last executing test programs: 10m44.427123788s ago: executing program 0 (id=1): syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) 10m39.786256433s ago: executing program 0 (id=6): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1\x00', 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x112, 0x1, 0x0, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='0x40', 0x4) close(r2) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') symlink(&(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000001200)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00') write(r3, &(0x7f0000001400)='dummy_udc.0', 0xb) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb45bc001c0000000000029078ac1e0001e000000116009078e00000020000"], 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 10m34.159616762s ago: executing program 0 (id=9): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r0) 10m32.811078005s ago: executing program 0 (id=13): syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x8, 0x80000) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) truncate(0x0, 0x7f0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) 10m27.262511503s ago: executing program 0 (id=19): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x402, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x10004005) munlockall() madvise(&(0x7f00000c4000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x80000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 10m11.08270202s ago: executing program 32 (id=19): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x402, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x6}, {0xfff1, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x803}, 0x10004005) munlockall() madvise(&(0x7f00000c4000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x80000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m1.589762168s ago: executing program 1 (id=577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 7m1.37117827s ago: executing program 1 (id=578): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m1.238217384s ago: executing program 1 (id=582): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 7m0.759152005s ago: executing program 1 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={[&(0x7f0000000180)='!}]\x00', &(0x7f00000001c0)='-*$$^/%{/\x81&&\x00', &(0x7f0000000200)='/dev/comedi0\x00', &(0x7f0000000240)='comedi_bond\x00', &(0x7f0000000280)='#Q*\\\'+!]{!(\x00']}, 0x0, 0x400) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x500, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x4, 0x0, 0x7fffffff, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffb, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0xf, 0x2000006, 0x77fd]}) socket$xdp(0x2c, 0x3, 0x0) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 6m58.649756779s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000}, 0x50) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 6m56.742550187s ago: executing program 1 (id=595): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@dev}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) pipe2(0x0, 0x0) 6m41.084691254s ago: executing program 33 (id=595): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@dev}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) pipe2(0x0, 0x0) 37.143179904s ago: executing program 5 (id=1636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 33.387401977s ago: executing program 5 (id=1638): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000908000200ac1efe010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 24.820759909s ago: executing program 2 (id=1653): socket(0x10, 0x803, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x81) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000007c0)=""/4132, 0x1024) 24.416718827s ago: executing program 5 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd29, 0x100, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x4}]]}, 0x2c}}, 0x4004) 24.111675177s ago: executing program 6 (id=1656): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xfffffffe, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) close(r0) 23.947328645s ago: executing program 2 (id=1657): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r0, 0x3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 23.78054772s ago: executing program 6 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x2, 0x6, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, 0x0}, 0x20) 20.951737589s ago: executing program 6 (id=1662): r0 = openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_open_procfs(r2, &(0x7f0000000080)='gid_map\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x76) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) getsockname$llc(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r5, 0x0, 0x200000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') lseek(r6, 0x8000000010007, 0x0) 19.679123736s ago: executing program 4 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 19.52182558s ago: executing program 2 (id=1665): openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000004000000070000006b11b700000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001380)={'#! ', './bus'}, 0x9) ptrace(0x10, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x14800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) 19.50427945s ago: executing program 4 (id=1666): r0 = socket$netlink(0x10, 0x3, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000e903010000000000000000000000000a68000000090a"], 0x90}, 0x1, 0x0, 0x0, 0x8d0}, 0xc144) 19.418804835s ago: executing program 5 (id=1667): r0 = socket(0x10, 0x803, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001b40)={0x0, 0x4, 0x0, [0x5, 0x13, 0xa, 0x101, 0xf3d], [0x81, 0x8, 0x0, 0x5, 0x31c, 0x3, 0xf6bb, 0x40, 0x8, 0xfff, 0x8, 0xffff, 0x0, 0x328, 0x6, 0x400, 0xb04, 0x3, 0xffffffffffff2870, 0x1, 0x4, 0xffff, 0x1, 0x9, 0xf6, 0xf, 0xe8, 0xda, 0x1, 0x0, 0x5, 0x0, 0x7b, 0x6, 0x0, 0xfffffffffffffffa, 0x8, 0x3, 0x2, 0xc, 0xc2f, 0x7ff, 0x9, 0x3, 0x0, 0x200, 0xe569, 0x101, 0x2, 0xffff, 0x9, 0x6, 0x3, 0x7, 0x70757c94, 0x5, 0x2, 0x100, 0x1, 0x6, 0x5, 0x8000, 0x7, 0x6, 0x9, 0x5, 0xfff, 0x5, 0x1, 0x0, 0x2, 0x9, 0x100, 0x2, 0x6, 0x5, 0x8, 0x1, 0x42c5, 0x4, 0x14bc, 0x8, 0x4, 0x5, 0x1, 0x8b8, 0x18e, 0x9, 0x27b7, 0x7, 0x8, 0xfffffffffffffffa, 0x6, 0x58, 0x6, 0x5, 0xffffffff, 0x9, 0x101, 0x6, 0x1, 0x7, 0xfffffffffffffff8, 0x0, 0xebc8, 0x5, 0x100, 0x101, 0x5, 0x10000, 0x63cb, 0x8, 0x5, 0xc, 0x876, 0x9, 0x8, 0x9, 0x100000001, 0x6, 0x9ef]}) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'batadv0\x00', 0x0}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='jfs\x00', 0x2200010, &(0x7f00000000c0)='discard') r4 = socket(0x9, 0x803, 0x8000ff) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000080)=0x2, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x100, 0x8) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000180)={0x7, 0x3, 0x5, 0x2, 0xf, "ea4d77658e947860840aa9e3f4fa25b543bf6f"}) 19.247407553s ago: executing program 4 (id=1668): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5", 0x28}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8", 0x6f}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 19.114435422s ago: executing program 6 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 18.489750945s ago: executing program 4 (id=1670): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socket(0x29, 0x2, 0x0) 18.263758918s ago: executing program 2 (id=1671): r0 = semget$private(0x0, 0x7, 0x180) semop(r0, &(0x7f0000000200)=[{0x3, 0x2, 0x800}, {0x4, 0xa7dd, 0x3000}], 0x2) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x3, 0x8001}], 0x2) 18.064169013s ago: executing program 6 (id=1672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d96e17aa0b3a00876c1d0040382019000800004460bc06000000a701251e6182949a360d04000000000000008037e7c7a0a03400ac327f4755094439ff745409c51c2688110000960300c57a4c5c91d9ea", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40090) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000940)=""/4097, 0x1001}, {&(0x7f0000006c40)=""/4089, 0xff9}, {&(0x7f0000000480)=""/206, 0xce}, {&(0x7f0000000040)=""/44, 0x2c}], 0x4}, 0x20) 17.535181479s ago: executing program 6 (id=1674): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) 17.256412179s ago: executing program 2 (id=1675): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r3 = socket(0x29, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x958, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x124}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 17.093139811s ago: executing program 4 (id=1676): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a0200000000001801"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x1b, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) 16.815503s ago: executing program 5 (id=1678): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x2007) r1 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000040)=""/46, 0x2e) getdents64(r3, 0xfffffffffffffffe, 0x29) 15.700951702s ago: executing program 4 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffdff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_socket_connect_nvme_tcp() accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x42000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) 15.596592117s ago: executing program 2 (id=1680): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5", 0x28}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8", 0x6f}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.414285556s ago: executing program 5 (id=1682): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0xfffffffffffffe8d}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 11.406032669s ago: executing program 3 (id=1684): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d00000000000000000000000d040000000000000000000002000000000400000000000007000000000000000061"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 11.282749957s ago: executing program 3 (id=1685): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 11.136181967s ago: executing program 3 (id=1686): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) socket(0x29, 0x2, 0x0) 9.814363311s ago: executing program 3 (id=1687): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000a701000000000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.623520805s ago: executing program 3 (id=1688): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) lstat(0x0, 0x0) 9.558854241s ago: executing program 3 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) close(0x3) 2.366130955s ago: executing program 34 (id=1674): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20016100) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="6f4913451e8b"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18024cf7b0b1fcc0feae000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00d3ff008c71ef28ff4b"], 0xffdd) 365.896204ms ago: executing program 35 (id=1682): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0xfffffffffffffe8d}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000001c0)="beff0307804a445b49c9fa8301005f", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 218.861454ms ago: executing program 36 (id=1680): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5", 0x28}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8", 0x6f}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 37 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffdff8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_socket_connect_nvme_tcp() accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$inet_nvme_pdu(r3, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x42000, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) kernel console output (not intermixed with test programs): number 6 using dummy_hcd [ 267.800948][ T5885] usb 5-1: device descriptor read/64, error -71 [ 267.831720][ T3387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.034736][ T3387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.101574][ T5885] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 268.126668][ T3387] bond0 (unregistering): Released all slaves [ 268.251392][ T5885] usb 5-1: device descriptor read/64, error -71 [ 268.374237][ T5885] usb usb5-port1: attempt power cycle [ 268.606966][ T6816] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 268.606995][ T6816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.607089][ T6816] vhci_hcd vhci_hcd.0: Device attached [ 268.858249][ T5885] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 268.907574][ T5885] usb 5-1: device descriptor read/8, error -71 [ 269.028056][ T36] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 269.100742][ T10] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 269.100762][ T36] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 269.334564][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 269.505047][ T10] usb 3-1: config 0 has no interfaces? [ 269.505088][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.505114][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.638391][ T5885] usb 5-1: device not accepting address 9, error -71 [ 269.638886][ T5885] usb usb5-port1: unable to enumerate USB device [ 270.483194][ T10] usb 3-1: config 0 descriptor?? [ 271.551231][ T3387] hsr_slave_0: left promiscuous mode [ 271.572357][ T3387] hsr_slave_1: left promiscuous mode [ 271.573380][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.598409][ T3387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.664800][ T10] usb 3-1: USB disconnect, device number 5 [ 271.711122][ T6817] vhci_hcd: connection reset by peer [ 271.719650][ T1178] vhci_hcd vhci_hcd.2: stop threads [ 271.719678][ T1178] vhci_hcd vhci_hcd.2: release socket [ 271.719751][ T1178] vhci_hcd vhci_hcd.2: disconnect device [ 272.091496][ T3387] team0 (unregistering): Port device team_slave_1 removed [ 272.173075][ T3387] team0 (unregistering): Port device team_slave_0 removed [ 274.090931][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 274.900349][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.900387][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.900428][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 274.900454][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.126286][ T10] usb 5-1: config 0 descriptor?? [ 275.241727][ T36] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 276.705310][ T6887] syz_tun: entered allmulticast mode [ 277.725256][ T6889] syz_tun: left allmulticast mode [ 277.834082][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 277.834220][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.150085][ T10] usb 5-1: USB disconnect, device number 10 [ 278.312577][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 281.068408][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.118630][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.142503][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.175985][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.180463][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.729613][ T5611] Bluetooth: hci5: command tx timeout [ 285.560764][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 285.713104][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.713133][ T5885] usb 2-1: config 0 has no interfaces? [ 285.713166][ T5885] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 285.713190][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.781342][ T5611] Bluetooth: hci5: command tx timeout [ 285.821028][ T5885] usb 2-1: config 0 descriptor?? [ 287.760820][ T5796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 287.860897][ T5611] Bluetooth: hci5: command tx timeout [ 287.949763][ T5796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.949794][ T5796] usb 5-1: config 0 has no interfaces? [ 287.949828][ T5796] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 287.949853][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.993523][ T5796] usb 5-1: config 0 descriptor?? [ 289.254695][ T31] usb 2-1: USB disconnect, device number 4 [ 289.280815][ T6218] bridge_slave_1: left allmulticast mode [ 289.280855][ T6218] bridge_slave_1: left promiscuous mode [ 289.281134][ T6218] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.544107][ T6218] bridge_slave_0: left allmulticast mode [ 289.544144][ T6218] bridge_slave_0: left promiscuous mode [ 289.544446][ T6218] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.940880][ T5611] Bluetooth: hci5: command tx timeout [ 291.913390][ T31] usb 5-1: USB disconnect, device number 11 [ 292.120830][ T823] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 292.157097][ T6218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.242783][ T6218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.293282][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.293311][ T823] usb 3-1: config 0 has no interfaces? [ 292.293342][ T823] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 292.293368][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.338769][ T6218] bond0 (unregistering): Released all slaves [ 292.363472][ T823] usb 3-1: config 0 descriptor?? [ 295.180452][ T6218] hsr_slave_0: left promiscuous mode [ 295.222473][ T6218] hsr_slave_1: left promiscuous mode [ 295.223625][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.225147][ T5614] usb 3-1: USB disconnect, device number 6 [ 295.328682][ T6218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.247581][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 297.337296][ T7185] mmap: syz.2.329 (7185) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 297.407570][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.407600][ T31] usb 2-1: config 0 has no interfaces? [ 297.407633][ T31] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 297.407679][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.533892][ T31] usb 2-1: config 0 descriptor?? [ 298.203537][ T823] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 298.373242][ T823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.373272][ T823] usb 5-1: config 0 has no interfaces? [ 298.373305][ T823] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 298.373331][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.421916][ T823] usb 5-1: config 0 descriptor?? [ 298.424695][ T6218] team0 (unregistering): Port device team_slave_1 removed [ 298.551551][ T6218] team0 (unregistering): Port device team_slave_0 removed [ 300.263157][ T4926] usb 2-1: USB disconnect, device number 5 [ 301.376971][ T7269] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 301.450553][ T823] usb 5-1: USB disconnect, device number 12 [ 301.744813][ T7269] bond1: entered promiscuous mode [ 301.747043][ T7269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.950794][ T823] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 302.046617][ T7272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.047239][ T7272] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 302.047269][ T7272] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 302.128926][ T823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.128950][ T823] usb 5-1: config 0 has no interfaces? [ 302.128976][ T823] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.129004][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.172502][ T823] usb 5-1: config 0 descriptor?? [ 302.210354][ T7272] bond1: (slave ip6gre1): making interface the new active one [ 302.210387][ T7272] ip6gre1: entered promiscuous mode [ 302.321162][ T7272] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 302.678845][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.680577][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.698703][ T6931] bridge_slave_0: entered allmulticast mode [ 302.714682][ T6931] bridge_slave_0: entered promiscuous mode [ 302.732242][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.732369][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.732599][ T6931] bridge_slave_1: entered allmulticast mode [ 302.768125][ T6931] bridge_slave_1: entered promiscuous mode [ 302.882696][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.906893][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.097581][ T6931] team0: Port device team_slave_0 added [ 303.148154][ T6931] team0: Port device team_slave_1 added [ 303.443174][ T4926] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 303.595610][ T4926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.595641][ T4926] usb 3-1: config 0 has no interfaces? [ 303.595673][ T4926] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.595691][ T4926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.665611][ T4926] usb 3-1: config 0 descriptor?? [ 303.883201][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.883219][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.883247][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.972497][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.972514][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.972546][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.311622][ T6931] hsr_slave_0: entered promiscuous mode [ 304.313233][ T6931] hsr_slave_1: entered promiscuous mode [ 305.178300][ T31] usb 5-1: USB disconnect, device number 13 [ 306.462300][ T823] usb 3-1: USB disconnect, device number 7 [ 307.275255][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.390'. [ 309.714161][ T6931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 309.812089][ T6931] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 309.828794][ T6931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.830949][ T823] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 309.887618][ T6931] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.888818][ T6931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 310.040317][ T6931] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 310.067395][ T823] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.067425][ T823] usb 5-1: config 0 has no interfaces? [ 310.067466][ T823] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 310.067492][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.130063][ T823] usb 5-1: config 0 descriptor?? [ 310.170660][ T6931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 310.466251][ T6931] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.827990][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.098571][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.176272][ T3387] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.176406][ T3387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.314342][ T3387] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.316159][ T3387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.027816][ T4926] usb 5-1: USB disconnect, device number 14 [ 316.679905][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.581776][ T5614] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 319.648202][ T6931] veth0_vlan: entered promiscuous mode [ 319.725669][ T6931] veth1_vlan: entered promiscuous mode [ 319.768317][ T5614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.768348][ T5614] usb 3-1: config 0 has no interfaces? [ 319.768381][ T5614] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 319.768407][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.946068][ T5614] usb 3-1: config 0 descriptor?? [ 320.096380][ T6931] veth0_macvtap: entered promiscuous mode [ 320.151555][ T6931] veth1_macvtap: entered promiscuous mode [ 320.322805][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.397122][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.776247][ T6218] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.793918][ T6218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.793970][ T6218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.794001][ T6218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.075001][ T1497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.075024][ T1497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.683304][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.683329][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.761459][ T5713] usb 3-1: USB disconnect, device number 8 [ 323.105119][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.105211][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.686252][ T7630] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 325.727537][ T7644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 326.305348][ T4926] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 326.493557][ T4926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.493586][ T4926] usb 3-1: config 0 has no interfaces? [ 326.493619][ T4926] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 326.493643][ T4926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.562393][ T4926] usb 3-1: config 0 descriptor?? [ 327.563178][ T7666] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 330.292281][ T31] usb 3-1: USB disconnect, device number 9 [ 333.725400][ T7752] binder: BINDER_SET_CONTEXT_MGR already set [ 333.726410][ T7752] binder: 7746:7752 ioctl 4018620d 200000001000 returned -16 [ 348.210833][ T5737] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 348.374459][ T5737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.374489][ T5737] usb 5-1: config 0 has no interfaces? [ 348.374520][ T5737] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 348.374546][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.422987][ T5737] usb 5-1: config 0 descriptor?? [ 348.930853][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 348.930876][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 348.931290][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 348.931308][ T7911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.578'. [ 353.477345][ T5713] usb 5-1: USB disconnect, device number 15 [ 356.398361][ T7984] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 357.495583][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 357.495649][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.603'. [ 357.497797][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 357.497991][ T7992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.603'. [ 360.236340][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 362.439366][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 362.439383][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 362.439564][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 362.439575][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 364.211042][ T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 364.354422][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 364.354448][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.628'. [ 364.354742][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 364.354760][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.628'. [ 364.449648][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.449681][ T31] usb 5-1: config 0 has no interfaces? [ 364.449722][ T31] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 364.449751][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.568957][ T31] usb 5-1: config 0 descriptor?? [ 366.070922][ T10] usb 5-1: USB disconnect, device number 16 [ 367.677233][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 367.677260][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 367.677519][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 367.677535][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 369.699884][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 370.576163][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.631175][ T4926] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 370.637031][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.638660][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.652905][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 370.689370][ T36] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 370.689433][ T36] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 370.689457][ T36] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 370.689484][ T36] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 370.689511][ T36] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.689555][ T36] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 370.689579][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.758535][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.762724][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 370.821522][ T4926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.821551][ T4926] usb 5-1: config 0 has no interfaces? [ 370.821584][ T4926] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 370.821609][ T4926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.917890][ T4926] usb 5-1: config 0 descriptor?? [ 371.197963][ T36] usb 3-1: usb_control_msg returned -32 [ 371.198015][ T36] usbtmc 3-1:16.0: can't read capabilities [ 371.340820][ T5713] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 371.496743][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.496772][ T5713] usb 6-1: config 0 has no interfaces? [ 371.496804][ T5713] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 371.496838][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.547076][ T5713] usb 6-1: config 0 descriptor?? [ 371.601629][ T4926] usb 3-1: USB disconnect, device number 10 [ 372.773232][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 372.773257][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 372.773769][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 372.773786][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 372.994388][ T5607] Bluetooth: hci3: command tx timeout [ 373.126993][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.468188][ T10] usb 5-1: USB disconnect, device number 17 [ 374.146598][ T4926] usb 6-1: USB disconnect, device number 2 [ 375.068455][ T5607] Bluetooth: hci3: command tx timeout [ 376.484115][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.710818][ T36] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 376.902761][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.902790][ T36] usb 5-1: config 0 has no interfaces? [ 376.902822][ T36] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 376.902857][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.964008][ T36] usb 5-1: config 0 descriptor?? [ 377.153080][ T5607] Bluetooth: hci3: command tx timeout [ 377.424103][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.382555][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.221288][ T5607] Bluetooth: hci3: command tx timeout [ 379.813447][ T10] usb 5-1: USB disconnect, device number 18 [ 382.316945][ T13] bridge_slave_1: left allmulticast mode [ 382.316983][ T13] bridge_slave_1: left promiscuous mode [ 382.317254][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.449031][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 382.670138][ T13] bridge_slave_0: left allmulticast mode [ 382.670177][ T13] bridge_slave_0: left promiscuous mode [ 382.678272][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.810817][ T5713] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 382.962252][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 384.481517][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 384.481549][ T13] ip6gre1 (unregistering): left promiscuous mode [ 384.507100][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.507249][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.952429][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.052223][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.109568][ T13] bond0 (unregistering): Released all slaves [ 387.178285][ T13] bond1 (unregistering): Released all slaves [ 387.575311][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 387.752654][ T8106] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.752794][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.753035][ T8106] bridge_slave_0: entered allmulticast mode [ 387.867673][ T8106] bridge_slave_0: entered promiscuous mode [ 387.991395][ T8106] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.991528][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.991945][ T8106] bridge_slave_1: entered allmulticast mode [ 388.035020][ T5713] usb 5-1: unable to get BOS descriptor or descriptor too short [ 388.036676][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 388.037041][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 388.037381][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 388.037495][ T5713] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 388.037517][ T5713] usb 5-1: chopping to 0 config(s) [ 388.037544][ T5713] usb 5-1: can't read configurations, error -32 [ 388.139978][ T8106] bridge_slave_1: entered promiscuous mode [ 388.712680][ T8386] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 389.077535][ T8106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.160049][ T8106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.399549][ T8106] team0: Port device team_slave_0 added [ 389.428670][ T8106] team0: Port device team_slave_1 added [ 389.613567][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.613580][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.613600][ T8106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.706898][ T5713] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 389.881664][ T5713] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.881694][ T5713] usb 6-1: config 0 has no interfaces? [ 389.881725][ T5713] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 389.881749][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.941038][ T5713] usb 6-1: config 0 descriptor?? [ 390.146327][ T8106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.146346][ T8106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.146392][ T8106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.937268][ T8106] hsr_slave_0: entered promiscuous mode [ 390.940314][ T8106] hsr_slave_1: entered promiscuous mode [ 390.943788][ T8106] debugfs: 'hsr0' already exists in 'hsr' [ 390.943861][ T8106] Cannot create hsr debugfs directory [ 391.649345][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 392.050727][ T13] hsr_slave_0: left promiscuous mode [ 392.093639][ T13] hsr_slave_1: left promiscuous mode [ 392.094689][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.094715][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.132421][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.132451][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.285880][ T13] veth1_macvtap: left promiscuous mode [ 392.285981][ T13] veth0_macvtap: left promiscuous mode [ 392.286237][ T13] veth1_vlan: left promiscuous mode [ 392.314255][ T13] veth0_vlan: left promiscuous mode [ 392.440893][ T4926] usb 6-1: USB disconnect, device number 3 [ 394.500811][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 394.655446][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.655475][ T10] usb 3-1: config 0 has no interfaces? [ 394.655511][ T10] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 394.655529][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.711116][ T10] usb 3-1: config 0 descriptor?? [ 395.222745][ T13] team0 (unregistering): Port device team_slave_1 removed [ 395.302446][ T13] team0 (unregistering): Port device team_slave_0 removed [ 396.033962][ T8552] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 397.082106][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.826'. [ 397.254584][ T4926] usb 3-1: USB disconnect, device number 11 [ 397.923658][ T8587] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 401.188872][ T31] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 401.354371][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.354403][ T31] usb 5-1: config 0 has no interfaces? [ 401.354435][ T31] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 401.354460][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.395772][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 401.468479][ T31] usb 5-1: config 0 descriptor?? [ 401.642820][ T8106] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.831333][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.834965][ T8106] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.081910][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.563647][ T8106] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 402.717994][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.746666][ T8106] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 402.940034][ T8106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.705874][ T8106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.811741][ T8106] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.855830][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.856086][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.044315][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.044451][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.072454][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 404.143878][ T4926] usb 5-1: USB disconnect, device number 21 [ 406.563095][ T823] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 406.620883][ T6354] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 406.736488][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.736518][ T823] usb 6-1: config 0 has no interfaces? [ 406.736549][ T823] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 406.736575][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.776234][ T6354] usb 3-1: Using ep0 maxpacket: 8 [ 407.063380][ T6354] usb 3-1: config 0 interface 0 altsetting 168 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.063430][ T6354] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.063740][ T6354] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 407.063829][ T6354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.276114][ T823] usb 6-1: config 0 descriptor?? [ 407.287578][ T6354] usb 3-1: config 0 descriptor?? [ 407.871883][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 407.937230][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937278][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937306][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937333][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937360][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937386][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937412][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937451][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937477][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 407.937504][ T6354] logitech 0003:046D:C294.0001: unknown main item tag 0x0 [ 408.185269][ T8106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.200119][ T6354] logitech 0003:046D:C294.0001: hidraw0: USB HID v0.00 Device [HID 046d:c294] on usb-dummy_hcd.2-1/input0 [ 408.200185][ T6354] logitech 0003:046D:C294.0001: no inputs found [ 408.365903][ T6354] usb 3-1: USB disconnect, device number 12 [ 408.474650][ T8781] fido_id[8781]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 408.972294][ T8800] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 409.697674][ T8106] veth0_vlan: entered promiscuous mode [ 409.737822][ T8106] veth1_vlan: entered promiscuous mode [ 409.823598][ T10] usb 6-1: USB disconnect, device number 4 [ 409.952108][ T8106] veth0_macvtap: entered promiscuous mode [ 409.995576][ T8106] veth1_macvtap: entered promiscuous mode [ 410.207145][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.234656][ T8106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.963764][ T3429] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.039510][ T3429] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.041877][ T3429] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.042436][ T3429] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.133858][ T8849] overlayfs: missing 'lowerdir' [ 412.257713][ T6218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.257732][ T6218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.323333][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.323355][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.410721][ T5737] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 415.583156][ T5737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.583182][ T5737] usb 3-1: config 0 has no interfaces? [ 415.583210][ T5737] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.583231][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.630214][ T5737] usb 3-1: config 0 descriptor?? [ 415.740804][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 415.900692][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 415.902400][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 415.902435][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.902474][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.902500][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.902531][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.902556][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.902581][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.902606][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 415.903791][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 415.903823][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.903866][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.903892][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.903933][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.903959][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.903985][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.904012][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 415.908002][ T31] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 415.908036][ T31] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.913407][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 415.913435][ T31] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.913459][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.913482][ T31] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 415.913506][ T31] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.913538][ T31] usb 7-1: config 168 interface 0 has no altsetting 0 [ 416.077928][ T31] usb 7-1: string descriptor 0 read error: -22 [ 416.078331][ T31] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 416.078387][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.286194][ T31] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.583111][ T31] usb 7-1: USB disconnect, device number 2 [ 417.240827][ T5737] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 417.390766][ T5737] usb 6-1: Using ep0 maxpacket: 8 [ 417.393983][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.394021][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.394047][ T5737] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 417.394075][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 417.394214][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 417.394242][ T5737] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.394286][ T5737] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.394311][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.742696][ T5737] usb 6-1: GET_CAPABILITIES returned 0 [ 417.742744][ T5737] usbtmc 6-1:16.0: can't read capabilities [ 417.959496][ T36] usb 6-1: USB disconnect, device number 5 [ 418.180740][ T5737] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 418.332682][ T5737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 418.332745][ T5737] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 418.332767][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.372180][ T5737] usb 7-1: config 0 descriptor?? [ 418.373159][ T8944] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 418.523280][ T823] usb 3-1: USB disconnect, device number 13 [ 419.735647][ T5737] hid_parser_main: 28 callbacks suppressed [ 419.735670][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735710][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735734][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735758][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735781][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735805][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735829][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735853][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735878][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.735919][ T5737] asus 0003:0B05:1ABE.0002: unknown main item tag 0x0 [ 419.746272][ T5737] asus 0003:0B05:1ABE.0002: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.6-1/input0 [ 419.950023][ T31] usb 7-1: USB disconnect, device number 3 [ 421.161121][ T5737] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 421.437931][ T5737] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.437948][ T5737] usb 7-1: config 0 has no interfaces? [ 421.437967][ T5737] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 421.437981][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.502131][ T5737] usb 7-1: config 0 descriptor?? [ 421.914785][ T9000] fido_id[9000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 422.166646][ T9010] syzkaller0: entered promiscuous mode [ 422.166670][ T9010] syzkaller0: entered allmulticast mode [ 424.008835][ T823] usb 7-1: USB disconnect, device number 4 [ 424.890733][ T5737] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 425.043526][ T5737] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.043573][ T5737] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 425.043595][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.088504][ T5737] usb 5-1: config 0 descriptor?? [ 425.328566][ T5737] usbhid 5-1:0.0: can't add hid device: -71 [ 425.328694][ T5737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 425.375072][ T5737] usb 5-1: USB disconnect, device number 22 [ 425.381474][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 425.544733][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.544759][ T31] usb 7-1: config 0 has no interfaces? [ 425.544785][ T31] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 425.544807][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.601173][ T31] usb 7-1: config 0 descriptor?? [ 425.980792][ T5796] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 426.138702][ T5796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.138749][ T5796] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 426.138771][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.190037][ T5796] usb 5-1: config 0 descriptor?? [ 426.300766][ T5737] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 426.456879][ T5737] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.456906][ T5737] usb 6-1: config 0 has no interfaces? [ 426.456936][ T5737] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 426.456961][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.514720][ T5737] usb 6-1: config 0 descriptor?? [ 426.606337][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.609740][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.043053][ T5796] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 427.113612][ T5796] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 427.871808][ T5796] usb 5-1: USB disconnect, device number 23 [ 427.871874][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 428.320822][ T5737] usb 7-1: USB disconnect, device number 5 [ 429.391494][ T823] usb 6-1: USB disconnect, device number 6 [ 429.963157][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1029'. [ 430.400787][ T5796] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 430.551713][ T5796] usb 5-1: Using ep0 maxpacket: 32 [ 430.565392][ T5796] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 430.565524][ T5796] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.565609][ T5796] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 430.565680][ T5796] usb 5-1: config 0 interface 0 has no altsetting 0 [ 430.565790][ T5796] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 430.565846][ T5796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.654603][ T5796] usb 5-1: config 0 descriptor?? [ 431.207336][ T4926] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 431.776916][ T4926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.776942][ T4926] usb 6-1: config 0 has no interfaces? [ 431.776971][ T4926] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 431.776993][ T4926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.777187][ T5796] wacom 0003:056A:0000.0003: ignoring exceeding usage max [ 431.819269][ T5796] hid_parser_main: 467 callbacks suppressed [ 431.819326][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.819394][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826530][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826627][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826718][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826758][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826844][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826909][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826936][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 431.826963][ T5796] wacom 0003:056A:0000.0003: unknown main item tag 0x0 [ 432.005316][ T4926] usb 6-1: config 0 descriptor?? [ 432.027519][ T5796] wacom 0003:056A:0000.0003: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 432.131730][ T5796] wacom 0003:056A:0000.0003: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.4-1/input0 [ 433.455944][ T5796] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0000.0003/input/input9 [ 435.957627][ T823] usb 6-1: USB disconnect, device number 7 [ 436.218180][ T5796] usb 5-1: USB disconnect, device number 24 [ 439.562544][ T36] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 439.713181][ T36] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.713210][ T36] usb 7-1: config 0 has no interfaces? [ 439.713241][ T36] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 439.713266][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.811603][ T36] usb 7-1: config 0 descriptor?? [ 439.996815][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1065'. [ 442.736523][ T5796] usb 7-1: USB disconnect, device number 6 [ 442.961208][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1091'. [ 442.992541][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1090'. [ 442.992687][ T9362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.053778][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1093'. [ 443.471591][ T9362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.641080][ T9369] warning: `syz.2.1094' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 444.210857][ T5796] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 444.270703][ T4926] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 444.384291][ T5796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.384320][ T5796] usb 6-1: config 0 has no interfaces? [ 444.384352][ T5796] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 444.384377][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.428658][ T5796] usb 6-1: config 0 descriptor?? [ 444.441517][ T4926] usb 7-1: Using ep0 maxpacket: 8 [ 444.447164][ T4926] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.447191][ T4926] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.447206][ T4926] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 444.447222][ T4926] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 444.447239][ T4926] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 444.447254][ T4926] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.447280][ T4926] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.447300][ T4926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.844935][ T4926] usb 7-1: usb_control_msg returned -71 [ 444.844986][ T4926] usbtmc 7-1:16.0: can't read capabilities [ 444.920427][ T4926] usb 7-1: USB disconnect, device number 7 [ 445.795198][ T9410] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 446.040184][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.040269][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.545558][ T5713] usb 6-1: USB disconnect, device number 8 [ 450.539452][ T9460] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 456.047753][ T9508] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 456.047808][ T9508] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 456.047847][ T9508] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 459.876473][ T4926] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 460.854752][ T4926] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.854781][ T4926] usb 6-1: config 0 has no interfaces? [ 460.854812][ T4926] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 460.854837][ T4926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.903551][ T4926] usb 6-1: config 0 descriptor?? [ 463.747903][ T9611] Invalid ELF header magic: != ELF [ 464.148665][ T4926] usb 6-1: USB disconnect, device number 9 [ 467.260742][ T5737] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 467.583411][ T5737] usb 7-1: unable to get BOS descriptor or descriptor too short [ 467.585210][ T5737] usb 7-1: not running at top speed; connect to a high speed hub [ 467.596388][ T5737] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 467.596449][ T5737] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 467.596486][ T5737] usb 7-1: config 14 has no interface number 0 [ 467.596524][ T5737] usb 7-1: config 14 has no interface number 1 [ 467.596757][ T5737] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 467.596812][ T5737] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 467.596874][ T5737] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 467.596950][ T5737] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 467.597011][ T5737] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 467.597065][ T5737] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 467.597116][ T5737] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.597184][ T5737] usb 7-1: config 14 interface 57 has no altsetting 0 [ 467.597222][ T5737] usb 7-1: config 14 interface 228 has no altsetting 0 [ 467.663896][ T5737] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 467.663977][ T5737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.664017][ T5737] usb 7-1: Product: syz [ 467.664051][ T5737] usb 7-1: Manufacturer: syz [ 467.664109][ T5737] usb 7-1: SerialNumber: syz [ 468.248952][ T5737] legousbtower 7-1:14.57: interrupt endpoints not found [ 468.665324][ T5737] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 468.824882][ T823] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 468.840616][ T5737] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 468.880189][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.908264][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.920299][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.929377][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.935903][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.085041][ T823] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.085079][ T823] usb 6-1: config 0 has no interfaces? [ 469.085109][ T823] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 469.085131][ T823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.237922][ T823] usb 6-1: config 0 descriptor?? [ 470.349435][ T5803] usb 7-1: USB disconnect, device number 8 [ 470.605369][ T5803] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 470.738551][ T5832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.220847][ T5607] Bluetooth: hci4: command tx timeout [ 471.446912][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.940723][ T10] usb 6-1: USB disconnect, device number 10 [ 473.301294][ T5607] Bluetooth: hci4: command tx timeout [ 473.372260][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.319741][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.382518][ T5607] Bluetooth: hci4: command tx timeout [ 477.460705][ T5607] Bluetooth: hci4: command tx timeout [ 478.047655][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1235'. [ 478.185471][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1236'. [ 479.417106][ T5832] bridge_slave_1: left allmulticast mode [ 479.417140][ T5832] bridge_slave_1: left promiscuous mode [ 479.417434][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.606132][ T5832] bridge_slave_0: left allmulticast mode [ 479.606165][ T5832] bridge_slave_0: left promiscuous mode [ 479.606387][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.492687][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.551573][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.573529][ T5832] bond0 (unregistering): Released all slaves [ 481.890470][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 482.693416][ T9834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1246'. [ 482.839810][ T5832] tipc: Left network mode [ 483.111021][ T9676] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.111160][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.111382][ T9676] bridge_slave_0: entered allmulticast mode [ 483.218548][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1249'. [ 483.248563][ T9676] bridge_slave_0: entered promiscuous mode [ 483.314512][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.314641][ T9676] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.314871][ T9676] bridge_slave_1: entered allmulticast mode [ 483.397954][ T9676] bridge_slave_1: entered promiscuous mode [ 483.621379][ T823] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 483.753585][ T9676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.772232][ T823] usb 3-1: Using ep0 maxpacket: 16 [ 483.892794][ T9676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.046916][ T9676] team0: Port device team_slave_0 added [ 484.067901][ T9676] team0: Port device team_slave_1 added [ 484.162057][ T823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 484.163204][ T823] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 484.163240][ T823] usb 3-1: can't read configurations, error -71 [ 484.815150][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1248'. [ 485.161823][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.161842][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.161870][ T9676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.340402][ T9676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.340423][ T9676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.340461][ T9676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.187243][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1256'. [ 488.482879][ T9676] hsr_slave_0: entered promiscuous mode [ 488.507446][ T9676] hsr_slave_1: entered promiscuous mode [ 488.508434][ T9676] debugfs: 'hsr0' already exists in 'hsr' [ 488.550991][ T9676] Cannot create hsr debugfs directory [ 489.095740][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 489.179536][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1259'. [ 489.333625][ T5832] hsr_slave_0: left promiscuous mode [ 489.396691][ T5832] hsr_slave_1: left promiscuous mode [ 489.397693][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.397717][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.471389][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.471417][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.588127][ T5832] veth1_macvtap: left promiscuous mode [ 489.588239][ T5832] veth0_macvtap: left promiscuous mode [ 489.608307][ T5832] veth1_vlan: left promiscuous mode [ 489.608506][ T5832] veth0_vlan: left promiscuous mode [ 494.287547][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 497.025154][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 497.145925][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 497.467812][ T9940] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1271'. [ 499.584760][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1273'. [ 500.534324][ T5832] IPVS: stop unused estimator thread 0... [ 502.071167][ T9676] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.138843][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.140527][ T9676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.194672][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.195886][ T9676] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.246100][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.247321][ T9676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.284616][ T9676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.427478][ T9676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.452597][ T9676] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.474523][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.474702][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.497530][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.497774][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.587257][ T9676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.005961][ T9676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.093165][ T9676] veth0_vlan: entered promiscuous mode [ 503.102733][ T9676] veth1_vlan: entered promiscuous mode [ 503.173124][ T9676] veth0_macvtap: entered promiscuous mode [ 503.177740][ T9676] veth1_macvtap: entered promiscuous mode [ 503.215557][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.249843][ T9676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.500801][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.501223][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.501607][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.501651][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.856728][ T3387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.856748][ T3387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.076368][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.076392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.388315][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.388392][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.404132][T10042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1279'. [ 510.404401][T10042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1279'. [ 510.490905][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 510.512578][T10044] zram: Can't change algorithm for initialized device [ 510.654735][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.654765][ T10] usb 6-1: config 0 has no interfaces? [ 510.654798][ T10] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 510.654823][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.712682][ T10] usb 6-1: config 0 descriptor?? [ 516.790681][ T36] usb 6-1: USB disconnect, device number 11 [ 516.975143][T10075] JFS: discard option not supported on device [ 517.204473][T10075] Mount JFS Failure: -5 [ 517.204528][T10075] jfs_mount failed w/return code = -5 [ 518.684587][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1292'. [ 518.684770][T10094] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1292'. [ 520.234398][T10112] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 520.703007][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 521.117312][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.117340][ T10] usb 5-1: config 0 has no interfaces? [ 521.117370][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 521.117394][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.837010][ T10] usb 5-1: config 0 descriptor?? [ 522.083620][T10130] JFS: discard option not supported on device [ 522.084102][T10130] Mount JFS Failure: -5 [ 522.084115][T10130] jfs_mount failed w/return code = -5 [ 526.692325][ T5713] usb 5-1: USB disconnect, device number 25 [ 527.576545][T10173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1315'. [ 528.152125][ T36] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 529.210824][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 529.213557][ T36] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 529.213585][ T36] usb 3-1: config 0 has no interface number 0 [ 529.213641][ T36] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 529.213664][ T36] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 529.213689][ T36] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.213714][ T36] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.213754][ T36] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 529.213784][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.225042][ T36] usb 3-1: config 0 descriptor?? [ 529.427419][ T36] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 529.483991][ T36] usb 3-1: USB disconnect, device number 16 [ 529.536664][ T36] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 536.120689][ T5803] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 536.310678][ T5803] usb 7-1: Using ep0 maxpacket: 16 [ 536.314091][ T5803] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.314127][ T5803] usb 7-1: config 0 interface 0 has no altsetting 0 [ 536.314162][ T5803] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 536.314186][ T5803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.372870][ T5803] usb 7-1: config 0 descriptor?? [ 539.949161][ T5803] usbhid 7-1:0.0: can't add hid device: -71 [ 539.949262][ T5803] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 540.087395][ T5803] usb 7-1: USB disconnect, device number 9 [ 541.595908][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1347'. [ 542.322456][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 542.322482][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 542.394634][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 542.394661][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1353'. [ 548.946629][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1364'. [ 550.221617][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 550.221643][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 550.264350][ T5710] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 550.418366][ T5710] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.418397][ T5710] usb 5-1: config 0 has no interfaces? [ 550.418430][ T5710] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 550.418456][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.420328][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 550.420349][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 550.467633][ T5710] usb 5-1: config 0 descriptor?? [ 552.223943][ T31] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 552.423425][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 552.426351][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 552.454279][ T31] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 552.454309][ T31] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 552.454331][ T31] usb 3-1: config 14 has no interface number 0 [ 552.454349][ T31] usb 3-1: config 14 has no interface number 1 [ 552.454424][ T31] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 552.454449][ T31] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 552.454478][ T31] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 552.454669][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 552.454703][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 552.454731][ T31] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 552.454756][ T31] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.454783][ T31] usb 3-1: config 14 interface 57 has no altsetting 0 [ 552.454803][ T31] usb 3-1: config 14 interface 228 has no altsetting 0 [ 552.651150][ T31] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 552.651183][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.651206][ T31] usb 3-1: Product: syz [ 552.651222][ T31] usb 3-1: Manufacturer: syz [ 552.651239][ T31] usb 3-1: SerialNumber: syz [ 553.183205][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1369'. [ 553.439986][ T31] legousbtower 3-1:14.57: interrupt endpoints not found [ 553.985646][ T31] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 554.008992][ T31] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 554.189445][ T5713] usb 5-1: USB disconnect, device number 26 [ 554.766049][ T31] usb 3-1: USB disconnect, device number 17 [ 555.027766][ T31] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 557.598355][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 557.598380][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 558.219507][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 558.219534][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1380'. [ 559.426135][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1383'. [ 560.850794][ T5713] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 561.024255][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.024286][ T5713] usb 3-1: config 0 has no interfaces? [ 561.024436][ T5713] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 561.024463][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.070199][ T5713] usb 3-1: config 0 descriptor?? [ 564.655063][ T6354] usb 3-1: USB disconnect, device number 18 [ 565.083791][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 566.267682][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 566.268477][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 566.289980][ T10] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 566.290008][ T10] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 566.290032][ T10] usb 5-1: config 14 has no interface number 0 [ 566.290050][ T10] usb 5-1: config 14 has no interface number 1 [ 566.290123][ T10] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 566.290147][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 566.290175][ T10] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 566.290203][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 566.290245][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 566.290272][ T10] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 566.290294][ T10] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.290321][ T10] usb 5-1: config 14 interface 57 has no altsetting 0 [ 566.290339][ T10] usb 5-1: config 14 interface 228 has no altsetting 0 [ 566.622531][ T10] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 566.622565][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.622587][ T10] usb 5-1: Product: syz [ 566.622602][ T10] usb 5-1: Manufacturer: syz [ 566.622617][ T10] usb 5-1: SerialNumber: syz [ 566.627890][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1392'. [ 568.780821][ T10] legousbtower 5-1:14.57: interrupt endpoints not found [ 568.813159][ T10] legousbtower 5-1:14.228: get version request failed: -71 [ 568.813352][ T10] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -71 [ 569.128435][ T10] usb 5-1: USB disconnect, device number 27 [ 569.861471][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.861562][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.177157][T10453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1395'. [ 577.125552][T10492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1406'. [ 579.272854][T10504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1409'. [ 590.081041][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1422'. [ 592.180863][T10553] Bluetooth: hci4: command 0x0406 tx timeout [ 593.449093][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 593.800293][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 594.202529][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.202589][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.202618][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 594.202641][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 594.202665][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.204788][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 594.204817][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 594.204839][ T10] usb 6-1: Manufacturer: syz [ 594.217274][ T10] usb 6-1: config 0 descriptor?? [ 594.417221][ T37] audit: type=1326 audit(1785766707.288:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10556 comm="syz.5.1425" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff425b8e019 code=0x7fc00000 [ 595.054781][ T10] rc_core: IR keymap rc-hauppauge not found [ 595.054804][ T10] Registered IR keymap rc-empty [ 595.055736][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.353576][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.112846][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 596.163190][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 596.204862][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.222201][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.240737][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.260827][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.280826][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.300844][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.320722][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.341411][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.360797][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.380784][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 596.618393][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 596.618421][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 596.675821][ T10] usb 6-1: USB disconnect, device number 12 [ 598.174440][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1440'. [ 598.652020][T10608] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 598.889127][T10608] cramfs: wrong magic [ 607.275011][ T5803] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 607.443803][ T5803] usb 6-1: Using ep0 maxpacket: 8 [ 607.638946][ T5803] usb 6-1: config 16 has an invalid descriptor of length 232, skipping remainder of the config [ 607.638977][ T5803] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 607.639017][ T5803] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.639042][ T5803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.725537][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1453'. [ 610.827216][ T6354] usb 6-1: USB disconnect, device number 13 [ 616.328409][T10686] capability: warning: `syz.5.1462' uses deprecated v2 capabilities in a way that may be insecure [ 617.329944][ T37] audit: type=1326 audit(1785766730.108:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faf70bbee09 code=0x7ffc0000 [ 617.330169][ T37] audit: type=1326 audit(1785766730.108:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faf70b7ad7b code=0x7ffc0000 [ 617.330214][ T37] audit: type=1326 audit(1785766730.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf70bbe019 code=0x7ffc0000 [ 617.331847][ T37] audit: type=1326 audit(1785766730.128:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf70bbe019 code=0x7ffc0000 [ 617.358434][ T37] audit: type=1326 audit(1785766730.238:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf70bbe019 code=0x7ffc0000 [ 617.358699][ T37] audit: type=1326 audit(1785766730.238:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf70bbe019 code=0x7ffc0000 [ 617.358894][ T37] audit: type=1326 audit(1785766730.208:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7faf70b7a46c code=0x7ffc0000 [ 617.359130][ T37] audit: type=1326 audit(1785766730.238:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faf70b7a4ce code=0x7ffc0000 [ 617.359176][ T37] audit: type=1326 audit(1785766730.238:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf70bbdcab code=0x7ffc0000 [ 617.409655][ T37] audit: type=1326 audit(1785766730.288:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10693 comm="syz.6.1464" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf70bbe019 code=0x7ffc0000 [ 620.190800][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 620.341101][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 621.691905][ T10] usb 7-1: config 16 has an invalid descriptor of length 232, skipping remainder of the config [ 621.691936][ T10] usb 7-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 621.691977][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 621.692003][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.643307][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1471'. [ 622.643567][T10723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1471'. [ 623.942171][ T5737] usb 7-1: USB disconnect, device number 10 [ 625.336858][T10735] syzkaller0: entered promiscuous mode [ 625.336887][T10735] syzkaller0: entered allmulticast mode [ 629.211090][T10752] binder: BINDER_SET_CONTEXT_MGR already set [ 629.211107][T10752] binder: 10750:10752 ioctl 4018620d 200000001000 returned -16 [ 630.325916][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.340833][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.891128][T10760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1484'. [ 632.640751][ T5713] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 632.893132][ T5713] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 632.893163][ T5713] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.893207][ T5713] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.893223][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.249543][T10760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1484'. [ 634.661201][ T5607] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 637.170965][ T5713] usb 4-1: usb_control_msg returned -71 [ 637.171013][ T5713] usbtmc 4-1:16.0: can't read capabilities [ 637.261598][ T5713] usb 4-1: USB disconnect, device number 6 [ 638.193640][ T5607] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 638.506171][T10798] binder: BINDER_SET_CONTEXT_MGR already set [ 638.506190][T10798] binder: 10796:10798 ioctl 4018620d 200000001000 returned -16 [ 640.084105][T10809] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1498'. [ 640.084384][T10809] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1498'. [ 640.556445][ T5710] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 640.797292][ T5710] usb 6-1: device descriptor read/64, error -71 [ 640.933726][ T31] IPVS: starting estimator thread 0... [ 641.147980][T10821] IPVS: using max 8 ests per chain, 19200 per kthread [ 641.323038][ T5710] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 641.848462][ T5710] usb 6-1: device descriptor read/64, error -71 [ 642.097155][ T5710] usb usb6-port1: attempt power cycle [ 642.723495][ T5710] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 643.507171][ T5710] usb 6-1: device descriptor read/8, error -71 [ 646.373652][ T5607] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 646.685389][T10848] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1507'. [ 646.963461][T10850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1510'. [ 646.963725][T10850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1510'. [ 650.922962][T10865] /dev/nullb0: Can't open blockdev [ 658.297079][T10909] JFS: discard option not supported on device [ 658.654071][T10909] Mount JFS Failure: -5 [ 658.654090][T10909] jfs_mount failed w/return code = -5 [ 667.833245][T10962] binder: 10961:10962 ioctl c0306201 0 returned -14 [ 671.605696][ T5803] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 671.800753][ T5803] usb 7-1: Using ep0 maxpacket: 16 [ 671.804308][ T5803] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 671.804342][ T5803] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 671.846810][ T5803] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 671.846843][ T5803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.846864][ T5803] usb 7-1: Product: syz [ 671.846879][ T5803] usb 7-1: Manufacturer: syz [ 671.846894][ T5803] usb 7-1: SerialNumber: syz [ 671.899602][ T5803] usb 7-1: config 0 descriptor?? [ 671.943810][ T5803] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 671.943876][ T5803] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 673.095491][T10990] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 673.170675][T10990] cramfs: wrong magic [ 673.691738][ T5803] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 673.695833][ T5803] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 674.299840][ T5803] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 674.300856][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 674.302632][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 674.304827][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 674.307909][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 674.308832][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 674.514680][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 674.514708][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 674.514725][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 674.514741][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 674.514758][ T5803] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 674.563614][ T5803] usb 7-1: USB disconnect, device number 11 [ 674.857441][T11010] JFS: discard option not supported on device [ 674.868816][T11010] Mount JFS Failure: -5 [ 674.868832][T11010] jfs_mount failed w/return code = -5 [ 677.224048][T11023] syzkaller0: entered promiscuous mode [ 677.224072][T11023] syzkaller0: entered allmulticast mode [ 677.379615][T11027] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 680.890658][ T5738] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 681.475207][ T5738] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 681.475477][ T5738] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 681.475527][ T5738] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 681.475655][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.332542][ T5738] usb 3-1: usb_control_msg returned -71 [ 685.332591][ T5738] usbtmc 3-1:16.0: can't read capabilities [ 685.357435][ T5738] usb 3-1: USB disconnect, device number 19 [ 686.793401][ T6354] IPVS: starting estimator thread 0... [ 686.930818][T11077] IPVS: using max 7 ests per chain, 16800 per kthread [ 687.650935][T11080] syz.5.1568 (11080) used greatest stack depth: 17752 bytes left [ 690.721684][ T6354] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 691.134927][ T6354] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.134963][ T6354] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.135321][ T6354] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.135348][ T6354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.706776][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.706835][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.812958][ T6354] usb 4-1: usb_control_msg returned -71 [ 691.813008][ T6354] usbtmc 4-1:16.0: can't read capabilities [ 691.871444][ T6354] usb 4-1: USB disconnect, device number 7 [ 701.176474][ T6354] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 701.181772][T11166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 702.101122][ T6354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.101153][ T6354] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 704.121485][ T6354] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 704.121518][ T6354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.121540][ T6354] usb 4-1: Product: syz [ 704.121555][ T6354] usb 4-1: Manufacturer: syz [ 704.214037][ T6354] usb 4-1: config 0 descriptor?? [ 704.214555][ T6354] usb 4-1: can't set config #0, error -71 [ 704.240047][ T6354] usb 4-1: USB disconnect, device number 8 [ 704.487282][T11179] input: syz1 as /devices/virtual/input/input26 [ 706.470842][ T6354] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 706.490720][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 706.669185][ T6354] usb 3-1: Using ep0 maxpacket: 32 [ 706.772285][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 706.869282][ T6354] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 707.032935][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.032965][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.334320][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.335965][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.552395][ T10] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 707.552426][ T10] usb 6-1: config 0 has no interface number 0 [ 707.552582][ T10] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.552615][ T10] usb 6-1: config 0 interface 85 has no altsetting 0 [ 707.562549][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.562579][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.565597][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.565622][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.568353][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.568516][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.578730][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.578754][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.583786][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.583811][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.585057][ T6354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.585081][ T6354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.591535][ T6354] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 707.591564][ T6354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 707.591584][ T6354] usb 3-1: Product: syz [ 707.591605][ T6354] usb 3-1: Manufacturer: syz [ 707.591615][ T6354] usb 3-1: SerialNumber: syz [ 707.615220][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 707.615252][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.615274][ T10] usb 6-1: Product: syz [ 707.615290][ T10] usb 6-1: Manufacturer: syz [ 707.615306][ T10] usb 6-1: SerialNumber: syz [ 707.714968][ T10] usb 6-1: config 0 descriptor?? [ 708.339616][ T10] appletouch 6-1:0.85: Geyser mode initialized. [ 708.343750][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input27 [ 708.514059][ T6354] usb 3-1: interface 1 not found [ 708.624437][ T6354] usb 3-1: USB disconnect, device number 20 [ 708.644038][ C1] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 708.648223][ T10] usb 6-1: USB disconnect, device number 18 [ 708.964147][ T10] appletouch 6-1:0.85: input: appletouch disconnected [ 710.961054][T11231] bridge0: entered allmulticast mode [ 722.347111][T11238] kcov: kcov: vm_insert_page() failed [ 723.027926][ T39] oom_reaper: reaped process 11245 (syz.5.1612), now anon-rss:0kB, file-rss:25864kB, shmem-rss:0kB [ 723.357552][T11273] zram: Can't change algorithm for initialized device [ 723.374694][T11238] syz.5.1612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 723.374748][T11238] CPU: 1 UID: 0 PID: 11238 Comm: syz.5.1612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 723.374787][T11238] Tainted: [L]=SOFTLOCKUP [ 723.374795][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.374813][T11238] Call Trace: [ 723.374821][T11238] [ 723.374830][T11238] dump_stack_lvl+0xe8/0x150 [ 723.375036][T11238] dump_header+0xd3/0x4b0 [ 723.375078][T11238] out_of_memory+0x10d4/0x1480 [ 723.375174][T11238] ? __pfx_out_of_memory+0x10/0x10 [ 723.375254][T11238] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.375381][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.375442][T11238] ? _mutex_lock_killable+0x152/0x1d0 [ 723.375466][T11238] ? try_charge_memcg+0xbb6/0x15b0 [ 723.375565][T11238] try_charge_memcg+0xc75/0x15b0 [ 723.375609][T11238] ? __pfx_try_charge_memcg+0x10/0x10 [ 723.375664][T11238] ? charge_memcg+0x20/0x2b0 [ 723.375692][T11238] charge_memcg+0x19c/0x2b0 [ 723.375721][T11238] __mem_cgroup_charge+0x25/0x80 [ 723.375747][T11238] do_pte_missing+0x859/0x28f0 [ 723.375819][T11238] ? handle_mm_fault+0xe8/0x13f0 [ 723.375847][T11238] handle_mm_fault+0xd28/0x13f0 [ 723.375879][T11238] ? handle_mm_fault+0xe8/0x13f0 [ 723.375904][T11238] ? __pfx_handle_mm_fault+0x10/0x10 [ 723.375943][T11238] ? __lock_acquire+0x683/0x2ce0 [ 723.376026][T11238] ? lock_mm_and_find_vma+0xa7/0x340 [ 723.376082][T11238] do_user_addr_fault+0x744/0x1340 [ 723.376159][T11238] exc_page_fault+0x6a/0xc0 [ 723.376191][T11238] asm_exc_page_fault+0x26/0x30 [ 723.376241][T11238] RIP: 0010:__put_user_4+0xd/0x30 [ 723.376297][T11238] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 723.376316][T11238] RSP: 0018:ffffc90005d6fa90 EFLAGS: 00050202 [ 723.376344][T11238] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000555593db47d0 [ 723.376358][T11238] RDX: 0000000000000000 RSI: ffffffff8daf6ba4 RDI: ffffffff8bca7880 [ 723.376378][T11238] RBP: dffffc0000000000 R08: ffffffff8217a58f R09: 0000000000000000 [ 723.376394][T11238] R10: 0000000000000000 R11: ffff8880336a7030 R12: dffffc0000000000 [ 723.376411][T11238] R13: 1ffff11003be4c88 R14: ffff88801df25d00 R15: ffff88801df26440 [ 723.376435][T11238] ? __might_fault+0xaf/0x130 [ 723.376467][T11238] mm_release+0xd5/0x290 [ 723.376535][T11238] exit_mm+0x50/0x240 [ 723.376584][T11238] do_exit+0x6cd/0x2360 [ 723.376604][T11238] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.376634][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.376671][T11238] ? __pfx_do_exit+0x10/0x10 [ 723.376735][T11238] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 723.376758][T11238] ? rt_spin_lock+0x1e0/0x400 [ 723.376790][T11238] ? rt_spin_unlock+0x157/0x200 [ 723.376818][T11238] do_group_exit+0x22d/0x2f0 [ 723.376839][T11238] ? rt_spin_unlock+0x163/0x200 [ 723.376867][T11238] get_signal+0x121b/0x12c0 [ 723.376950][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.376990][T11238] arch_do_signal_or_restart+0xbb/0x860 [ 723.377066][T11238] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 723.377106][T11238] ? __fget_files+0x2a/0x420 [ 723.377177][T11238] exit_to_user_mode_loop+0x104/0x730 [ 723.377290][T11238] ? rcu_is_watching+0x15/0xb0 [ 723.377367][T11238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.377393][T11238] do_syscall_64+0x353/0x580 [ 723.377422][T11238] ? trace_irq_disable+0x3b/0x140 [ 723.377485][T11238] ? clear_bhb_loop+0x40/0x90 [ 723.377514][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.377549][T11238] RIP: 0033:0x7ff425b8dd82 [ 723.377580][T11238] Code: Unable to access opcode bytes at 0x7ff425b8dd58. [ 723.377592][T11238] RSP: 002b:00007ffd845b7f78 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 723.377614][T11238] RAX: fffffffffffffff4 RBX: 00007ff423560000 RCX: 00007ff425b8dd82 [ 723.377630][T11238] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007ff423560000 [ 723.377644][T11238] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 723.377656][T11238] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 723.377669][T11238] R13: 0000000000000005 R14: 0000000000000000 R15: 00007ff425e15fa0 [ 723.377703][T11238] [ 723.523544][ T5738] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 723.566361][T11238] memory: usage 8kB, limit 8kB, failcnt 120 [ 723.566406][T11238] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 723.566440][T11238] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 723.566479][T11238] Memory cgroup stats for /syz5/test: [ 723.654132][T11238] cache 0 [ 723.654162][T11238] rss 0 [ 723.654176][T11238] shmem 0 [ 723.654196][T11238] mapped_file 0 [ 723.654217][T11238] dirty 0 [ 723.654237][T11238] writeback 0 [ 723.654257][T11238] workingset_refault_anon 0 [ 723.662900][T11238] workingset_refault_file 0 [ 723.662916][T11238] swap 8192 [ 723.662923][T11238] swapcached 8192 [ 723.662931][T11238] pgpgin 2 [ 723.662939][T11238] pgpgout 2 [ 723.662946][T11238] pgfault 2 [ 723.662953][T11238] pgmajfault 0 [ 723.662960][T11238] inactive_anon 0 [ 723.662967][T11238] active_anon 0 [ 723.662974][T11238] inactive_file 0 [ 723.662981][T11238] active_file 0 [ 723.662989][T11238] unevictable 0 [ 723.662996][T11238] hierarchical_memory_limit 8192 [ 723.663005][T11238] hierarchical_memsw_limit 9223372036854771712 [ 723.663015][T11238] total_cache 0 [ 723.663022][T11238] total_rss 0 [ 723.663030][T11238] total_shmem 0 [ 723.663037][T11238] total_mapped_file 0 [ 723.663053][T11238] total_dirty 0 [ 723.663060][T11238] total_writeback 0 [ 723.663068][T11238] total_workingset_refault_anon 0 [ 723.663076][T11238] total_workingset_refault_file 0 [ 723.663085][T11238] total_swap 8192 [ 723.663092][T11238] total_swapcached 8192 [ 723.663101][T11238] total_pgpgin 2 [ 723.663108][T11238] total_pgpgout 2 [ 723.663116][T11238] total_pgfault 2 [ 723.663123][T11238] total_pgmajfault 0 [ 723.663132][T11238] total_inactive_anon 0 [ 723.663140][T11238] total_active_anon 0 [ 723.663148][T11238] total_inactive_file 0 [ 723.663156][T11238] total_active_file 0 [ 723.663164][T11238] total_unevictable 0 [ 723.663172][T11238] anon_cost 24 [ 723.663179][T11238] file_cost 0 [ 723.663188][T11238] Out of memory and no killable processes... [ 723.684647][ T5738] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.684683][ T5738] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.684729][ T5738] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.684756][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.762247][T11249] syz.5.1612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 723.762347][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.5.1612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 723.762442][T11249] Tainted: [L]=SOFTLOCKUP [ 723.762462][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 723.762487][T11249] Call Trace: [ 723.762509][T11249] [ 723.762540][T11249] dump_stack_lvl+0xe8/0x150 [ 723.762582][T11249] dump_header+0xd3/0x4b0 [ 723.762676][T11249] out_of_memory+0x10d4/0x1480 [ 723.762809][T11249] ? lock_acquire+0x221/0x350 [ 723.762873][T11249] ? __pfx_out_of_memory+0x10/0x10 [ 723.762962][T11249] ? _mutex_lock_killable+0x163/0x1d0 [ 723.763024][T11249] ? try_charge_memcg+0xbb6/0x15b0 [ 723.763121][T11249] try_charge_memcg+0xc75/0x15b0 [ 723.763235][T11249] ? __pfx_try_charge_memcg+0x10/0x10 [ 723.763354][T11249] ? charge_memcg+0x20/0x2b0 [ 723.763423][T11249] charge_memcg+0x19c/0x2b0 [ 723.763492][T11249] __mem_cgroup_charge+0x25/0x80 [ 723.763557][T11249] do_pte_missing+0x859/0x28f0 [ 723.763650][T11249] ? handle_mm_fault+0xe8/0x13f0 [ 723.763714][T11249] handle_mm_fault+0xd28/0x13f0 [ 723.763793][T11249] ? handle_mm_fault+0xe8/0x13f0 [ 723.763856][T11249] ? __pfx_handle_mm_fault+0x10/0x10 [ 723.763949][T11249] ? __lock_acquire+0x683/0x2ce0 [ 723.764023][T11249] ? lock_mm_and_find_vma+0xa7/0x340 [ 723.764080][T11249] do_user_addr_fault+0x744/0x1340 [ 723.764194][T11249] exc_page_fault+0x6a/0xc0 [ 723.764284][T11249] asm_exc_page_fault+0x26/0x30 [ 723.764345][T11249] RIP: 0010:__put_user_4+0xd/0x30 [ 723.764422][T11249] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 723.764467][T11249] RSP: 0018:ffffc9000632fa90 EFLAGS: 00050206 [ 723.764512][T11249] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff423981990 [ 723.764546][T11249] RDX: 0000000000000000 RSI: ffffffff8daf6ba4 RDI: ffffffff8bca7880 [ 723.764588][T11249] RBP: dffffc0000000000 R08: ffffffff8217a58f R09: 0000000000000000 [ 723.764629][T11249] R10: 0000000000000000 R11: ffff8880336a7030 R12: dffffc0000000000 [ 723.764672][T11249] R13: 1ffff11004b77c88 R14: ffff888025bbdd00 R15: ffff888025bbe440 [ 723.764726][T11249] ? __might_fault+0xaf/0x130 [ 723.764807][T11249] mm_release+0xd5/0x290 [ 723.764883][T11249] exit_mm+0x50/0x240 [ 723.764945][T11249] do_exit+0x6cd/0x2360 [ 723.764996][T11249] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.765072][T11249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 723.765167][T11249] ? __pfx_do_exit+0x10/0x10 [ 723.765251][T11249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 723.765312][T11249] ? rt_spin_lock+0x1e0/0x400 [ 723.765387][T11249] ? rt_spin_unlock+0x157/0x200 [ 723.765464][T11249] do_group_exit+0x22d/0x2f0 [ 723.765529][T11249] ? rt_spin_unlock+0x163/0x200 [ 723.765569][T11249] get_signal+0x121b/0x12c0 [ 723.765674][T11249] ? __asan_memcpy+0x40/0x70 [ 723.765904][T11249] arch_do_signal_or_restart+0xbb/0x860 [ 723.765991][T11249] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 723.766106][T11249] ? fd_install+0x97/0x3e0 [ 723.766190][T11249] exit_to_user_mode_loop+0x104/0x730 [ 723.766245][T11249] ? rcu_is_watching+0x15/0xb0 [ 723.766325][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.766387][T11249] do_syscall_64+0x353/0x580 [ 723.766460][T11249] ? trace_irq_disable+0x3b/0x140 [ 723.766517][T11249] ? clear_bhb_loop+0x40/0x90 [ 723.766597][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.766651][T11249] RIP: 0033:0x7ff425b8e019 [ 723.766740][T11249] Code: Unable to access opcode bytes at 0x7ff425b8dfef. [ 723.766771][T11249] RSP: 002b:00007ff423981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 723.766837][T11249] RAX: 0000000000000007 RBX: 00007ff425e16270 RCX: 00007ff425b8e019 [ 723.766885][T11249] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 723.766932][T11249] RBP: 00007ff425c2500c R08: 0000000000000000 R09: 0000000000000000 [ 723.766977][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.767011][T11249] R13: 00007ff425e16308 R14: 00007ff425e16270 R15: 00007ffd845b7ec8 [ 723.767105][T11249] [ 723.868360][T11249] memory: usage 8kB, limit 8kB, failcnt 120 [ 723.868412][T11249] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 723.868447][T11249] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 723.868488][T11249] Memory cgroup stats for /syz5/test: [ 723.869076][T11249] cache 0 [ 723.869104][T11249] rss 0 [ 723.869129][T11249] shmem 0 [ 723.869158][T11249] mapped_file 0 [ 723.869177][T11249] dirty 0 [ 723.869203][T11249] writeback 0 [ 723.869223][T11249] workingset_refault_anon 0 [ 723.869244][T11249] workingset_refault_file 0 [ 723.869263][T11249] swap 8192 [ 723.869282][T11249] swapcached 8192 [ 723.869302][T11249] pgpgin 2 [ 723.869315][T11249] pgpgout 2 [ 723.869335][T11249] pgfault 2 [ 723.869354][T11249] pgmajfault 0 [ 723.869368][T11249] inactive_anon 0 [ 723.869387][T11249] active_anon 0 [ 723.869409][T11249] inactive_file 0 [ 723.869429][T11249] active_file 0 [ 723.869449][T11249] unevictable 0 [ 723.869462][T11249] hierarchical_memory_limit 8192 [ 723.869482][T11249] hierarchical_memsw_limit 9223372036854771712 [ 723.869511][T11249] total_cache 0 [ 723.869524][T11249] total_rss 0 [ 723.869530][T11249] total_shmem 0 [ 723.869551][T11249] total_mapped_file 0 [ 723.869570][T11249] total_dirty 0 [ 723.869591][T11249] total_writeback 0 [ 723.869611][T11249] total_workingset_refault_anon 0 [ 723.869632][T11249] total_workingset_refault_file 0 [ 723.869652][T11249] total_swap 8192 [ 723.869673][T11249] total_swapcached 8192 [ 723.869692][T11249] total_pgpgin 2 [ 723.869706][T11249] total_pgpgout 2 [ 723.869726][T11249] total_pgfault 2 [ 723.869745][T11249] total_pgmajfault 0 [ 723.869766][T11249] total_inactive_anon 0 [ 723.869785][T11249] total_active_anon 0 [ 723.869805][T11249] total_inactive_file 0 [ 723.879712][T11249] total_active_file 0 [ 723.879743][T11249] total_unevictable 0 [ 723.879763][T11249] anon_cost 24 [ 723.879783][T11249] file_cost 0 [ 723.879804][T11249] Out of memory and no killable processes... [ 724.360012][T11249] syz.5.1612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 724.360144][T11249] CPU: 1 UID: 0 PID: 11249 Comm: syz.5.1612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.360220][T11249] Tainted: [L]=SOFTLOCKUP [ 724.360240][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.360273][T11249] Call Trace: [ 724.360296][T11249] [ 724.360324][T11249] dump_stack_lvl+0xe8/0x150 [ 724.360423][T11249] dump_header+0xd3/0x4b0 [ 724.360461][T11249] out_of_memory+0x10d4/0x1480 [ 724.360568][T11249] ? __pfx_out_of_memory+0x10/0x10 [ 724.360653][T11249] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.360726][T11249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.360800][T11249] ? _mutex_lock_killable+0x152/0x1d0 [ 724.360861][T11249] ? try_charge_memcg+0xbb6/0x15b0 [ 724.360944][T11249] try_charge_memcg+0xc75/0x15b0 [ 724.361069][T11249] ? __pfx_try_charge_memcg+0x10/0x10 [ 724.361165][T11249] ? charge_memcg+0x20/0x2b0 [ 724.361225][T11249] charge_memcg+0x19c/0x2b0 [ 724.361311][T11249] __mem_cgroup_charge+0x25/0x80 [ 724.361383][T11249] do_pte_missing+0x859/0x28f0 [ 724.361486][T11249] ? handle_mm_fault+0xe8/0x13f0 [ 724.361559][T11249] handle_mm_fault+0xd28/0x13f0 [ 724.361642][T11249] ? handle_mm_fault+0xe8/0x13f0 [ 724.361708][T11249] ? __pfx_handle_mm_fault+0x10/0x10 [ 724.361770][T11249] ? follow_page_pte+0xaf1/0xe80 [ 724.361848][T11249] ? __pfx_follow_page_pte+0x10/0x10 [ 724.361933][T11249] __get_user_pages+0x166b/0x2590 [ 724.362191][T11249] __gup_longterm_locked+0xd52/0x15c0 [ 724.362316][T11249] gup_fast_fallback+0x1cf7/0x2040 [ 724.362439][T11249] ? count_memcg_event_mm+0x21/0x260 [ 724.362502][T11249] ? __pfx_gup_fast_fallback+0x10/0x10 [ 724.362573][T11249] ? is_valid_gup_args+0x11f/0x200 [ 724.362647][T11249] ? get_user_pages_fast+0x4d/0xb0 [ 724.362724][T11249] get_futex_key+0x90e/0x1580 [ 724.362872][T11249] ? __pfx_search_extable+0x10/0x10 [ 724.363053][T11249] ? handle_mm_fault+0xe8/0x13f0 [ 724.363111][T11249] ? __pfx_get_futex_key+0x10/0x10 [ 724.363184][T11249] ? fixup_exception+0x11f8/0x2140 [ 724.363312][T11249] futex_wake+0x119/0x600 [ 724.363397][T11249] ? do_user_addr_fault+0xb8e/0x1340 [ 724.363436][T11249] ? __pfx_futex_wake+0x10/0x10 [ 724.363495][T11249] ? fatal_signal_pending+0x62/0xa0 [ 724.363558][T11249] ? do_user_addr_fault+0x11e0/0x1340 [ 724.363632][T11249] ? irqentry_exit+0x218/0x8f0 [ 724.363716][T11249] do_futex+0x458/0x4e0 [ 724.363802][T11249] ? __pfx_do_futex+0x10/0x10 [ 724.363886][T11249] ? __might_fault+0xaf/0x130 [ 724.363969][T11249] mm_release+0x101/0x290 [ 724.364052][T11249] exit_mm+0x50/0x240 [ 724.364134][T11249] do_exit+0x6cd/0x2360 [ 724.364186][T11249] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.364268][T11249] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.364355][T11249] ? __pfx_do_exit+0x10/0x10 [ 724.364443][T11249] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 724.364505][T11249] ? rt_spin_lock+0x1e0/0x400 [ 724.364588][T11249] ? rt_spin_unlock+0x157/0x200 [ 724.364652][T11249] do_group_exit+0x22d/0x2f0 [ 724.364704][T11249] ? rt_spin_unlock+0x163/0x200 [ 724.364768][T11249] get_signal+0x121b/0x12c0 [ 724.364866][T11249] ? __asan_memcpy+0x40/0x70 [ 724.364981][T11249] arch_do_signal_or_restart+0xbb/0x860 [ 724.365074][T11249] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 724.365179][T11249] ? fd_install+0x97/0x3e0 [ 724.365273][T11249] exit_to_user_mode_loop+0x104/0x730 [ 724.365326][T11249] ? rcu_is_watching+0x15/0xb0 [ 724.365363][T11249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.365410][T11249] do_syscall_64+0x353/0x580 [ 724.365497][T11249] ? trace_irq_disable+0x3b/0x140 [ 724.365558][T11249] ? clear_bhb_loop+0x40/0x90 [ 724.365628][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.365686][T11249] RIP: 0033:0x7ff425b8e019 [ 724.365749][T11249] Code: Unable to access opcode bytes at 0x7ff425b8dfef. [ 724.365780][T11249] RSP: 002b:00007ff423981028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 724.365841][T11249] RAX: 0000000000000007 RBX: 00007ff425e16270 RCX: 00007ff425b8e019 [ 724.365875][T11249] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 724.365907][T11249] RBP: 00007ff425c2500c R08: 0000000000000000 R09: 0000000000000000 [ 724.365946][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.365979][T11249] R13: 00007ff425e16308 R14: 00007ff425e16270 R15: 00007ffd845b7ec8 [ 724.366072][T11249] [ 724.556314][T11249] memory: usage 8kB, limit 8kB, failcnt 158 [ 724.556342][T11249] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 724.556388][T11249] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 724.556437][T11249] Memory cgroup stats for /syz5/test: [ 724.556770][T11249] cache 0 [ 724.556791][T11249] rss 0 [ 724.556811][T11249] shmem 0 [ 724.556831][T11249] mapped_file 0 [ 724.556850][T11249] dirty 0 [ 724.556864][T11249] writeback 0 [ 724.556884][T11249] workingset_refault_anon 0 [ 724.556914][T11249] workingset_refault_file 0 [ 724.556935][T11249] swap 8192 [ 724.556954][T11249] swapcached 8192 [ 724.556974][T11249] pgpgin 2 [ 724.556994][T11249] pgpgout 2 [ 724.557007][T11249] pgfault 2 [ 724.557026][T11249] pgmajfault 0 [ 724.557045][T11249] inactive_anon 0 [ 724.557065][T11249] active_anon 0 [ 724.557085][T11249] inactive_file 0 [ 724.557098][T11249] active_file 0 [ 724.557117][T11249] unevictable 0 [ 724.557137][T11249] hierarchical_memory_limit 8192 [ 724.557158][T11249] hierarchical_memsw_limit 9223372036854771712 [ 724.557179][T11249] total_cache 0 [ 724.557199][T11249] total_rss 0 [ 724.557218][T11249] total_shmem 0 [ 724.557238][T11249] total_mapped_file 0 [ 724.557258][T11249] total_dirty 0 [ 724.557278][T11249] total_writeback 0 [ 724.557298][T11249] total_workingset_refault_anon 0 [ 724.557319][T11249] total_workingset_refault_file 0 [ 724.557341][T11249] total_swap 8192 [ 724.557360][T11249] total_swapcached 8192 [ 724.557380][T11249] total_pgpgin 2 [ 724.557393][T11249] total_pgpgout 2 [ 724.557406][T11249] total_pgfault 2 [ 724.557427][T11249] total_pgmajfault 0 [ 724.557446][T11249] total_inactive_anon 0 [ 724.557467][T11249] total_active_anon 0 [ 724.557487][T11249] total_inactive_file 0 [ 724.557507][T11249] total_active_file 0 [ 724.557538][T11249] total_unevictable 0 [ 724.557560][T11249] anon_cost 24 [ 724.557573][T11249] file_cost 0 [ 724.557586][T11249] Out of memory and no killable processes... [ 724.577826][T11238] syz.5.1612 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 724.577922][T11238] CPU: 1 UID: 0 PID: 11238 Comm: syz.5.1612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 724.577991][T11238] Tainted: [L]=SOFTLOCKUP [ 724.578010][T11238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.578039][T11238] Call Trace: [ 724.578068][T11238] [ 724.578087][T11238] dump_stack_lvl+0xe8/0x150 [ 724.578176][T11238] dump_header+0xd3/0x4b0 [ 724.578259][T11238] out_of_memory+0x10d4/0x1480 [ 724.578364][T11238] ? __pfx_out_of_memory+0x10/0x10 [ 724.578403][T11238] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.578472][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.578534][T11238] ? _mutex_lock_killable+0x152/0x1d0 [ 724.578591][T11238] ? try_charge_memcg+0xbb6/0x15b0 [ 724.578659][T11238] try_charge_memcg+0xc75/0x15b0 [ 724.578765][T11238] ? __pfx_try_charge_memcg+0x10/0x10 [ 724.578830][T11238] ? charge_memcg+0x20/0x2b0 [ 724.578923][T11238] charge_memcg+0x19c/0x2b0 [ 724.578990][T11238] __mem_cgroup_charge+0x25/0x80 [ 724.579054][T11238] do_pte_missing+0x859/0x28f0 [ 724.579153][T11238] ? handle_mm_fault+0xe8/0x13f0 [ 724.579216][T11238] handle_mm_fault+0xd28/0x13f0 [ 724.579282][T11238] ? handle_mm_fault+0xe8/0x13f0 [ 724.579344][T11238] ? __pfx_handle_mm_fault+0x10/0x10 [ 724.579410][T11238] ? follow_page_pte+0xaf1/0xe80 [ 724.579485][T11238] ? __pfx_follow_page_pte+0x10/0x10 [ 724.579568][T11238] __get_user_pages+0x166b/0x2590 [ 724.579731][T11238] __gup_longterm_locked+0xd52/0x15c0 [ 724.579843][T11238] gup_fast_fallback+0x1cf7/0x2040 [ 724.579965][T11238] ? count_memcg_event_mm+0x21/0x260 [ 724.580027][T11238] ? __pfx_gup_fast_fallback+0x10/0x10 [ 724.580090][T11238] ? is_valid_gup_args+0x11f/0x200 [ 724.580154][T11238] ? get_user_pages_fast+0x4d/0xb0 [ 724.580218][T11238] get_futex_key+0x90e/0x1580 [ 724.580295][T11238] ? __pfx_search_extable+0x10/0x10 [ 724.580432][T11238] ? handle_mm_fault+0xe8/0x13f0 [ 724.580456][T11238] ? __pfx_get_futex_key+0x10/0x10 [ 724.580514][T11238] ? fixup_exception+0x11f8/0x2140 [ 724.580598][T11238] futex_wake+0x119/0x600 [ 724.580680][T11238] ? do_user_addr_fault+0xb8e/0x1340 [ 724.580749][T11238] ? __pfx_futex_wake+0x10/0x10 [ 724.580823][T11238] ? fatal_signal_pending+0x62/0xa0 [ 724.580878][T11238] ? do_user_addr_fault+0x11e0/0x1340 [ 724.580959][T11238] ? irqentry_exit+0x218/0x8f0 [ 724.581041][T11238] do_futex+0x458/0x4e0 [ 724.581109][T11238] ? __pfx_do_futex+0x10/0x10 [ 724.581183][T11238] ? __might_fault+0xaf/0x130 [ 724.581254][T11238] mm_release+0x101/0x290 [ 724.581317][T11238] exit_mm+0x50/0x240 [ 724.581380][T11238] do_exit+0x6cd/0x2360 [ 724.581418][T11238] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.581493][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.581580][T11238] ? __pfx_do_exit+0x10/0x10 [ 724.581678][T11238] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 724.581751][T11238] ? rt_spin_lock+0x1e0/0x400 [ 724.581834][T11238] ? rt_spin_unlock+0x157/0x200 [ 724.581906][T11238] do_group_exit+0x22d/0x2f0 [ 724.581959][T11238] ? rt_spin_unlock+0x163/0x200 [ 724.582025][T11238] get_signal+0x121b/0x12c0 [ 724.582120][T11238] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 724.582223][T11238] arch_do_signal_or_restart+0xbb/0x860 [ 724.582315][T11238] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 724.582407][T11238] ? __fget_files+0x2a/0x420 [ 724.582504][T11238] exit_to_user_mode_loop+0x104/0x730 [ 724.582563][T11238] ? rcu_is_watching+0x15/0xb0 [ 724.582635][T11238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.582697][T11238] do_syscall_64+0x353/0x580 [ 724.582769][T11238] ? trace_irq_disable+0x3b/0x140 [ 724.582822][T11238] ? clear_bhb_loop+0x40/0x90 [ 724.582892][T11238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.582954][T11238] RIP: 0033:0x7ff425b8dd82 [ 724.583016][T11238] Code: Unable to access opcode bytes at 0x7ff425b8dd58. [ 724.583052][T11238] RSP: 002b:00007ffd845b7f78 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 724.583104][T11238] RAX: fffffffffffffff4 RBX: 00007ff423560000 RCX: 00007ff425b8dd82 [ 724.583145][T11238] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007ff423560000 [ 724.583185][T11238] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 724.583216][T11238] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 724.583248][T11238] R13: 0000000000000005 R14: 0000000000000000 R15: 00007ff425e15fa0 [ 724.583314][T11238] [ 724.635890][T11238] memory: usage 8kB, limit 8kB, failcnt 158 [ 724.635959][T11238] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 724.635991][T11238] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 724.636030][T11238] Memory cgroup stats for /syz5/test: [ 724.636385][T11238] cache 0 [ 724.636402][T11238] rss 0 [ 724.636421][T11238] shmem 0 [ 724.636440][T11238] mapped_file 0 [ 724.636460][T11238] dirty 0 [ 724.636472][T11238] writeback 0 [ 724.636492][T11238] workingset_refault_anon 0 [ 724.636513][T11238] workingset_refault_file 0 [ 724.636520][T11238] swap 8192 [ 724.636538][T11238] swapcached 8192 [ 724.636558][T11238] pgpgin 2 [ 724.636577][T11238] pgpgout 2 [ 724.636590][T11238] pgfault 2 [ 724.636608][T11238] pgmajfault 0 [ 724.636627][T11238] inactive_anon 0 [ 724.649014][T11238] active_anon 0 [ 724.649060][T11238] inactive_file 0 [ 724.649087][T11238] active_file 0 [ 724.649113][T11238] unevictable 0 [ 724.649144][T11238] hierarchical_memory_limit 8192 [ 724.649165][T11238] hierarchical_memsw_limit 9223372036854771712 [ 724.649185][T11238] total_cache 0 [ 724.649206][T11238] total_rss 0 [ 724.649219][T11238] total_shmem 0 [ 724.649239][T11238] total_mapped_file 0 [ 724.649259][T11238] total_dirty 0 [ 724.649279][T11238] total_writeback 0 [ 724.649299][T11238] total_workingset_refault_anon 0 [ 724.649319][T11238] total_workingset_refault_file 0 [ 724.649341][T11238] total_swap 8192 [ 724.649360][T11238] total_swapcached 8192 [ 724.649374][T11238] total_pgpgin 2 [ 724.649394][T11238] total_pgpgout 2 [ 724.649401][T11238] total_pgfault 2 [ 724.649422][T11238] total_pgmajfault 0 [ 724.649442][T11238] total_inactive_anon 0 [ 724.649463][T11238] total_active_anon 0 [ 724.649484][T11238] total_inactive_file 0 [ 724.649504][T11238] total_active_file 0 [ 724.649525][T11238] total_unevictable 0 [ 724.649545][T11238] anon_cost 24 [ 724.649564][T11238] file_cost 0 [ 724.649585][T11238] Out of memory and no killable processes... [ 726.159365][ T5738] usb 4-1: usb_control_msg returned -71 [ 726.159417][ T5738] usbtmc 4-1:16.0: can't read capabilities [ 726.216129][ T5738] usb 4-1: USB disconnect, device number 9 [ 730.842188][ T6354] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 731.117087][ T6354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.119430][ T6354] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 731.174115][ T6354] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 731.174149][ T6354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.174172][ T6354] usb 5-1: Product: syz [ 731.174187][ T6354] usb 5-1: Manufacturer: syz [ 731.174203][ T6354] usb 5-1: SerialNumber: syz [ 731.220073][T11301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 732.818240][ T6354] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.818401][ T6354] usb 5-1: MIDIStreaming interface descriptor not found [ 737.058937][ T6354] usb 5-1: USB disconnect, device number 28 [ 737.290636][ T5713] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 737.565103][ T5713] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.565139][ T5713] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.565186][ T5713] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.565212][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.250678][ T5713] usb 3-1: usb_control_msg returned -71 [ 738.250730][ T5713] usbtmc 3-1:16.0: can't read capabilities [ 738.293238][ T5713] usb 3-1: USB disconnect, device number 21 [ 738.582409][ T6354] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 738.828543][ T6354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 738.914784][ T6354] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 738.973214][ T6354] usb 5-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 738.973261][ T6354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.973284][ T6354] usb 5-1: Product: syz [ 738.973300][ T6354] usb 5-1: Manufacturer: syz [ 738.973316][ T6354] usb 5-1: SerialNumber: syz [ 739.116942][T11328] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 739.445765][ T6354] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 739.445823][ T6354] usb 5-1: MIDIStreaming interface descriptor not found [ 743.680610][ T5796] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 743.793876][ T6354] usb 5-1: USB disconnect, device number 29 [ 743.840328][ T5796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 743.871426][ T5796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 743.933615][ T5796] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 743.933646][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.933666][ T5796] usb 4-1: Product: syz [ 743.933679][ T5796] usb 4-1: Manufacturer: syz [ 743.933695][ T5796] usb 4-1: SerialNumber: syz [ 744.026318][T11351] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 744.245225][T10430] udevd[10430]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.248080][ T5796] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 744.248137][ T5796] usb 4-1: MIDIStreaming interface descriptor not found [ 744.384181][T11369] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1648'. [ 744.620856][T11374] bridge0: left allmulticast mode [ 745.703327][ T5796] usb 4-1: USB disconnect, device number 10 [ 749.331399][T11078] udevd[11078]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.215509][T11429] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5600] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[11429] [ 751.916535][T11431] JFS: discard option not supported on device [ 751.917126][T11431] Mount JFS Failure: -5 [ 751.917139][T11431] jfs_mount failed w/return code = -5 [ 752.186409][T11445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1672'. [ 752.187531][T11445] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1672'. [ 753.144728][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.144803][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.527419][T11449] syzkaller0: entered promiscuous mode [ 756.743054][T11478] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 768.124138][T10553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 768.155823][T10553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 768.157373][T10553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 768.158590][T10553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 768.219034][T10553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 770.534811][ T5611] Bluetooth: hci0: command tx timeout [ 770.583884][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 770.686271][T10553] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 770.720154][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 770.739311][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 770.743178][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 770.758621][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 770.770318][T10553] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 770.788680][T10553] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 770.860876][T10553] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 770.861966][T10553] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 770.963387][ T5611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 771.046882][T11518] 1024-page vmalloc region starting at 0xffffc90007ba4000 allocated at kcov_ioctl+0x58/0x650 [ 771.047045][T11518] list_del corruption. next->prev should be ffffc9001be61000, but was 0000000000000000. (next=ffffc90007ba4000) [ 771.047638][T11518] ------------[ cut here ]------------ [ 771.047646][T11518] kernel BUG at lib/list_debug.c:67! [ 771.047684][T11518] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 771.047708][T11518] CPU: 0 UID: 0 PID: 11518 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 771.047736][T11518] Tainted: [L]=SOFTLOCKUP [ 771.047743][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.047758][T11518] Workqueue: hci7 hci_rx_work [ 771.047873][T11518] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 771.047966][T11518] Code: ec 37 41 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dd 96 61 fd 49 8b 56 08 48 c7 c7 c0 7d ca 8b 48 89 de 4c 89 f1 e8 97 ad 59 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 771.047985][T11518] RSP: 0018:ffffc900052d7a08 EFLAGS: 00010246 [ 771.048003][T11518] RAX: 000000000000006d RBX: ffffc9001be61000 RCX: 55967bd2b6a7c900 [ 771.048020][T11518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.048032][T11518] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 771.048045][T11518] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92000f74801 [ 771.048061][T11518] R13: dffffc0000000000 R14: ffffc90007ba4000 R15: ffffc90007ba4008 [ 771.048079][T11518] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 771.048096][T11518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.048111][T11518] CR2: 00007f24d4127180 CR3: 0000000060834000 CR4: 00000000003526f0 [ 771.048131][T11518] Call Trace: [ 771.048138][T11518] [ 771.048149][T11518] kcov_remote_start+0x295/0x6f0 [ 771.048184][T11518] hci_rx_work+0x10f/0x1020 [ 771.048214][T11518] ? process_scheduled_works+0xa20/0x14e0 [ 771.048294][T11518] process_scheduled_works+0xa8e/0x14e0 [ 771.048334][T11518] ? __pfx_process_scheduled_works+0x10/0x10 [ 771.048365][T11518] ? assign_work+0x3cf/0x5d0 [ 771.048391][T11518] worker_thread+0xa47/0xfb0 [ 771.048440][T11518] kthread+0x388/0x470 [ 771.048496][T11518] ? __pfx_worker_thread+0x10/0x10 [ 771.048523][T11518] ? __pfx_kthread+0x10/0x10 [ 771.048554][T11518] ret_from_fork+0x514/0xb70 [ 771.048619][T11518] ? __pfx_ret_from_fork+0x10/0x10 [ 771.048652][T11518] ? __switch_to+0xc89/0x1420 [ 771.048683][T11518] ? __pfx_kthread+0x10/0x10 [ 771.048715][T11518] ret_from_fork_asm+0x1a/0x30 [ 771.048747][T11518] [ 771.048759][T11518] Modules linked in: [ 771.048779][T11518] ---[ end trace 0000000000000000 ]--- [ 771.048797][T11518] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 771.048821][T11518] Code: ec 37 41 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 dd 96 61 fd 49 8b 56 08 48 c7 c7 c0 7d ca 8b 48 89 de 4c 89 f1 e8 97 ad 59 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 771.048839][T11518] RSP: 0018:ffffc900052d7a08 EFLAGS: 00010246 [ 771.048858][T11518] RAX: 000000000000006d RBX: ffffc9001be61000 RCX: 55967bd2b6a7c900 [ 771.048873][T11518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.048886][T11518] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 771.048899][T11518] R10: dffffc0000000000 R11: ffffed10170c4903 R12: 1ffff92000f74801 [ 771.048915][T11518] R13: dffffc0000000000 R14: ffffc90007ba4000 R15: ffffc90007ba4008 [ 771.048930][T11518] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 771.048948][T11518] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.048963][T11518] CR2: 00007f24d4127180 CR3: 0000000060834000 CR4: 00000000003526f0 [ 771.048983][T11518] Kernel panic - not syncing: Fatal exception [ 771.049580][T11518] Kernel Offset: disabled