.775448][ T8362] ? __pfx___se_sys_futex+0x10/0x10 [ 379.775527][ T8362] ? __se_sys_memfd_create+0x227/0x420 [ 379.775561][ T8362] ? __se_sys_memfd_create+0x227/0x420 [ 379.775592][ T8362] __se_sys_memfd_create+0x227/0x420 [ 379.775630][ T8362] do_syscall_64+0x166/0x520 [ 379.775752][ T8362] ? trace_irq_disable+0x3b/0x140 [ 379.775781][ T8362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.775817][ T8362] ? clear_bhb_loop+0x70/0xc0 [ 379.775839][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.775862][ T8362] RIP: 0033:0x7f2bb479e159 [ 379.775907][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.775923][ T8362] RSP: 002b:00007f2bb29f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 379.775949][ T8362] RAX: ffffffffffffffda RBX: 00007f2bb4a25fa0 RCX: 00007f2bb479e159 [ 379.775963][ T8362] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 379.775975][ T8362] RBP: 00007f2bb4835024 R08: 0000000000000000 R09: 0000000000000000 [ 379.775986][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.775997][ T8362] R13: 00007f2bb4a26038 R14: 00007f2bb4a25fa0 R15: 00007ffc484c7698 [ 379.776026][ T8362] [ 385.334085][ T8438] FAULT_INJECTION: forcing a failure. [ 385.334085][ T8438] name failslab, interval 1, probability 0, space 0, times 0 [ 385.347062][ T8438] CPU: 1 UID: 0 PID: 8438 Comm: syz.7.723 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.347089][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.347100][ T8438] Call Trace: [ 385.347108][ T8438] [ 385.347117][ T8438] dump_stack_lvl+0xe8/0x150 [ 385.347151][ T8438] should_fail_ex+0x46b/0x600 [ 385.347178][ T8438] should_failslab+0xa8/0x100 [ 385.347207][ T8438] __kmalloc_cache_noprof+0xa1/0x680 [ 385.347232][ T8438] ? __se_sys_memfd_create+0x227/0x420 [ 385.347257][ T8438] ? __se_sys_memfd_create+0x227/0x420 [ 385.347288][ T8438] __se_sys_memfd_create+0x227/0x420 [ 385.347317][ T8438] do_syscall_64+0x166/0x520 [ 385.347338][ T8438] ? trace_irq_disable+0x3b/0x140 [ 385.347361][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.347380][ T8438] ? clear_bhb_loop+0x70/0xc0 [ 385.347402][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.347421][ T8438] RIP: 0033:0x7f4fd863e159 [ 385.347439][ T8438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.347454][ T8438] RSP: 002b:00007f4fd6896028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 385.347474][ T8438] RAX: ffffffffffffffda RBX: 00007f4fd88c5fa0 RCX: 00007f4fd863e159 [ 385.347488][ T8438] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 385.347499][ T8438] RBP: 00007f4fd86d5024 R08: 0000000000000000 R09: 0000000000000000 [ 385.347511][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.347522][ T8438] R13: 00007f4fd88c6038 R14: 00007f4fd88c5fa0 R15: 00007ffd5fcf6c68 [ 385.347551][ T8438] [ 390.000826][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 390.743171][ T31] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 390.745883][ T31] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 390.749980][ T31] usb 3-1: config index 0 descriptor too short (expected 65024, got 18) [ 390.750032][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 391.012130][ T31] usb 3-1: config index 1 descriptor too short (expected 65024, got 18) [ 391.016232][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 391.437852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.447834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.457845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.467843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.477834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.487833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.497835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 391.507832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 392.692438][ T31] usb 3-1: config index 2 descriptor too short (expected 65024, got 18) [ 392.692508][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 392.895183][ T31] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 392.895871][ T31] usb 3-1: can't read configurations, error -71 [ 394.525534][ T8486] syzkaller0: entered promiscuous mode [ 394.532742][ T8486] syzkaller0: entered allmulticast mode [ 397.499989][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 397.672607][ T31] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 397.684746][ T31] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 397.694121][ T31] usb 7-1: config 1 has no interface number 0 [ 397.704111][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.712512][ T31] usb 7-1: Product: syz [ 397.716766][ T31] usb 7-1: Manufacturer: syz [ 397.721451][ T31] usb 7-1: SerialNumber: syz [ 397.825972][ T31] usb 7-1: 3:1 : does not exist [ 397.831004][ T31] usb 7-1: 3:2 : does not exist [ 397.902534][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.956154][ T5601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.968816][ T5601] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.975763][ T5601] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.976958][ T5601] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.406490][ T8547] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 400.019775][ T8549] FAULT_INJECTION: forcing a failure. [ 400.019775][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 400.027432][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.2.757 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.027461][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.027472][ T8549] Call Trace: [ 400.027480][ T8549] [ 400.027492][ T8549] dump_stack_lvl+0xe8/0x150 [ 400.027525][ T8549] should_fail_ex+0x46b/0x600 [ 400.027553][ T8549] should_failslab+0xa8/0x100 [ 400.027584][ T8549] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 400.027609][ T8549] ? smb3_parse_devname+0x16b/0x850 [ 400.027676][ T8549] ? smb3_parse_devname+0x16b/0x850 [ 400.027709][ T8549] kstrndup+0x7e/0x160 [ 400.027740][ T8549] smb3_parse_devname+0x16b/0x850 [ 400.027774][ T8549] smb3_fs_context_parse_param+0x4255/0x7b50 [ 400.027800][ T8549] ? smack_fs_context_parse_param+0x10a/0x180 [ 400.027840][ T8549] ? __pfx_smack_fs_context_parse_param+0x10/0x10 [ 400.027867][ T8549] ? __pfx_smb3_fs_context_parse_param+0x10/0x10 [ 400.027900][ T8549] ? static_key_count+0x41/0x70 [ 400.027937][ T8549] vfs_parse_fs_param+0x1a9/0x420 [ 400.027967][ T8549] __se_sys_fsconfig+0x6bf/0x810 [ 400.027997][ T8549] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 400.028023][ T8549] ? rcu_is_watching+0x16/0xb0 [ 400.028068][ T8549] ? __x64_sys_fsconfig+0x20/0xc0 [ 400.028095][ T8549] do_syscall_64+0x166/0x520 [ 400.028125][ T8549] ? trace_irq_disable+0x3b/0x140 [ 400.028148][ T8549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.028169][ T8549] ? clear_bhb_loop+0x70/0xc0 [ 400.028193][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.028211][ T8549] RIP: 0033:0x7f2bb479e159 [ 400.028229][ T8549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.028244][ T8549] RSP: 002b:00007f2bb29f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 400.028265][ T8549] RAX: ffffffffffffffda RBX: 00007f2bb4a25fa0 RCX: 00007f2bb479e159 [ 400.028279][ T8549] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000005 [ 400.028290][ T8549] RBP: 00007f2bb4835024 R08: 0000000000000000 R09: 0000000000000000 [ 400.028302][ T8549] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 400.028314][ T8549] R13: 00007f2bb4a26038 R14: 00007f2bb4a25fa0 R15: 00007ffc484c7698 [ 400.028345][ T8549] [ 400.046095][ T8549] CIFS: VFS: Unable to allocate memory for devname [ 400.599489][ T8551] siw: device registration error -23 [ 401.702068][ T5706] usb 7-1: USB disconnect, device number 2 [ 402.096811][ T8569] syzkaller0: entered promiscuous mode [ 402.096976][ T8569] syzkaller0: entered allmulticast mode [ 402.139431][ T5590] Bluetooth: hci4: command tx timeout [ 403.291244][ T8316] syz_tun (unregistering): left allmulticast mode [ 403.491392][ T8592] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 403.506500][ T8592] overlayfs: failed to set xattr on upper [ 403.506580][ T8592] overlayfs: ...falling back to redirect_dir=nofollow. [ 403.506587][ T8592] overlayfs: ...falling back to index=off. [ 403.506591][ T8592] overlayfs: ...falling back to uuid=null. [ 403.506626][ T8592] overlayfs: maximum fs stacking depth exceeded [ 403.920873][ T8480] hsr0 speed is unknown, defaulting to 1000 [ 404.296447][ T5590] Bluetooth: hci4: command tx timeout [ 406.831938][ T5590] Bluetooth: hci4: command tx timeout [ 408.030421][ T8628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.866716][ T5590] Bluetooth: hci4: command tx timeout [ 410.944367][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.951736][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.951926][ T8480] bridge_slave_0: entered allmulticast mode [ 410.994908][ T8480] bridge_slave_0: entered promiscuous mode [ 411.012100][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.021503][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.021728][ T8480] bridge_slave_1: entered allmulticast mode [ 411.024206][ T8480] bridge_slave_1: entered promiscuous mode [ 411.097444][ T8659] nvmet: adding nsid 1 to subsystem testnqn [ 411.419216][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.487382][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.746087][ T8480] team0: Port device team_slave_0 added [ 412.764819][ T8480] team0: Port device team_slave_1 added [ 412.980560][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.988026][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.988055][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.076856][ T37] audit: type=1800 audit(1788498376.043:8): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.801" name="num" dev="configfs" ino=21133 res=0 errno=0 [ 413.592628][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.592646][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.592670][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.801205][ T8480] hsr_slave_0: entered promiscuous mode [ 413.809152][ T8480] hsr_slave_1: entered promiscuous mode [ 413.816030][ T8480] debugfs: 'hsr0' already exists in 'hsr' [ 413.816055][ T8480] Cannot create hsr debugfs directory [ 415.048435][ T6240] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 415.207942][ T6240] usb 3-1: Using ep0 maxpacket: 32 [ 415.213353][ T6240] usb 3-1: New USB device found, idVendor=0bda, idProduct=c812, bcdDevice=8a.3a [ 415.224932][ T6240] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 415.225558][ T6240] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.225578][ T6240] usb 3-1: config 0 has no interface number 0 [ 415.225623][ T6240] usb 3-1: config 0 interface 184 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.265755][ T6240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.273867][ T6240] usb 3-1: Product: syz [ 415.273887][ T6240] usb 3-1: Manufacturer: syz [ 415.273900][ T6240] usb 3-1: SerialNumber: syz [ 415.313145][ T6240] usb 3-1: config 0 descriptor?? [ 415.336252][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 415.490909][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 415.510661][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.510841][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.540365][ T31] usb 7-1: config 0 descriptor?? [ 415.567439][ T6240] usb 3-1: USB disconnect, device number 24 [ 415.789134][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 415.789297][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 415.808212][ T31] usb 7-1: USB disconnect, device number 3 [ 416.777550][ T8480] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 416.912122][ T8480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.948122][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 417.012962][ T8480] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.050616][ T37] audit: type=1800 audit(1788498380.083:9): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.811" name="ipv4_address" dev="configfs" ino=21193 res=0 errno=0 [ 417.052283][ T37] audit: type=1800 audit(1788498380.083:10): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.811" name="num" dev="configfs" ino=21194 res=0 errno=0 [ 417.093325][ T8480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 417.098516][ T8480] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.109815][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 417.112241][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.112283][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.136303][ T31] usb 7-1: config 0 descriptor?? [ 417.261673][ T8480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.291369][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 418.291532][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 418.573442][ T31] usb 7-1: USB disconnect, device number 4 [ 418.600450][ T8480] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.731226][ T8480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.230078][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.844619][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.347066][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.347678][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.496830][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.496976][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.825216][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.988510][ T999] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 424.158894][ T999] usb 3-1: Using ep0 maxpacket: 32 [ 424.159827][ T999] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 424.161329][ T999] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 424.161351][ T999] usb 3-1: config 0 has no interface number 0 [ 424.161397][ T999] usb 3-1: config 0 interface 184 has no altsetting 0 [ 424.164380][ T999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.164402][ T999] usb 3-1: Product: syz [ 424.164415][ T999] usb 3-1: Manufacturer: syz [ 424.164428][ T999] usb 3-1: SerialNumber: syz [ 424.170694][ T5601] Bluetooth: hci0: command 0x0406 tx timeout [ 424.343590][ T999] usb 3-1: config 0 descriptor?? [ 424.789716][ T5591] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 424.952885][ T5591] usb 7-1: Using ep0 maxpacket: 16 [ 424.958912][ T5591] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 424.960380][ T5591] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 424.960402][ T5591] usb 7-1: config 0 has no interface number 0 [ 424.960445][ T5591] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 424.960469][ T5591] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 425.020934][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.031550][ T5591] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 425.031575][ T5591] usb 7-1: Product: syz [ 425.031588][ T5591] usb 7-1: SerialNumber: syz [ 425.153946][ T5591] usb 7-1: config 0 descriptor?? [ 425.175906][ T5591] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 425.259980][ T5591] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input12 [ 426.307440][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.346883][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.410245][ T8814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.426648][ T8814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.463069][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 426.463142][ C0] ------------[ cut here ]------------ [ 426.463151][ C0] URB ffff8880206da300 submitted while active [ 426.463167][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: ktimers/0/16 [ 426.495035][ C0] Modules linked in: [ 426.500038][ T5715] usb 7-1: USB disconnect, device number 6 [ 426.506115][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.515726][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.525862][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 426.531394][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 29 bc 4e fb 49 83 3e 00 74 40 e8 5e 0d e3 fa 48 8d 3d 37 fd da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 0d e3 fa eb 05 e8 3c 0d [ 426.547614][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.551457][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.567182][ C0] RSP: 0000:ffffc90000157798 EFLAGS: 00010283 [ 426.573325][ C0] RAX: ffffffff86e36c62 RBX: ffff8880206da300 RCX: 0000000000040000 [ 426.577065][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 426.577094][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 426.577696][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 426.577719][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 426.577736][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 426.577752][ T999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 426.578190][ T999] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 426.608361][ T999] usb 3-1: USB disconnect, device number 25 [ 426.655618][ C0] RDX: ffffc900032f7000 RSI: ffff8880206da300 RDI: ffffffff8fbe69a0 [ 426.663668][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000100 [ 426.671712][ C0] R10: 0000000000000000 R11: ffffffff8e1c3ac0 R12: ffff88803a7780c2 [ 426.679795][ C0] R13: ffff88802b8c2bc4 R14: ffff8880206da308 R15: 0000000000000820 [ 426.687889][ C0] FS: 0000000000000000(0000) GS:ffff888125bd4000(0000) knlGS:0000000000000000 [ 426.696845][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 426.703512][ C0] CR2: 00007ffd99816f10 CR3: 0000000079e06000 CR4: 00000000003526f0 [ 426.711585][ C0] Call Trace: [ 426.714888][ C0] [ 426.717876][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 426.723789][ C0] ? ___ratelimit+0x584/0x8e0 [ 426.728564][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 426.734045][ C0] ? kcov_remote_start+0x55f/0x730 [ 426.739223][ C0] __usb_hcd_giveback_urb+0x3bc/0x5f0 [ 426.744681][ C0] dummy_timer+0xaac/0x4d50 [ 426.749300][ C0] ? __lock_acquire+0x6df/0x2e40 [ 426.754257][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 426.759918][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 426.766110][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.771587][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 426.776545][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 426.782403][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 426.787337][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 426.792587][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 426.797699][ C0] handle_softirqs+0x1da/0x6d0 [ 426.802551][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 426.807583][ C0] run_ktimerd+0x6a/0x100 [ 426.811949][ C0] smpboot_thread_fn+0x565/0xa70 [ 426.816886][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 426.821953][ C0] kthread+0x38b/0x470 [ 426.826012][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 426.831520][ C0] ? __pfx_kthread+0x10/0x10 [ 426.836132][ C0] ret_from_fork+0x514/0xb70 [ 426.840822][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 426.845958][ C0] ? __switch_to+0xc89/0x1420 [ 426.850720][ C0] ? __pfx_kthread+0x10/0x10 [ 426.855329][ C0] ret_from_fork_asm+0x1a/0x30 [ 426.860155][ C0] [ 426.863193][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.870460][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 426.879987][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.890032][ C0] Call Trace: [ 426.893308][ C0] [ 426.896255][ C0] vpanic+0x56d/0xa60 [ 426.900253][ C0] ? __pfx__printk+0x10/0x10 [ 426.904843][ C0] ? __pfx_vpanic+0x10/0x10 [ 426.909363][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 426.914673][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 426.919879][ C0] panic+0xc5/0xd0 [ 426.923615][ C0] ? __pfx_panic+0x10/0x10 [ 426.928045][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 426.933002][ C0] __warn+0x315/0x4c0 [ 426.936970][ C0] ? usb_submit_urb+0x79/0x18b0 [ 426.941810][ C0] ? usb_submit_urb+0x79/0x18b0 [ 426.946651][ C0] __report_bug+0x276/0x570 [ 426.951213][ C0] ? usb_submit_urb+0x79/0x18b0 [ 426.956057][ C0] ? __pfx___report_bug+0x10/0x10 [ 426.961076][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.966091][ C0] report_bug_entry+0x19b/0x290 [ 426.970976][ C0] ? usb_submit_urb+0x7c/0x18b0 [ 426.975855][ C0] ? usb_submit_urb+0x81/0x18b0 [ 426.980730][ C0] handle_bug+0xce/0x200 [ 426.985000][ C0] exc_invalid_op+0x1a/0x50 [ 426.989541][ C0] asm_exc_invalid_op+0x1a/0x20 [ 426.994404][ C0] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 426.999869][ C0] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 29 bc 4e fb 49 83 3e 00 74 40 e8 5e 0d e3 fa 48 8d 3d 37 fd da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 43 0d e3 fa eb 05 e8 3c 0d [ 427.019483][ C0] RSP: 0000:ffffc90000157798 EFLAGS: 00010283 [ 427.025567][ C0] RAX: ffffffff86e36c62 RBX: ffff8880206da300 RCX: 0000000000040000 [ 427.033555][ C0] RDX: ffffc900032f7000 RSI: ffff8880206da300 RDI: ffffffff8fbe69a0 [ 427.041537][ C0] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000100 [ 427.049527][ C0] R10: 0000000000000000 R11: ffffffff8e1c3ac0 R12: ffff88803a7780c2 [ 427.057511][ C0] R13: ffff88802b8c2bc4 R14: ffff8880206da308 R15: 0000000000000820 [ 427.065495][ C0] ? usb_submit_urb+0x72/0x18b0 [ 427.070374][ C0] ? usb_submit_urb+0x72/0x18b0 [ 427.075245][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 427.081065][ C0] ? ___ratelimit+0x584/0x8e0 [ 427.085771][ C0] cm109_urb_irq_callback+0x6f1/0xc90 [ 427.091166][ C0] ? kcov_remote_start+0x55f/0x730 [ 427.096297][ C0] __usb_hcd_giveback_urb+0x3bc/0x5f0 [ 427.101692][ C0] dummy_timer+0xaac/0x4d50 [ 427.106208][ C0] ? __lock_acquire+0x6df/0x2e40 [ 427.111159][ C0] ? rtlock_slowlock_locked+0xfb/0x3c20 [ 427.116720][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 427.122903][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 427.128287][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 427.133242][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 427.139047][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 427.143977][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 427.149187][ C0] hrtimer_run_softirq+0x1e1/0x2e0 [ 427.154300][ C0] handle_softirqs+0x1da/0x6d0 [ 427.159071][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 427.164098][ C0] run_ktimerd+0x6a/0x100 [ 427.168447][ C0] smpboot_thread_fn+0x565/0xa70 [ 427.173390][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 427.178419][ C0] kthread+0x38b/0x470 [ 427.182482][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 427.187940][ C0] ? __pfx_kthread+0x10/0x10 [ 427.192609][ C0] ret_from_fork+0x514/0xb70 [ 427.197194][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 427.202294][ C0] ? __switch_to+0xc89/0x1420 [ 427.206978][ C0] ? __pfx_kthread+0x10/0x10 [ 427.211563][ C0] ret_from_fork_asm+0x1a/0x30 [ 427.216337][ C0] [ 427.219608][ C0] Kernel Offset: disabled [ 427.223929][ C0] Rebooting in 86400 seconds..