last executing test programs: 3.61829862s ago: executing program 0 (id=3242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36fecaa356bcceb5b", 0xc}], 0x1}, 0x20004014) 3.320092477s ago: executing program 0 (id=3246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3, &(0x7f0000000380)}], 0x1, 0x4890) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.19336249s ago: executing program 0 (id=3248): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 2.795247608s ago: executing program 1 (id=3251): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x2, 0xb, 0x6, 0x7, 0x2, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.776190529s ago: executing program 0 (id=3252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 2.73329528s ago: executing program 3 (id=3253): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f00000009c0)={0xf, {"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", 0xb29}}, 0x1006) 2.612165242s ago: executing program 1 (id=3254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.599480273s ago: executing program 3 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36fecaa356bcceb5b", 0xc}], 0x1}, 0x20004014) 2.530679234s ago: executing program 0 (id=3256): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3, &(0x7f0000000380)}], 0x1, 0x4890) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.404152297s ago: executing program 2 (id=3257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="d8faae39595a31df6c6032913c21574f30a4a21cdae49c7f662d3bd0fbe62691501ee659be95e67f939c262074ca4fa220c3cdbb71467118e4", 0x39}, {&(0x7f00000001c0)="b16309a928fa9c47f5700e15529a75efd3e72ede882a38087c7637a424e7f5b7f484fc54bc711b8746888d902cd45ce9112afedcf346b892ec57434f0376d27b3b338bc2b7404d90cc5156edd6e497b6a06432ec00047abc4dc0da3dfd29e6e756e991cc", 0x64}, {&(0x7f0000000580)="f110b1ccf8beac2b8c0c049754fc9aadbf970f9dc4fe0e643a3c8e0c21cd824a2f717f75f53b9922fa260b0600f4e563d74b286e1838a46ad2a9eb5f3ddcf0e4f8833d3b556577a240308b97f5d08cfb007b", 0x52}], 0x3) 2.403439897s ago: executing program 0 (id=3258): r0 = syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file2\x00', 0x4000010, &(0x7f0000000180)={[{@nobarrier}, {@quota}, {@discard}, {@qnoenforce}, {@prjquota}, {@dax}, {@sunit}, {@filestreams}, {@largeio}]}, 0x1, 0x975c, &(0x7f0000009780)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="e1980400419a040020000000000001007369740014000280080003"], 0x40}}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000880)={{0x81, 0x9}, 0x100, './file2\x00'}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000002c0)={0x8, 0x20000000000009, 0x20000000000, 0x200000000000, 0x20800000000, 0x9, 0x1, 0x0, 0x1}) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f00000002c0)={0x8, 0x20000000000009, 0x20000000000, 0x200000000000, 0x20800000000, 0x9, 0x1, 0x0, 0x1}) syz_open_dev$vcsn(&(0x7f0000000040), 0xf, 0x80100) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0xf, 0x80100) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r1, 0xc008644e, &(0x7f0000000280)) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x300) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x5, 0x2}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x4d0, 0x380, 0x380, 0xffffffff, 0x380, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f00000000c0), {[{{@ip={@multicast1, @multicast2, 0xff000000, 0xff, 'ip6gre0\x00', 'rose0\x00', {0xff}, {0xff}, 0x5c, 0x5}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x2, 0x0, 0x5, 0x2, 0x7], 0x3, 0x1}}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0xb1470809faa84393, 0x6, 0x1, 0x1, 0x2], 0x0, 0x3}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key=0x4, @gre_key}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@icmp={{0x28}, {0x0, '3s', 0x1}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x2, 0x2, 0x4, 0x2, 0x2], 0x1, 0x3}, {0x2, [0x3, 0x0, 0x7, 0x5, 0x2, 0x2], 0x6, 0x4}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x404, 0x402, 0x1, 0x1}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @multicast1, @remote, @port=0x4e23, @gre_key=0x1}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@remote, @icmp_id=0x67, @gre_key=0x100}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4f21, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c) link(&(0x7f0000000140)='./file2\x00', &(0x7f0000000200)='./file2\x00') (async) link(&(0x7f0000000140)='./file2\x00', &(0x7f0000000200)='./file2\x00') 2.308239009s ago: executing program 3 (id=3259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x9}], 0x1, 0x40000140, 0x0) 2.25298502s ago: executing program 2 (id=3260): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000280)='\xc3)\',[*][\x00', 0x300000, &(0x7f0000000300)={@_ha_fsid={[0x7, 0x6]}, {0xff, 0xb, 0x0, 0x5}}, 0x5, &(0x7f0000000500), &(0x7f0000000540)=0xf19}) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x8b, 0x10000, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6013b", 0x7}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)="0090000000", 0x5}], 0x3}, 0x20048b88) poll(&(0x7f0000000600)=[{r0, 0x8}, {r1, 0x21da}], 0x2, 0x5) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010100000000000000000a000006140000001100010000000500000000000100000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x30}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xc2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x483}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x249}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xafe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 2.180144232s ago: executing program 1 (id=3261): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000300)="12000000", 0x4, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 2.179355742s ago: executing program 3 (id=3262): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, &(0x7f0000000a00)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 1.8163097s ago: executing program 1 (id=3263): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 1.694309903s ago: executing program 2 (id=3264): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) 1.636221704s ago: executing program 3 (id=3265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x30f1d6e52e96e075, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.619672424s ago: executing program 1 (id=3266): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x3}], 0x1, 0x4890) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.428055848s ago: executing program 1 (id=3267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x9, 0xfffffff9, 0x8, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)="c2bba4d36fecaa356bcceb5b", 0xc}], 0x1}, 0x20004014) 1.388075439s ago: executing program 2 (id=3268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000100)="d8faae39595a31df6c6032913c21574f30a4a21cdae49c7f662d3bd0fbe62691501ee659be95e67f939c262074ca4fa220c3cdbb71467118e4", 0x39}, {&(0x7f00000001c0)="b16309a928fa9c47f5700e15529a75efd3e72ede882a38087c7637a424e7f5b7f484fc54bc711b8746888d902cd45ce9112afedcf346b892ec57434f0376d27b3b338bc2b7404d90cc5156edd6e497b6a06432ec00047abc4dc0da3dfd29e6e756e991cc", 0x64}, {&(0x7f0000000580)="f110b1ccf8beac2b8c0c049754fc9aadbf970f9dc4fe0e643a3c8e0c21cd824a2f717f75f53b9922fa260b0600f4e563d74b286e1838a46ad2a9eb5f3ddcf0e4f8833d3b556577a240308b97f5d08cfb007bc1", 0x53}], 0x3) 1.171926024s ago: executing program 2 (id=3269): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f7207000000002e0000ea26de004d2208fc414d630815ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34d6"], 0x25, 0x357, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r0, 0x0) r1 = gettid() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @adiantum, 0x10, @desc3}) process_vm_writev(r1, &(0x7f0000c22000), 0x0, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) 638.962466ms ago: executing program 3 (id=3270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 2 (id=3271): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) syz_usb_connect(0x0, 0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee20009", @ANYRES32], 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3d5c2000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) read(r4, &(0x7f0000000380)=""/153, 0x99) kernel console output (not intermixed with test programs): [ 284.101101][ T5781] usb 3-1: Product: syz [ 284.114302][ T5781] usb 3-1: Manufacturer: syz [ 284.118955][ T5781] usb 3-1: SerialNumber: syz [ 284.145579][ T5781] usb 3-1: config 0 descriptor?? [ 284.161411][ T5781] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 286.059739][ T5781] usb 3-1: USB disconnect, device number 5 [ 287.840519][ T9851] syzkaller0: entered promiscuous mode [ 287.858229][ T9851] syzkaller0: entered allmulticast mode [ 288.123250][ T5781] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 288.332647][ T5781] usb 1-1: Using ep0 maxpacket: 8 [ 288.344095][ T5781] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 288.352341][ T5781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.397283][ T5781] usb 1-1: config 0 has no interface number 0 [ 288.416502][ T5781] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.476481][ T5781] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 288.497264][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.510962][ T5781] usb 1-1: Product: syz [ 288.530927][ T5781] usb 1-1: Manufacturer: syz [ 288.539616][ T5781] usb 1-1: SerialNumber: syz [ 288.557123][ T5781] usb 1-1: config 0 descriptor?? [ 288.568792][ T5781] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 290.565538][ T5781] usb 1-1: USB disconnect, device number 7 [ 292.662602][ T9920] syzkaller0: entered promiscuous mode [ 292.693450][ T9920] syzkaller0: entered allmulticast mode [ 293.052391][ T9936] tipc: Enabled bearer , priority 0 [ 293.166751][ T9930] tipc: Disabling bearer [ 293.204252][ T9941] syzkaller1: entered promiscuous mode [ 293.229053][ T9941] syzkaller1: entered allmulticast mode [ 294.111402][ T9973] syzkaller0: entered promiscuous mode [ 294.133760][ T9973] syzkaller0: entered allmulticast mode [ 296.045477][ T9986] syzkaller0: entered promiscuous mode [ 296.051860][ T9986] syzkaller0: entered allmulticast mode [ 297.108954][T10034] syzkaller0: entered promiscuous mode [ 297.115084][T10034] syzkaller0: entered allmulticast mode [ 297.549297][ T55] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 180 seconds [ 297.563082][ T55] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 180 seconds [ 300.255344][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 300.474375][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 300.482333][ T27] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 300.505471][ T27] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 300.526449][ T27] usb 4-1: config 0 has no interface number 0 [ 300.541002][ T27] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.571213][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 300.592289][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.610694][ T27] usb 4-1: Product: syz [ 300.621701][ T27] usb 4-1: Manufacturer: syz [ 300.630324][ T27] usb 4-1: SerialNumber: syz [ 300.654185][ T27] usb 4-1: config 0 descriptor?? [ 300.680719][ T27] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 300.721708][T10122] syzkaller0: entered promiscuous mode [ 300.733512][T10122] syzkaller0: entered allmulticast mode [ 302.555194][ T5781] usb 4-1: USB disconnect, device number 3 [ 305.664027][ T2067] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 305.863238][ T2067] usb 2-1: Using ep0 maxpacket: 8 [ 305.882419][ T2067] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 305.909984][ T2067] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 305.952470][ T2067] usb 2-1: config 0 has no interface number 0 [ 305.972355][ T2067] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.017681][ T2067] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 306.032882][ T2067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.061463][ T2067] usb 2-1: Product: syz [ 306.071585][ T2067] usb 2-1: Manufacturer: syz [ 306.088098][ T2067] usb 2-1: SerialNumber: syz [ 306.114065][ T2067] usb 2-1: config 0 descriptor?? [ 306.131371][ T2067] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 307.987555][ T5781] usb 2-1: USB disconnect, device number 4 [ 308.027380][T10217] syzkaller0: entered promiscuous mode [ 308.047148][T10217] syzkaller0: entered allmulticast mode [ 308.178691][T10223] syzkaller0: entered promiscuous mode [ 308.184423][T10223] syzkaller0: entered allmulticast mode [ 308.301562][T10225] syzkaller0: entered promiscuous mode [ 308.308732][T10225] syzkaller0: entered allmulticast mode [ 308.465656][T10229] block nbd0: not configured, cannot reconfigure [ 308.846244][T10219] syz.0.1329 (10219) used greatest stack depth: 16248 bytes left [ 309.046555][T10241] tipc: Enabling of bearer rejected, failed to enable media [ 309.671556][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 309.693759][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 309.744458][T10252] block nbd0: not configured, cannot reconfigure [ 309.893128][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 309.909378][ T8] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 309.937731][ T8] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 309.958545][ T8] usb 4-1: config 0 has no interface number 0 [ 309.984103][ T8] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.007995][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 310.023288][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.031371][ T8] usb 4-1: Product: syz [ 310.073621][ T8] usb 4-1: Manufacturer: syz [ 310.096525][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 310.103182][ T8] usb 4-1: SerialNumber: syz [ 310.129922][ T8] usb 4-1: config 0 descriptor?? [ 310.166527][ T8] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 310.326407][T10269] tipc: Enabled bearer , priority 0 [ 311.613310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 312.036308][ T8] usb 4-1: USB disconnect, device number 4 [ 312.143152][T10265] tipc: Disabling bearer [ 312.243292][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.169063][T10324] tipc: Enabling of bearer rejected, failed to enable media [ 314.983182][ T2067] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 315.203873][ T2067] usb 1-1: Using ep0 maxpacket: 8 [ 315.329289][ T2067] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 315.419504][ T2067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.571073][ T2067] usb 1-1: config 0 has no interface number 0 [ 315.664747][ T2067] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.838367][ T2067] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 315.883150][ T2067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.915180][ T2067] usb 1-1: Product: syz [ 315.919435][ T2067] usb 1-1: Manufacturer: syz [ 315.942144][ T2067] usb 1-1: SerialNumber: syz [ 315.964542][ T2067] usb 1-1: config 0 descriptor?? [ 315.993258][ T2067] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 316.027005][T10357] syzkaller0: entered promiscuous mode [ 316.034945][T10357] syzkaller0: entered allmulticast mode [ 316.087048][T10359] syzkaller0: entered promiscuous mode [ 316.092562][T10359] syzkaller0: entered allmulticast mode [ 317.379188][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.385783][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.677607][T10390] syzkaller0: entered promiscuous mode [ 317.700862][T10390] syzkaller0: entered allmulticast mode [ 318.214441][T10396] syzkaller0: entered promiscuous mode [ 318.239656][T10396] syzkaller0: entered allmulticast mode [ 320.037985][T10363] Set syz1 is full, maxelem 65536 reached [ 321.689855][ T5781] usb 1-1: USB disconnect, device number 8 [ 322.243544][T10473] tipc: Enabled bearer , priority 0 [ 323.203258][T10470] tipc: Disabling bearer [ 323.273284][T10487] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1414'. [ 327.607138][ T55] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 210 seconds [ 327.618046][ T55] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 210 seconds [ 330.689764][T10696] tipc: Enabled bearer , priority 0 [ 331.248966][T10692] tipc: Disabling bearer [ 334.348961][T10763] syzkaller0: entered promiscuous mode [ 334.369482][T10763] syzkaller0: entered allmulticast mode [ 334.405251][T10768] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 335.937914][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1524'. [ 338.746814][ T5781] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 338.973498][ T5781] usb 4-1: Using ep0 maxpacket: 8 [ 338.981356][ T5781] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 339.000007][ T5781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.012268][ T5781] usb 4-1: config 0 has no interface number 0 [ 339.020706][ T5781] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.060076][ T5781] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 339.077629][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.086115][ T5781] usb 4-1: Product: syz [ 339.090336][ T5781] usb 4-1: Manufacturer: syz [ 339.099645][ T5781] usb 4-1: SerialNumber: syz [ 339.115198][ T5781] usb 4-1: config 0 descriptor?? [ 339.127590][ T5781] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 340.825030][ T5765] usb 4-1: USB disconnect, device number 5 [ 342.234856][ T2991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.366005][T10985] tipc: Enabling of bearer rejected, failed to enable media [ 344.793124][ T173] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 344.983100][ T173] usb 3-1: Using ep0 maxpacket: 8 [ 345.001708][ T173] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 345.027245][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.047053][ T173] usb 3-1: config 0 has no interface number 0 [ 345.055307][ T173] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.071884][ T173] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 345.085013][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.096872][ T173] usb 3-1: Product: syz [ 345.108353][ T173] usb 3-1: Manufacturer: syz [ 345.133468][ T173] usb 3-1: SerialNumber: syz [ 345.140699][ T173] usb 3-1: config 0 descriptor?? [ 345.158068][ T173] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 347.015358][ T173] usb 3-1: USB disconnect, device number 6 [ 348.956766][T11048] tipc: Enabling of bearer rejected, failed to enable media [ 350.033374][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 350.243191][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 350.255365][ T23] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 350.272994][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.286463][ T23] usb 2-1: config 0 has no interface number 0 [ 350.292640][ T23] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.318201][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 350.328429][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.346790][ T23] usb 2-1: Product: syz [ 350.351281][ T23] usb 2-1: Manufacturer: syz [ 350.356270][ T23] usb 2-1: SerialNumber: syz [ 350.364453][ T23] usb 2-1: config 0 descriptor?? [ 350.380337][ T23] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 352.053285][ T5765] usb 2-1: USB disconnect, device number 5 [ 353.330135][T11099] syzkaller0: entered promiscuous mode [ 353.336424][T11099] syzkaller0: entered allmulticast mode [ 353.359800][T11104] tipc: Enabled bearer , priority 0 [ 353.379901][T11091] tipc: Resetting bearer [ 353.505040][T11091] tipc: Disabling bearer [ 354.323235][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 354.525894][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 354.536405][ T8] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 354.553136][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.577133][ T8] usb 3-1: config 0 has no interface number 0 [ 354.591064][ T8] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.607960][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 354.623027][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.631329][ T8] usb 3-1: Product: syz [ 354.639044][ T8] usb 3-1: Manufacturer: syz [ 354.644151][ T8] usb 3-1: SerialNumber: syz [ 354.654386][ T8] usb 3-1: config 0 descriptor?? [ 354.663344][ T8] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 357.265820][T11166] tipc: Enabling of bearer rejected, failed to enable media [ 357.717719][ T5781] usb 3-1: USB disconnect, device number 7 [ 357.743124][ T55] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 240 seconds [ 357.757247][ T55] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 240 seconds [ 358.853558][ T5765] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 359.053061][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 359.061090][ T5765] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 359.070198][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.080883][ T5765] usb 2-1: config 0 has no interface number 0 [ 359.087601][ T5765] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.106150][ T5765] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 359.115674][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.124726][ T5765] usb 2-1: Product: syz [ 359.129776][ T5765] usb 2-1: Manufacturer: syz [ 359.134956][ T5765] usb 2-1: SerialNumber: syz [ 359.143778][ T5765] usb 2-1: config 0 descriptor?? [ 359.159683][ T5765] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 361.196960][T11207] tipc: Enabling of bearer rejected, failed to enable media [ 361.572861][T11233] syzkaller0: entered promiscuous mode [ 361.603328][T11233] syzkaller0: entered allmulticast mode [ 361.646858][T11233] tipc: Enabled bearer , priority 0 [ 361.686213][T11237] syzkaller0: entered promiscuous mode [ 361.713118][T11237] syzkaller0: entered allmulticast mode [ 361.744463][T11233] tipc: Resetting bearer [ 361.775266][T11237] tipc: Enabled bearer , priority 0 [ 361.793241][T11232] tipc: Resetting bearer [ 361.858775][T11232] tipc: Disabling bearer [ 361.903892][T11237] tipc: Resetting bearer [ 361.965814][T11235] tipc: Resetting bearer [ 362.090562][T11235] tipc: Disabling bearer [ 364.242882][ T8] usb 2-1: USB disconnect, device number 6 [ 369.781340][T11368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1669'. [ 372.152027][T11397] tipc: Enabling of bearer rejected, failed to enable media [ 372.332249][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1683'. [ 373.259074][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 374.916589][T11440] tipc: Enabled bearer , priority 0 [ 374.924563][T11447] syzkaller0: entered promiscuous mode [ 374.931549][T11447] syzkaller0: entered allmulticast mode [ 374.951011][T11433] tipc: Resetting bearer [ 375.015249][T11433] tipc: Disabling bearer [ 375.142217][T11459] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.360225][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1698'. [ 375.918776][T11487] syzkaller0: entered promiscuous mode [ 375.941821][T11487] syzkaller0: entered allmulticast mode [ 378.089596][T11491] tipc: Enabled bearer , priority 0 [ 378.114608][T11486] tipc: Resetting bearer [ 378.255990][T11486] tipc: Disabling bearer [ 378.452500][T11523] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 378.715097][T11533] syzkaller0: entered promiscuous mode [ 378.753293][T11533] syzkaller0: entered allmulticast mode [ 378.847127][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854741][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.577354][T11556] tipc: Enabling of bearer rejected, failed to enable media [ 382.381420][T11617] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 384.457152][T11624] syzkaller0: entered promiscuous mode [ 384.462756][T11624] syzkaller0: entered allmulticast mode [ 384.475066][T11629] tipc: Enabled bearer , priority 0 [ 384.483969][T11614] tipc: Resetting bearer [ 384.585138][T11614] tipc: Disabling bearer [ 385.313628][T11666] syzkaller0: entered promiscuous mode [ 385.329092][T11666] syzkaller0: entered allmulticast mode [ 385.350209][T11666] tipc: Enabled bearer , priority 0 [ 385.389171][T11666] tipc: Resetting bearer [ 385.411640][T11665] tipc: Resetting bearer [ 385.454006][T11665] tipc: Disabling bearer [ 385.714100][T11681] syzkaller0: entered promiscuous mode [ 385.738702][T11681] syzkaller0: entered allmulticast mode [ 385.803542][T11681] tipc: Enabled bearer , priority 0 [ 385.822024][T11679] tipc: Resetting bearer [ 385.906103][T11679] tipc: Disabling bearer [ 387.542247][T11752] syzkaller0: entered promiscuous mode [ 387.561896][T11752] syzkaller0: entered allmulticast mode [ 387.590849][T11752] tipc: Enabled bearer , priority 0 [ 387.612833][T11752] tipc: Resetting bearer [ 387.662185][T11751] tipc: Resetting bearer [ 387.772020][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 270 seconds [ 387.783316][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 270 seconds [ 387.799468][T11751] tipc: Disabling bearer [ 388.192798][T11779] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 389.056690][T11808] syzkaller0: entered promiscuous mode [ 389.062255][T11808] syzkaller0: entered allmulticast mode [ 389.093539][T11808] tipc: Enabled bearer , priority 0 [ 389.121372][T11808] tipc: Resetting bearer [ 389.151082][T11807] tipc: Resetting bearer [ 389.204625][T11807] tipc: Disabling bearer [ 389.233836][T11812] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 391.483571][T11899] syzkaller0: entered promiscuous mode [ 391.490074][T11899] syzkaller0: entered allmulticast mode [ 391.615997][T11901] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 392.505345][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 392.663788][T11930] syzkaller0: entered promiscuous mode [ 392.686807][T11930] syzkaller0: entered allmulticast mode [ 393.485459][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 393.838053][T11970] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 394.074632][T11976] syzkaller0: entered promiscuous mode [ 394.080193][T11976] syzkaller0: entered allmulticast mode [ 394.108877][T11976] tipc: Enabled bearer , priority 0 [ 394.140244][T11976] tipc: Resetting bearer [ 394.211155][T11975] tipc: Resetting bearer [ 394.289720][T11975] tipc: Disabling bearer [ 394.315790][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 394.904913][T11997] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 394.993012][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 395.203015][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 395.324317][ T23] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 395.332702][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.356348][ T23] usb 1-1: config 0 has no interface number 0 [ 395.362536][ T23] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.403733][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 395.412856][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.421166][ T23] usb 1-1: Product: syz [ 395.425533][ T23] usb 1-1: Manufacturer: syz [ 395.430157][ T23] usb 1-1: SerialNumber: syz [ 395.438858][ T23] usb 1-1: config 0 descriptor?? [ 395.447269][ T23] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 395.633574][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 396.300198][T12024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 397.206297][ T8] usb 1-1: USB disconnect, device number 9 [ 397.953374][T12047] tipc: Enabled bearer , priority 0 [ 398.065105][T12044] tipc: Disabling bearer [ 398.148911][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1892'. [ 398.265588][T12051] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1892'. [ 398.863219][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 399.063280][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 399.152321][T12075] tipc: Enabled bearer , priority 0 [ 399.213717][ T5823] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 399.221972][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.252534][ T5823] usb 4-1: config 0 has no interface number 0 [ 399.273268][T12073] tipc: Disabling bearer [ 399.293062][ T5823] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.309150][ T5823] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 399.318469][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.326645][ T5823] usb 4-1: Product: syz [ 399.330816][ T5823] usb 4-1: Manufacturer: syz [ 399.335503][ T5823] usb 4-1: SerialNumber: syz [ 399.343039][ T5823] usb 4-1: config 0 descriptor?? [ 399.350430][ T5823] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 400.040481][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1909'. [ 400.114516][T12092] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1909'. [ 401.511329][T12104] tipc: Enabled bearer , priority 0 [ 401.631229][T12103] tipc: Disabling bearer [ 401.752801][ T8] usb 4-1: USB disconnect, device number 6 [ 402.654352][T12126] tipc: Enabled bearer , priority 0 [ 402.701453][T12125] tipc: Disabling bearer [ 402.959872][T12132] syzkaller0: entered promiscuous mode [ 402.977563][T12132] syzkaller0: entered allmulticast mode [ 403.622472][T12097] Set syz1 is full, maxelem 65536 reached [ 403.683147][ T173] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 403.815272][T12150] tipc: Enabled bearer , priority 0 [ 403.850237][T12147] tipc: Disabling bearer [ 403.883078][ T173] usb 1-1: Using ep0 maxpacket: 8 [ 403.891135][ T173] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 403.911097][ T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.932712][ T173] usb 1-1: config 0 has no interface number 0 [ 403.949306][ T173] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.007201][ T173] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 404.022764][ T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.073078][ T173] usb 1-1: Product: syz [ 404.077319][ T173] usb 1-1: Manufacturer: syz [ 404.082791][ T173] usb 1-1: SerialNumber: syz [ 404.167645][ T173] usb 1-1: config 0 descriptor?? [ 404.189780][ T140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 404.205104][ T173] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 404.226795][T12159] syzkaller0: entered promiscuous mode [ 404.232515][T12159] syzkaller0: entered allmulticast mode [ 404.568158][T12166] syzkaller0: entered promiscuous mode [ 404.581984][T12166] syzkaller0: entered allmulticast mode [ 404.598939][T12167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1941'. [ 404.731477][T12167] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1941'. [ 405.904825][T12180] tipc: Enabled bearer , priority 0 [ 405.992881][ T173] usb 1-1: USB disconnect, device number 10 [ 406.004198][T12179] tipc: Disabling bearer [ 406.104127][T12183] syzkaller0: entered promiscuous mode [ 406.119968][T12183] syzkaller0: entered allmulticast mode [ 406.183214][T12183] tipc: Enabled bearer , priority 0 [ 406.214005][T12182] tipc: Resetting bearer [ 406.300588][T12182] tipc: Disabling bearer [ 406.685494][T12199] syzkaller0: entered promiscuous mode [ 406.691072][T12199] syzkaller0: entered allmulticast mode [ 406.746842][T12199] tipc: Enabled bearer , priority 0 [ 406.869900][T12199] tipc: Resetting bearer [ 406.931521][T12198] tipc: Resetting bearer [ 406.989245][T12198] tipc: Disabling bearer [ 407.378229][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1961'. [ 407.465379][T12213] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1961'. [ 407.875365][T12227] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 407.884541][T12225] syzkaller0: entered promiscuous mode [ 407.896847][T12225] syzkaller0: entered allmulticast mode [ 407.910266][T12225] tipc: Enabled bearer , priority 0 [ 407.957713][T12224] tipc: Resetting bearer [ 407.963958][ T5765] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 408.052670][T12224] tipc: Disabling bearer [ 408.153217][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 408.174744][ T5765] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 408.192952][ T5765] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.233003][ T5765] usb 4-1: config 0 has no interface number 0 [ 408.243358][ T5765] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.281497][ T5765] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 408.301189][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.319844][ T5765] usb 4-1: Product: syz [ 408.327721][ T5765] usb 4-1: Manufacturer: syz [ 408.332661][ T5765] usb 4-1: SerialNumber: syz [ 408.358288][ T5765] usb 4-1: config 0 descriptor?? [ 408.376548][ T5765] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 408.504806][T12243] tipc: Enabled bearer , priority 0 [ 408.518220][T12243] syzkaller0: entered promiscuous mode [ 408.526108][T12243] syzkaller0: entered allmulticast mode [ 408.556272][T12243] tipc: Resetting bearer [ 408.577344][T12242] tipc: Resetting bearer [ 408.644532][T12242] tipc: Disabling bearer [ 408.791643][T12253] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 410.081914][ T5781] usb 4-1: USB disconnect, device number 7 [ 410.128245][T12266] syzkaller0: entered promiscuous mode [ 410.143024][T12266] syzkaller0: entered allmulticast mode [ 410.435059][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1987'. [ 410.563853][T12287] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 411.041316][T12297] syzkaller0: entered promiscuous mode [ 411.054641][T12297] syzkaller0: entered allmulticast mode [ 411.333983][T12305] tipc: Enabled bearer , priority 0 [ 411.411263][T12304] tipc: Disabling bearer [ 411.573892][T12314] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 412.060464][T12331] syzkaller0: entered promiscuous mode [ 412.069345][T12331] syzkaller0: entered allmulticast mode [ 412.230747][T12333] tipc: Enabling of bearer rejected, failed to enable media [ 412.815173][T12347] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 413.215461][T12360] syzkaller0: entered promiscuous mode [ 413.228286][T12360] syzkaller0: entered allmulticast mode [ 413.485570][T12364] tipc: Enabled bearer , priority 0 [ 413.505414][T12364] syzkaller0: entered promiscuous mode [ 413.510977][T12364] syzkaller0: entered allmulticast mode [ 413.581904][T12364] tipc: Resetting bearer [ 413.619892][T12363] tipc: Resetting bearer [ 413.675641][T12363] tipc: Disabling bearer [ 413.837217][T12384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 414.018801][T12388] syzkaller0: entered promiscuous mode [ 414.033816][T12388] syzkaller0: entered allmulticast mode [ 414.080699][T12388] tipc: Enabled bearer , priority 0 [ 414.160453][T12388] tipc: Resetting bearer [ 414.211446][T12387] tipc: Resetting bearer [ 414.278851][T12387] tipc: Disabling bearer [ 414.327822][T12395] syzkaller0: entered promiscuous mode [ 414.333676][T12395] syzkaller0: entered allmulticast mode [ 414.954460][T12416] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.463785][T12430] syzkaller0: entered promiscuous mode [ 415.469353][T12430] syzkaller0: entered allmulticast mode [ 415.564712][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 415.836465][T12447] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 416.183311][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2060'. [ 416.450726][T12473] syzkaller0: entered promiscuous mode [ 416.460325][T12473] syzkaller0: entered allmulticast mode [ 416.561521][T12475] syzkaller0: entered promiscuous mode [ 416.567499][T12475] syzkaller0: entered allmulticast mode [ 416.632684][T12477] syzkaller0: entered promiscuous mode [ 416.646049][T12477] syzkaller0: entered allmulticast mode [ 416.688095][T12477] tipc: Enabled bearer , priority 0 [ 416.730657][T12477] tipc: Resetting bearer [ 416.795874][T12476] tipc: Resetting bearer [ 416.922632][T12476] tipc: Disabling bearer [ 417.260340][T12503] syzkaller0: entered promiscuous mode [ 417.266837][T12503] syzkaller0: entered allmulticast mode [ 417.472721][T12505] syzkaller0: entered promiscuous mode [ 417.496599][T12505] syzkaller0: entered allmulticast mode [ 417.873191][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 300 seconds [ 417.884392][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 300 seconds [ 418.308937][T12537] syzkaller0: entered promiscuous mode [ 418.325380][T12537] syzkaller0: entered allmulticast mode [ 419.031676][T12560] tipc: Enabled bearer , priority 0 [ 419.107544][T12560] syzkaller0: entered promiscuous mode [ 419.117540][T12560] syzkaller0: entered allmulticast mode [ 419.152603][T12560] tipc: Resetting bearer [ 419.213170][T12558] tipc: Resetting bearer [ 419.319887][T12558] tipc: Disabling bearer [ 419.467521][T12575] syzkaller0: entered promiscuous mode [ 419.493145][T12575] syzkaller0: entered allmulticast mode [ 420.445450][T12609] syzkaller0: entered promiscuous mode [ 420.451052][T12609] syzkaller0: entered allmulticast mode [ 420.925714][T12630] syzkaller0: entered promiscuous mode [ 420.931294][T12630] syzkaller0: entered allmulticast mode [ 421.013857][T12630] tipc: Enabled bearer , priority 0 [ 421.076135][T12630] tipc: Resetting bearer [ 421.116786][T12627] tipc: Resetting bearer [ 421.220244][T12627] tipc: Disabling bearer [ 421.369710][T12648] syzkaller0: entered promiscuous mode [ 421.382991][T12648] syzkaller0: entered allmulticast mode [ 422.229993][T12680] syzkaller0: entered promiscuous mode [ 422.243071][T12680] syzkaller0: entered allmulticast mode [ 422.405193][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 422.439120][T12685] bond_slave_0: entered promiscuous mode [ 422.445340][T12685] bond_slave_1: entered promiscuous mode [ 422.463767][T12685] macvtap1: entered promiscuous mode [ 422.478543][T12685] bond0: entered promiscuous mode [ 422.487397][T12685] macvtap1: entered allmulticast mode [ 422.502520][T12685] bond0: entered allmulticast mode [ 422.511841][T12685] bond_slave_0: entered allmulticast mode [ 422.519524][T12685] bond_slave_1: entered allmulticast mode [ 422.535279][T12685] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 422.549492][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 422.572533][T12686] bond0: left allmulticast mode [ 422.594536][T12686] bond_slave_0: left allmulticast mode [ 422.618382][T12686] bond_slave_1: left allmulticast mode [ 422.642005][T12686] bond0: left promiscuous mode [ 422.685541][T12686] bond_slave_0: left promiscuous mode [ 422.691119][T12686] bond_slave_1: left promiscuous mode [ 422.712455][T12686] macvtap1: left promiscuous mode [ 422.733104][T12686] macvtap1: left allmulticast mode [ 423.383162][T12715] syzkaller0: entered promiscuous mode [ 423.398934][T12715] syzkaller0: entered allmulticast mode [ 423.810428][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 423.864888][T12731] bond_slave_0: entered promiscuous mode [ 423.870660][T12731] bond_slave_1: entered promiscuous mode [ 423.914920][T12731] macvtap1: entered promiscuous mode [ 423.943048][T12731] bond0: entered promiscuous mode [ 423.956476][T12731] macvtap1: entered allmulticast mode [ 423.974301][T12731] bond0: entered allmulticast mode [ 423.989818][T12731] bond_slave_0: entered allmulticast mode [ 424.009871][T12731] bond_slave_1: entered allmulticast mode [ 424.044441][T12731] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 424.082643][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2159'. [ 424.103791][T12732] bond0: left allmulticast mode [ 424.108841][T12732] bond_slave_0: left allmulticast mode [ 424.159135][T12732] bond_slave_1: left allmulticast mode [ 424.215583][T12732] bond0: left promiscuous mode [ 424.239440][T12732] bond_slave_0: left promiscuous mode [ 424.245052][T12732] bond_slave_1: left promiscuous mode [ 424.288620][T12732] macvtap1: left promiscuous mode [ 424.293956][T12732] macvtap1: left allmulticast mode [ 427.098472][T12833] syzkaller0: entered promiscuous mode [ 427.113391][T12833] syzkaller0: entered allmulticast mode [ 427.442596][T12844] tipc: Enabling of bearer rejected, failed to enable media [ 427.475079][T12844] syzkaller0: entered promiscuous mode [ 427.480673][T12844] syzkaller0: entered allmulticast mode [ 427.970671][T12859] syzkaller0: entered promiscuous mode [ 427.976562][T12859] syzkaller0: entered allmulticast mode [ 430.230127][T12868] tipc: Enabled bearer , priority 0 [ 430.237624][T12877] syzkaller0: entered promiscuous mode [ 430.244234][T12877] syzkaller0: entered allmulticast mode [ 430.380096][T12877] tipc: Resetting bearer [ 430.889042][T12877] tipc: Disabling bearer [ 431.538255][T12916] syzkaller0: entered promiscuous mode [ 431.557485][T12916] syzkaller0: entered allmulticast mode [ 434.614019][T12924] syzkaller0: entered promiscuous mode [ 434.619688][T12924] syzkaller0: entered allmulticast mode [ 434.628474][T12926] tipc: Enabled bearer , priority 0 [ 434.663748][T12938] tipc: Resetting bearer [ 434.790312][T12931] syzkaller0: entered promiscuous mode [ 434.813008][T12931] syzkaller0: entered allmulticast mode [ 434.835714][T12923] tipc: Resetting bearer [ 434.918447][T12923] tipc: Disabling bearer [ 436.146569][ T79] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.220257][T13000] tipc: Enabling of bearer rejected, failed to enable media [ 438.472404][T13017] syzkaller0: entered promiscuous mode [ 438.493242][T13017] syzkaller0: entered allmulticast mode [ 439.709261][T13037] syzkaller0: entered promiscuous mode [ 439.717399][T13037] syzkaller0: entered allmulticast mode [ 440.248978][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.263203][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.455844][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.470129][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.499658][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.513873][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.526201][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 441.536170][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 443.603108][ T5788] Bluetooth: hci2: command tx timeout [ 443.745342][T13070] chnl_net:caif_netlink_parms(): no params data found [ 443.989633][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.022534][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.077382][T13070] bridge_slave_0: entered allmulticast mode [ 444.161531][T13070] bridge_slave_0: entered promiscuous mode [ 444.264416][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.311736][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.375679][T13070] bridge_slave_1: entered allmulticast mode [ 444.450729][T13070] bridge_slave_1: entered promiscuous mode [ 444.865635][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.908001][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.025322][T13070] team0: Port device team_slave_0 added [ 445.056542][T13070] team0: Port device team_slave_1 added [ 445.082702][T13073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.125232][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.132249][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.168231][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.280435][T13105] syzkaller0: entered promiscuous mode [ 445.302986][T13105] syzkaller0: entered allmulticast mode [ 445.311477][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.329591][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.390605][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.683213][ T5788] Bluetooth: hci2: command tx timeout [ 447.763916][ T5788] Bluetooth: hci2: command tx timeout [ 447.927504][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 330 seconds [ 447.938787][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 330 seconds [ 448.178909][T13070] hsr_slave_0: entered promiscuous mode [ 448.194803][T13070] hsr_slave_1: entered promiscuous mode [ 448.212960][T13070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.222164][T13070] Cannot create hsr debugfs directory [ 448.509183][T13070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.636997][T13070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.770711][T13070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.947154][T13070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.659242][T13123] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.843276][ T5788] Bluetooth: hci2: command tx timeout [ 450.054908][T13070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 450.102116][T13070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 450.147884][T13070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 450.187310][T13070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 450.427720][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.486269][T13070] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.515952][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.524400][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.579698][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.586974][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.055480][T13172] tipc: Enabled bearer , priority 0 [ 451.071886][T13172] tipc: Resetting bearer [ 451.090695][T13170] tipc: Disabling bearer [ 451.114407][T13070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.221984][T13070] veth0_vlan: entered promiscuous mode [ 451.268394][T13070] veth1_vlan: entered promiscuous mode [ 452.108885][T13070] veth0_macvtap: entered promiscuous mode [ 452.186465][T13070] veth1_macvtap: entered promiscuous mode [ 452.356020][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.382963][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.425526][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.463476][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.474189][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.485816][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.496100][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.508106][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.532003][T13070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.571795][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.585752][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.596484][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.607716][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.626523][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.642461][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.657031][T13070] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.674687][T13070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.690242][T13070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.716410][T13070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.742538][T13070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.764257][T13070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.778359][T13070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.821165][T13196] tipc: Enabled bearer , priority 0 [ 452.858542][T13196] tipc: Resetting bearer [ 452.904968][T13195] tipc: Disabling bearer [ 453.020525][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.046624][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.143698][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.151804][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.841745][T13224] syzkaller0: entered promiscuous mode [ 454.862969][T13224] syzkaller0: entered allmulticast mode [ 455.331121][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 455.342446][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 455.351112][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 455.359764][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 455.368654][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 455.376225][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 455.577358][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.801139][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.931752][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.914460][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.040029][T13227] chnl_net:caif_netlink_parms(): no params data found [ 457.159398][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.166998][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.174591][T13227] bridge_slave_0: entered allmulticast mode [ 457.180966][T13209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 457.185787][T13227] bridge_slave_0: entered promiscuous mode [ 457.247618][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.263167][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.291118][T13227] bridge_slave_1: entered allmulticast mode [ 457.324395][T13227] bridge_slave_1: entered promiscuous mode [ 457.443192][ T5788] Bluetooth: hci3: command tx timeout [ 457.523957][T13227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.591614][T13227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.661544][ T11] tipc: Disabling bearer [ 457.676451][ T11] tipc: Left network mode [ 457.677258][T13252] syzkaller0: entered promiscuous mode [ 457.708527][T13252] syzkaller0: entered allmulticast mode [ 457.784263][T13227] team0: Port device team_slave_0 added [ 457.791390][T13250] tipc: Enabled bearer , priority 0 [ 457.921529][T13227] team0: Port device team_slave_1 added [ 457.963711][T13259] tipc: Resetting bearer [ 458.045615][T13249] tipc: Resetting bearer [ 458.079666][T13249] tipc: Disabling bearer [ 458.144911][T13256] syzkaller0: entered promiscuous mode [ 458.162357][T13256] syzkaller0: entered allmulticast mode [ 458.302578][T13227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.309726][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.336711][T13227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.524713][ T5788] Bluetooth: hci3: command tx timeout [ 461.545262][T13227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.552285][T13227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.579640][T13227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.604994][ T5788] Bluetooth: hci3: command tx timeout [ 461.976939][T13227] hsr_slave_0: entered promiscuous mode [ 462.019920][T13227] hsr_slave_1: entered promiscuous mode [ 462.037501][T13227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.071742][T13227] Cannot create hsr debugfs directory [ 462.722566][ T11] hsr_slave_0: left promiscuous mode [ 462.740043][ T11] hsr_slave_1: left promiscuous mode [ 462.747653][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.758593][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.768034][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.776840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.785786][ T11] bridge_slave_1: left promiscuous mode [ 462.793670][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.823987][ T11] bridge_slave_0: left allmulticast mode [ 462.829728][ T11] bridge_slave_0: left promiscuous mode [ 462.844312][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.908573][ T11] veth1_macvtap: left promiscuous mode [ 462.923372][ T11] veth0_macvtap: left promiscuous mode [ 462.929129][ T11] veth1_vlan: left promiscuous mode [ 462.942691][ T11] veth0_vlan: left promiscuous mode [ 463.683506][ T5788] Bluetooth: hci3: command tx timeout [ 463.786331][ T11] team0 (unregistering): Port device team_slave_1 removed [ 463.834991][ T11] team0 (unregistering): Port device team_slave_0 removed [ 463.887785][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.936551][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.315618][ T11] bond0 (unregistering): Released all slaves [ 464.734815][T13298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.792769][T13227] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.863758][T13227] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.956663][T13227] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 465.029435][T13227] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 465.418691][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.492051][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.514259][T13359] syzkaller0: entered promiscuous mode [ 465.519815][T13359] syzkaller0: entered allmulticast mode [ 465.563709][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.570938][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.592378][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.599613][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.843149][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 466.378609][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.496235][T13227] veth0_vlan: entered promiscuous mode [ 466.519184][T13227] veth1_vlan: entered promiscuous mode [ 466.597719][T13227] veth0_macvtap: entered promiscuous mode [ 466.617084][T13227] veth1_macvtap: entered promiscuous mode [ 466.694633][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.712969][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.724283][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.741869][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.754860][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.771392][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.783700][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.801275][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.813505][T13227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.836991][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.855693][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.869896][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.885354][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.898484][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.909792][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.920448][T13227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.932647][T13227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.950356][T13227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.979630][T13227] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.991908][T13227] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.012718][T13227] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.032926][T13227] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.739295][T13369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.854716][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.862614][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.010940][T13455] syzkaller0: entered promiscuous mode [ 469.013323][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.022010][T13455] syzkaller0: entered allmulticast mode [ 469.052189][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.602810][T13478] syzkaller0: entered promiscuous mode [ 469.609055][T13478] syzkaller0: entered allmulticast mode [ 472.465506][T13472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.064002][T13512] tipc: Started in network mode [ 473.069050][T13512] tipc: Node identity aaf250394939, cluster identity 4711 [ 473.102681][T13512] tipc: Enabled bearer , priority 0 [ 473.150032][T13512] tipc: Resetting bearer [ 473.180420][T13511] tipc: Disabling bearer [ 473.371921][T13528] syzkaller0: entered promiscuous mode [ 473.377837][T13528] syzkaller0: entered allmulticast mode [ 476.139618][T13517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.440845][T13552] tipc: Enabled bearer , priority 0 [ 476.468459][T13552] tipc: Resetting bearer [ 476.564142][T13549] tipc: Disabling bearer [ 476.781086][T13562] syzkaller0: entered promiscuous mode [ 476.803860][T13562] syzkaller0: entered allmulticast mode [ 476.823536][T13562] tipc: Started in network mode [ 476.832928][T13562] tipc: Node identity 8e1f314135c, cluster identity 4711 [ 476.859703][T13562] tipc: Enabled bearer , priority 0 [ 476.936663][T13561] tipc: Resetting bearer [ 476.991838][T13561] tipc: Disabling bearer [ 477.023512][T13568] syzkaller0: entered promiscuous mode [ 477.029055][T13568] syzkaller0: entered allmulticast mode [ 478.004356][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 360 seconds [ 478.016136][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 360 seconds [ 478.509473][T13601] syzkaller0: entered promiscuous mode [ 478.523141][T13601] syzkaller0: entered allmulticast mode [ 478.821024][T13609] syzkaller0: entered promiscuous mode [ 478.833564][T13609] syzkaller0: entered allmulticast mode [ 479.761760][T13566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.038502][T13617] syzkaller0: entered promiscuous mode [ 480.054566][T13617] syzkaller0: entered allmulticast mode [ 480.651642][T13637] tipc: Enabling of bearer rejected, failed to enable media [ 481.103274][T13651] syzkaller0: entered promiscuous mode [ 481.108939][T13651] syzkaller0: entered allmulticast mode [ 481.544062][T13660] syzkaller0: entered promiscuous mode [ 481.549629][T13660] syzkaller0: entered allmulticast mode [ 482.339388][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.349758][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.358063][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.368093][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.376869][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 482.393826][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.686183][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.697671][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.720356][T13671] chnl_net:caif_netlink_parms(): no params data found [ 482.760912][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.771479][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.862196][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.874661][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.910083][T13671] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.924350][T13671] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.934784][T13671] bridge_slave_0: entered allmulticast mode [ 482.942127][T13671] bridge_slave_0: entered promiscuous mode [ 482.951642][T13671] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.960145][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.968052][T13671] bridge_slave_1: entered allmulticast mode [ 482.984654][T13671] bridge_slave_1: entered promiscuous mode [ 483.016843][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.027404][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.070074][T13671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.082157][T13671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.127532][T13671] team0: Port device team_slave_0 added [ 483.139131][T13671] team0: Port device team_slave_1 added [ 483.172161][T13671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.179565][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.206011][T13671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.220312][T13671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.227742][T13671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.255072][T13671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.371552][T13671] hsr_slave_0: entered promiscuous mode [ 483.386477][T13671] hsr_slave_1: entered promiscuous mode [ 483.416175][ T79] tipc: Left network mode [ 483.635128][T13636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.484679][ T5788] Bluetooth: hci4: command tx timeout [ 486.567548][ T5788] Bluetooth: hci4: command tx timeout [ 487.061013][T13706] syzkaller0: entered promiscuous mode [ 487.066749][T13706] syzkaller0: entered allmulticast mode [ 487.165078][T13731] tipc: Enabled bearer , priority 0 [ 487.172596][T13725] syzkaller0: entered promiscuous mode [ 487.178870][T13725] syzkaller0: entered allmulticast mode [ 487.419663][T13732] tipc: Resetting bearer [ 487.516076][T13732] tipc: Disabling bearer [ 487.889531][T13671] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.903566][T13671] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.976076][T13671] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 488.002289][T13671] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 488.372593][ T79] hsr_slave_0: left promiscuous mode [ 488.386971][ T79] hsr_slave_1: left promiscuous mode [ 488.396186][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.404558][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.423952][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.442377][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.456956][ T79] bridge_slave_1: left allmulticast mode [ 488.475955][ T79] bridge_slave_1: left promiscuous mode [ 488.481802][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.492067][ T79] bridge_slave_0: left allmulticast mode [ 488.505161][ T79] bridge_slave_0: left promiscuous mode [ 488.511023][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.583074][ T79] veth1_macvtap: left promiscuous mode [ 488.588702][ T79] veth0_macvtap: left promiscuous mode [ 488.603694][ T79] veth1_vlan: left promiscuous mode [ 488.609126][ T79] veth0_vlan: left promiscuous mode [ 488.652978][ T5788] Bluetooth: hci4: command tx timeout [ 490.052735][ T79] team0 (unregistering): Port device team_slave_1 removed [ 490.116606][ T79] team0 (unregistering): Port device team_slave_0 removed [ 490.168789][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.224309][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.593635][ T79] bond0 (unregistering): Released all slaves [ 490.723195][ T5788] Bluetooth: hci4: command tx timeout [ 490.745810][T13799] tipc: Enabling of bearer rejected, failed to enable media [ 490.842507][T13671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.925474][T13671] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.994798][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.002016][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.049318][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.056679][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.598745][T13840] syzkaller0: entered promiscuous mode [ 491.608632][T13840] syzkaller0: entered allmulticast mode [ 491.637396][T13840] tipc: Enabled bearer , priority 0 [ 491.664311][T13839] tipc: Resetting bearer [ 491.774529][T13839] tipc: Disabling bearer [ 491.946116][T13671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.105130][T13671] veth0_vlan: entered promiscuous mode [ 492.141019][T13671] veth1_vlan: entered promiscuous mode [ 492.179900][T13671] veth0_macvtap: entered promiscuous mode [ 492.214238][T13671] veth1_macvtap: entered promiscuous mode [ 492.283546][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.312933][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.324006][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.362989][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.380653][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.401951][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.430540][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.463080][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.485051][T13671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.536425][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.560455][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.571191][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.582625][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.602645][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.633272][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.653915][T13671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.678351][T13671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.709116][T13671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.745557][T13671] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.765896][T13671] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.785398][T13671] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.799907][T13671] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.039008][T13816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.060727][T13816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.127060][T13816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.144129][T13816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.247416][T13930] usb usb8: usbfs: process 13930 (syz.3.2489) did not claim interface 0 before use [ 497.321341][T13943] syzkaller0: entered promiscuous mode [ 497.335534][T13943] syzkaller0: entered allmulticast mode [ 497.854066][T13963] usb usb8: usbfs: process 13963 (syz.0.2499) did not claim interface 0 before use [ 498.881882][T13971] syzkaller0: entered promiscuous mode [ 498.888175][T13971] syzkaller0: entered allmulticast mode [ 499.489863][T13981] syzkaller0: entered promiscuous mode [ 499.502687][T13981] syzkaller0: entered allmulticast mode [ 499.856006][T13998] usb usb8: usbfs: process 13998 (syz.2.2515) did not claim interface 0 before use [ 501.690811][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.698296][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.762307][ T5140] udevd[5140]: worker [5793] /devices/virtual/block/nbd1 timeout; kill it [ 502.784510][ T5140] udevd[5140]: seq 10801 '/devices/virtual/block/nbd1' killed [ 504.302729][T14073] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 506.223037][T14061] tipc: Enabling of bearer rejected, failed to enable media [ 507.385090][T14141] syzkaller0: entered promiscuous mode [ 507.390757][T14141] syzkaller0: entered allmulticast mode [ 508.102347][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 390 seconds [ 508.113445][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 390 seconds [ 509.550490][T14114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.178779][T14178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.782731][T14245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.807375][T14245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.821915][T14245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.837655][T14245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.852195][T14245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 515.863187][T14245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.238859][T13816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.440188][T13816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.554578][T13816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.671547][T13816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.931076][T14243] chnl_net:caif_netlink_parms(): no params data found [ 516.952423][T13816] tipc: Left network mode [ 517.343199][T14243] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.353136][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.371693][T14243] bridge_slave_0: entered allmulticast mode [ 517.392637][T14243] bridge_slave_0: entered promiscuous mode [ 517.561468][T14243] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.593201][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.600584][T14243] bridge_slave_1: entered allmulticast mode [ 517.630723][T14243] bridge_slave_1: entered promiscuous mode [ 517.726356][T14243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.742240][T14243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.871211][T14243] team0: Port device team_slave_0 added [ 517.900952][T14243] team0: Port device team_slave_1 added [ 517.923372][ T5788] Bluetooth: hci0: command tx timeout [ 518.052465][T14243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.060180][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.089245][T14243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.108767][T14243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.116202][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.143154][T14243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.324507][T14243] hsr_slave_0: entered promiscuous mode [ 518.331573][T14243] hsr_slave_1: entered promiscuous mode [ 518.338537][T14243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.349932][T14243] Cannot create hsr debugfs directory [ 518.743913][T13816] hsr_slave_0: left promiscuous mode [ 518.751951][T13816] hsr_slave_1: left promiscuous mode [ 518.771028][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.778955][T13816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.792206][T13816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.800844][T13816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.821718][T13816] bridge_slave_1: left allmulticast mode [ 518.835819][T13816] bridge_slave_1: left promiscuous mode [ 518.857710][T13816] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.910327][T13816] bridge_slave_0: left allmulticast mode [ 518.921180][T13816] bridge_slave_0: left promiscuous mode [ 518.928751][T13816] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.995710][T13816] veth1_macvtap: left promiscuous mode [ 519.001332][T13816] veth0_macvtap: left promiscuous mode [ 519.012683][T13816] veth1_vlan: left promiscuous mode [ 519.018231][T13816] veth0_vlan: left promiscuous mode [ 519.318001][T14248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.018525][ T5788] Bluetooth: hci0: command tx timeout [ 520.270822][T13816] team0 (unregistering): Port device team_slave_1 removed [ 520.350285][T13816] team0 (unregistering): Port device team_slave_0 removed [ 520.430859][T13816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.485995][T13816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.089582][T13816] bond0 (unregistering): Released all slaves [ 521.760101][T13816] IPVS: stop unused estimator thread 0... [ 522.083215][ T5788] Bluetooth: hci0: command tx timeout [ 523.044122][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 523.243059][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 523.253380][ T23] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 523.261583][ T23] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 523.283233][ T23] usb 3-1: config 0 has no interface number 0 [ 523.289432][ T23] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.312661][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 523.321883][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.330015][ T23] usb 3-1: Product: syz [ 523.334306][ T23] usb 3-1: Manufacturer: syz [ 523.338948][ T23] usb 3-1: SerialNumber: syz [ 523.347083][ T23] usb 3-1: config 0 descriptor?? [ 523.772890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 523.792879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 523.862912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 523.952891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 524.032888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 525.729641][ T5788] Bluetooth: hci0: command tx timeout [ 525.735375][T14327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.772500][T14243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.845120][T14243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 525.895282][T14243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.931771][T14243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.065505][T14243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.118717][T14243] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.211818][ T23] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 526.219701][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.226973][T13813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.269828][ T23] usb 3-1: USB disconnect, device number 8 [ 526.293838][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.301088][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.956530][T14243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.084415][T14243] veth0_vlan: entered promiscuous mode [ 527.099580][T14243] veth1_vlan: entered promiscuous mode [ 527.184797][T14243] veth0_macvtap: entered promiscuous mode [ 527.198910][T14243] veth1_macvtap: entered promiscuous mode [ 527.227349][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.240249][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.250813][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.262617][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.286441][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.303134][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.333071][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.351052][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.390807][T14243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.411479][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.422140][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.435961][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.451803][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.466467][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.477910][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.493803][T14243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.519363][T14243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.531523][T14243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.548933][T14243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.589734][T14243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.611181][T14243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.632973][T14243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.878741][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.913398][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.988582][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.005912][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.463143][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 530.668778][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 530.685172][ T27] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 530.710811][ T27] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 530.732467][ T27] usb 3-1: config 0 has no interface number 0 [ 530.750035][ T27] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 530.781184][ T27] usb 3-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 530.810986][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 530.833196][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.848195][ T27] usb 3-1: Product: syz [ 530.855269][ T27] usb 3-1: Manufacturer: syz [ 530.859937][ T27] usb 3-1: SerialNumber: syz [ 530.884778][ T27] usb 3-1: config 0 descriptor?? [ 530.893848][ T27] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 532.960314][T14479] syzkaller0: entered promiscuous mode [ 532.987522][T14479] syzkaller0: entered allmulticast mode [ 533.121366][ T173] usb 3-1: USB disconnect, device number 9 [ 533.558489][T14491] syzkaller0: entered promiscuous mode [ 533.566700][T14491] syzkaller0: entered allmulticast mode [ 534.567266][T14504] syzkaller0: entered promiscuous mode [ 534.583029][T14504] syzkaller0: entered allmulticast mode [ 535.020618][T14514] syzkaller0: entered promiscuous mode [ 535.032998][T14514] syzkaller0: entered allmulticast mode [ 535.420169][T14522] syzkaller0: entered promiscuous mode [ 535.425791][T14522] syzkaller0: entered allmulticast mode [ 535.719959][T13183] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 535.913229][T13183] usb 4-1: Using ep0 maxpacket: 8 [ 535.949380][T13183] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 535.964319][T13183] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 535.981847][T13183] usb 4-1: config 0 has no interface number 0 [ 535.989651][T13183] usb 4-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 536.010989][T13183] usb 4-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 536.040633][T13183] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 536.056086][T13183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.066912][T13183] usb 4-1: Product: syz [ 536.071151][T13183] usb 4-1: Manufacturer: syz [ 536.081993][T13183] usb 4-1: SerialNumber: syz [ 536.094153][T13183] usb 4-1: config 0 descriptor?? [ 536.106148][T13183] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 538.087403][ T8] usb 4-1: USB disconnect, device number 8 [ 538.254631][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 420 seconds [ 538.265771][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 420 seconds [ 539.863655][T14549] syzkaller0: entered promiscuous mode [ 539.872717][T14549] syzkaller0: entered allmulticast mode [ 540.285906][T14554] syzkaller0: entered promiscuous mode [ 540.291592][T14554] syzkaller0: entered allmulticast mode [ 541.139868][T14498] Set syz1 is full, maxelem 65536 reached [ 541.553003][T13183] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 541.745421][T13183] usb 2-1: Using ep0 maxpacket: 8 [ 541.764792][T13183] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 541.778732][T13183] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 541.789998][T13183] usb 2-1: config 0 has no interface number 0 [ 541.796761][T13183] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 541.818735][T13183] usb 2-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 541.837225][T13183] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 541.853094][T13183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.870456][T13183] usb 2-1: Product: syz [ 541.877859][T13183] usb 2-1: Manufacturer: syz [ 541.882528][T13183] usb 2-1: SerialNumber: syz [ 541.904680][T13183] usb 2-1: config 0 descriptor?? [ 541.924343][T13183] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 544.011493][ T173] usb 2-1: USB disconnect, device number 7 [ 545.616459][T14604] syzkaller0: entered promiscuous mode [ 545.622018][T14604] syzkaller0: entered allmulticast mode [ 546.047488][T14618] syzkaller0: entered promiscuous mode [ 546.053294][T14618] syzkaller0: entered allmulticast mode [ 548.833497][T14663] syzkaller0: entered promiscuous mode [ 548.839073][T14663] syzkaller0: entered allmulticast mode [ 549.489272][ T2991] nci: nci_rsp_packet: unknown rsp opcode 0x7 [ 549.640124][T14697] syzkaller0: entered promiscuous mode [ 549.646911][T14697] syzkaller0: entered allmulticast mode [ 550.089937][T14706] syzkaller0: entered promiscuous mode [ 550.101566][T14706] syzkaller0: entered allmulticast mode [ 550.126177][T14708] syzkaller0: entered promiscuous mode [ 550.131734][T14708] syzkaller0: entered allmulticast mode [ 552.327708][T14681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.619084][T14721] syzkaller0: entered promiscuous mode [ 552.645669][T14721] syzkaller0: entered allmulticast mode [ 553.053024][ T5765] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 553.253105][ T5765] usb 4-1: Using ep0 maxpacket: 8 [ 553.265520][ T5765] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 553.303013][ T5765] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 553.314948][T14744] syzkaller0: entered promiscuous mode [ 553.320730][T14744] syzkaller0: entered allmulticast mode [ 553.336091][ T5765] usb 4-1: config 0 has no interface number 0 [ 553.342356][ T5765] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.366699][ T5765] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 553.376207][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.385119][ T5765] usb 4-1: Product: syz [ 553.391374][ T5765] usb 4-1: Manufacturer: syz [ 553.396219][ T5765] usb 4-1: SerialNumber: syz [ 553.405441][ T5765] usb 4-1: config 0 descriptor?? [ 553.424260][ T5765] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 555.402199][ T173] usb 4-1: USB disconnect, device number 9 [ 556.258917][T14736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.619186][T14761] syzkaller0: entered promiscuous mode [ 556.625062][T14761] syzkaller0: entered allmulticast mode [ 558.480028][T14783] syzkaller0: entered promiscuous mode [ 558.495034][T14783] syzkaller0: entered allmulticast mode [ 558.633277][T14786] syzkaller0: entered promiscuous mode [ 558.640735][T14786] syzkaller0: entered allmulticast mode [ 558.702210][T14786] tipc: Enabled bearer , priority 0 [ 558.752561][T14785] tipc: Resetting bearer [ 558.943385][T14785] tipc: Disabling bearer [ 559.019463][T14796] syzkaller0: entered promiscuous mode [ 559.025087][T14796] syzkaller0: entered allmulticast mode [ 559.370203][T14805] syzkaller0: entered promiscuous mode [ 559.379304][T14805] syzkaller0: entered allmulticast mode [ 560.855770][T14831] syzkaller0: entered promiscuous mode [ 560.861505][T14831] syzkaller0: entered allmulticast mode [ 561.493572][T14845] syzkaller0: entered promiscuous mode [ 561.513462][T14845] syzkaller0: entered allmulticast mode [ 562.024778][T14865] syzkaller0: entered promiscuous mode [ 562.065241][T14865] syzkaller0: entered allmulticast mode [ 562.489688][T14880] syzkaller0: entered promiscuous mode [ 562.498776][T14880] syzkaller0: entered allmulticast mode [ 563.127582][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.135641][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.403865][T14893] syzkaller0: entered promiscuous mode [ 563.409515][T14893] syzkaller0: entered allmulticast mode [ 563.572879][T14901] tipc: Enabled bearer , priority 0 [ 563.594566][T14898] tipc: Resetting bearer [ 563.654296][T14897] tipc: Disabling bearer [ 563.979728][T14911] syzkaller0: entered promiscuous mode [ 563.985890][T14911] syzkaller0: entered allmulticast mode [ 564.014026][T14909] syzkaller0: entered promiscuous mode [ 564.019598][T14909] syzkaller0: entered allmulticast mode [ 565.208862][T14245] Bluetooth: hci2: command 0x0406 tx timeout [ 567.129697][T14949] tipc: Started in network mode [ 567.140077][T14949] tipc: Node identity 56dfde2828d1, cluster identity 4711 [ 567.151832][T14949] tipc: Enabled bearer , priority 0 [ 567.321828][T14960] tipc: Disabling bearer [ 568.693362][T14993] syzkaller0: entered promiscuous mode [ 568.702987][T14993] syzkaller0: entered allmulticast mode [ 568.898007][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 450 seconds [ 568.908931][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 450 seconds [ 568.933072][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 569.133032][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 569.140043][ T27] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 569.148525][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.159885][ T27] usb 2-1: config 0 has no interface number 0 [ 569.166346][ T27] usb 2-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 569.183006][ T27] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 569.192263][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.202705][ T27] usb 2-1: Product: syz [ 569.207203][ T27] usb 2-1: Manufacturer: syz [ 569.211878][ T27] usb 2-1: SerialNumber: syz [ 569.223760][ T27] usb 2-1: config 0 descriptor?? [ 569.232808][ T27] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 570.810526][ T8] usb 2-1: USB disconnect, device number 8 [ 571.893378][T15001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.163555][T15038] syzkaller0: entered promiscuous mode [ 572.169111][T15038] syzkaller0: entered allmulticast mode [ 573.333129][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 573.522955][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 573.530664][ T8] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 573.539427][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.551150][ T8] usb 1-1: config 0 has no interface number 0 [ 573.560662][ T8] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.578019][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 573.587652][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.596032][ T8] usb 1-1: Product: syz [ 573.600407][ T8] usb 1-1: Manufacturer: syz [ 573.605586][ T8] usb 1-1: SerialNumber: syz [ 573.614486][ T8] usb 1-1: config 0 descriptor?? [ 573.623825][ T8] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 573.827558][T15072] syzkaller0: entered promiscuous mode [ 573.833856][T15072] syzkaller0: entered allmulticast mode [ 575.658712][T15054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.805009][T15109] syzkaller0: entered promiscuous mode [ 576.827235][T15109] syzkaller0: entered allmulticast mode [ 577.689223][ T8] usb 1-1: USB disconnect, device number 11 [ 579.444705][T15146] syzkaller0: entered promiscuous mode [ 579.450267][T15146] syzkaller0: entered allmulticast mode [ 580.132730][T15115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.379783][T15166] syzkaller0: entered promiscuous mode [ 580.392596][T15166] syzkaller0: entered allmulticast mode [ 580.571566][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 581.183945][T15185] syzkaller0: entered promiscuous mode [ 581.189508][T15185] syzkaller0: entered allmulticast mode [ 582.840927][T15213] syzkaller0: entered promiscuous mode [ 582.856824][T15213] syzkaller0: entered allmulticast mode [ 583.988286][T15243] syzkaller0: entered promiscuous mode [ 584.002159][T15243] syzkaller0: entered allmulticast mode [ 584.079966][T15241] syzkaller0: entered promiscuous mode [ 584.087065][T15241] syzkaller0: entered allmulticast mode [ 584.096978][T15241] tipc: Enabled bearer , priority 0 [ 584.130712][T15241] tipc: Resetting bearer [ 584.156998][T15240] tipc: Resetting bearer [ 584.310429][T15240] tipc: Disabling bearer [ 585.903659][T15270] syzkaller0: entered promiscuous mode [ 585.912421][T15270] syzkaller0: entered allmulticast mode [ 586.212495][T15281] syzkaller0: entered promiscuous mode [ 586.228456][T15281] syzkaller0: entered allmulticast mode [ 587.720817][T15304] syzkaller0: entered promiscuous mode [ 587.731495][T15304] syzkaller0: entered allmulticast mode [ 588.530073][T15329] syzkaller0: entered promiscuous mode [ 588.537003][T15329] syzkaller0: entered allmulticast mode [ 590.975070][T15310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.217331][T15362] syzkaller0: entered promiscuous mode [ 591.223252][T15362] syzkaller0: entered allmulticast mode [ 593.339468][T15395] syzkaller0: entered promiscuous mode [ 593.351967][T15395] syzkaller0: entered allmulticast mode [ 593.794120][T15409] syzkaller0: entered promiscuous mode [ 593.799694][T15409] syzkaller0: entered allmulticast mode [ 594.388104][T15423] syzkaller0: entered promiscuous mode [ 594.396771][T15423] syzkaller0: entered allmulticast mode [ 595.069561][T15435] syzkaller0: entered promiscuous mode [ 595.079144][T15435] syzkaller0: entered allmulticast mode [ 595.412974][T15444] syzkaller0: entered promiscuous mode [ 595.418628][T15444] syzkaller0: entered allmulticast mode [ 596.554710][T15474] syzkaller0: entered promiscuous mode [ 596.560280][T15474] syzkaller0: entered allmulticast mode [ 597.588843][T15507] syzkaller0: entered promiscuous mode [ 597.597256][T15507] syzkaller0: entered allmulticast mode [ 597.919126][T15515] syzkaller0: entered promiscuous mode [ 597.927545][T15515] syzkaller0: entered allmulticast mode [ 598.212946][ T173] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 598.413042][ T173] usb 3-1: Using ep0 maxpacket: 8 [ 598.420521][ T173] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 598.429699][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.509329][T15533] syzkaller0: entered promiscuous mode [ 598.523155][T15533] syzkaller0: entered allmulticast mode [ 598.572474][ T173] usb 3-1: config 0 has no interface number 0 [ 598.578802][ T173] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.604447][ T173] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 598.613768][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.621822][ T173] usb 3-1: Product: syz [ 598.632862][ T173] usb 3-1: Manufacturer: syz [ 598.637535][ T173] usb 3-1: SerialNumber: syz [ 598.669658][ T173] usb 3-1: config 0 descriptor?? [ 598.696766][ T173] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 598.967906][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 480 seconds [ 598.980060][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 480 seconds [ 600.626683][T15579] usb usb8: usbfs: process 15579 (syz.3.3037) did not claim interface 0 before use [ 601.861892][ T173] usb 3-1: USB disconnect, device number 10 [ 601.876528][T15590] tipc: Enabled bearer , priority 0 [ 601.945080][T15590] tipc: Resetting bearer [ 602.188672][T15587] tipc: Disabling bearer [ 602.251818][T15597] syzkaller0: entered promiscuous mode [ 602.265007][T15597] syzkaller0: entered allmulticast mode [ 602.281861][T15601] tipc: Enabling of bearer rejected, failed to enable media [ 602.902994][T15613] usb usb8: usbfs: process 15613 (syz.2.3049) did not claim interface 0 before use [ 604.133271][ T173] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 604.339283][ T173] usb 3-1: Using ep0 maxpacket: 8 [ 604.347451][ T173] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 604.355998][ T173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.366709][ T173] usb 3-1: config 0 has no interface number 0 [ 604.373478][ T173] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.394934][ T173] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 604.405636][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.414190][ T173] usb 3-1: Product: syz [ 604.418518][ T173] usb 3-1: Manufacturer: syz [ 604.423604][ T173] usb 3-1: SerialNumber: syz [ 604.443311][ T173] usb 3-1: config 0 descriptor?? [ 604.451474][ T173] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 606.328082][T15606] syzkaller0: entered promiscuous mode [ 606.333904][T15606] syzkaller0: entered allmulticast mode [ 606.638489][T15629] syzkaller0: entered promiscuous mode [ 606.681541][T15629] syzkaller0: entered allmulticast mode [ 607.142361][T15641] tipc: Started in network mode [ 607.151987][T15641] tipc: Node identity 6ec707b2f958, cluster identity 4711 [ 607.160515][T15641] tipc: Enabled bearer , priority 0 [ 607.197706][T15641] tipc: Resetting bearer [ 607.277525][T15640] tipc: Disabling bearer [ 607.431028][T15645] usb usb8: usbfs: process 15645 (syz.3.3058) did not claim interface 0 before use [ 608.760619][ T5781] usb 3-1: USB disconnect, device number 11 [ 609.567542][T15676] loop1: detected capacity change from 0 to 16 [ 609.579164][T15676] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 609.723095][ T173] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 610.602924][ T173] usb 4-1: Using ep0 maxpacket: 8 [ 610.611862][ T173] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 610.625820][ T173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.645508][ T173] usb 4-1: config 0 has no interface number 0 [ 610.659370][ T173] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.700147][ T173] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 610.715920][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.726130][ T173] usb 4-1: Product: syz [ 610.730476][ T173] usb 4-1: Manufacturer: syz [ 610.735639][ T173] usb 4-1: SerialNumber: syz [ 610.744223][ T173] usb 4-1: config 0 descriptor?? [ 610.754286][ T173] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 611.820353][T15708] usb usb8: usbfs: process 15708 (syz.0.3079) did not claim interface 0 before use [ 612.111906][T15714] FAULT_INJECTION: forcing a failure. [ 612.111906][T15714] name failslab, interval 1, probability 0, space 0, times 1 [ 612.160578][T15714] CPU: 0 PID: 15714 Comm: syz.0.3081 Not tainted syzkaller #0 [ 612.168122][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.178244][T15714] Call Trace: [ 612.181602][T15714] [ 612.184608][T15714] dump_stack_lvl+0x18c/0x250 [ 612.189488][T15714] ? show_regs_print_info+0x20/0x20 [ 612.194740][T15714] ? load_image+0x420/0x420 [ 612.199284][T15714] ? __might_sleep+0xe0/0xe0 [ 612.203922][T15714] ? __lock_acquire+0x7d80/0x7d80 [ 612.208982][T15714] should_fail_ex+0x394/0x4c0 [ 612.213707][T15714] should_failslab+0x9/0x20 [ 612.218241][T15714] slab_pre_alloc_hook+0x59/0x300 [ 612.223309][T15714] ? igmpv3_add_delrec+0xbd/0x560 [ 612.228423][T15714] __kmem_cache_alloc_node+0x53/0x250 [ 612.233820][T15714] ? igmpv3_add_delrec+0xbd/0x560 [ 612.238861][T15714] kmalloc_trace+0x2a/0xe0 [ 612.243311][T15714] igmpv3_add_delrec+0xbd/0x560 [ 612.248212][T15714] __igmp_group_dropped+0x70d/0x910 [ 612.253433][T15714] ? __ip_mc_dec_group+0x670/0x670 [ 612.258568][T15714] ? kvfree_call_rcu+0x54c/0x780 [ 612.263540][T15714] __ip_mc_dec_group+0x3f4/0x670 [ 612.268505][T15714] ip_mc_drop_socket+0x1d7/0x270 [ 612.273488][T15714] inet_release+0x4b/0x180 [ 612.277921][T15714] sock_close+0xa7/0x210 [ 612.282274][T15714] ? sock_mmap+0xa0/0xa0 [ 612.286549][T15714] __fput+0x221/0x940 [ 612.290558][T15714] __se_sys_close+0x15c/0x1e0 [ 612.295254][T15714] do_syscall_64+0x55/0xb0 [ 612.299694][T15714] ? clear_bhb_loop+0x40/0x90 [ 612.304455][T15714] ? clear_bhb_loop+0x40/0x90 [ 612.309149][T15714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.315128][T15714] RIP: 0033:0x7f8784f9de59 [ 612.319618][T15714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.339298][T15714] RSP: 002b:00007f87831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 612.347732][T15714] RAX: ffffffffffffffda RBX: 00007f8785225fa0 RCX: 00007f8784f9de59 [ 612.355718][T15714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 612.363736][T15714] RBP: 00007f87831f6090 R08: 0000000000000000 R09: 0000000000000000 [ 612.371722][T15714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.379719][T15714] R13: 00007f8785226038 R14: 00007f8785225fa0 R15: 00007ffeccc8c9b8 [ 612.387732][T15714] [ 612.902381][T15729] tipc: Enabling of bearer rejected, failed to enable media [ 613.548693][ T5823] usb 4-1: USB disconnect, device number 10 [ 615.611746][T15761] loop1: detected capacity change from 0 to 2048 [ 616.240494][T15761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.492458][T14245] block nbd0: Receive control failed (result -32) [ 617.067556][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 617.302909][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 617.453379][T13070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.572944][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 617.608612][ T27] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 617.620975][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 617.651781][ T27] usb 4-1: config 0 has no interface number 0 [ 617.661925][ T27] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.708935][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 617.742913][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.751005][ T27] usb 4-1: Product: syz [ 617.799223][ T27] usb 4-1: Manufacturer: syz [ 617.812899][ T27] usb 4-1: SerialNumber: syz [ 617.839860][ T27] usb 4-1: config 0 descriptor?? [ 617.866451][ T27] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 618.518633][T15814] syzkaller0: entered promiscuous mode [ 618.535283][T15814] syzkaller0: entered allmulticast mode [ 619.169021][T15824] FAULT_INJECTION: forcing a failure. [ 619.169021][T15824] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 619.182346][T15824] CPU: 0 PID: 15824 Comm: syz.0.3107 Not tainted syzkaller #0 [ 619.189846][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.199918][T15824] Call Trace: [ 619.203210][T15824] [ 619.206155][T15824] dump_stack_lvl+0x18c/0x250 [ 619.210855][T15824] ? show_regs_print_info+0x20/0x20 [ 619.216106][T15824] ? load_image+0x420/0x420 [ 619.220649][T15824] ? __might_fault+0xaa/0x120 [ 619.225355][T15824] ? __lock_acquire+0x7d80/0x7d80 [ 619.230410][T15824] should_fail_ex+0x394/0x4c0 [ 619.235170][T15824] _copy_from_user+0x2f/0xe0 [ 619.239826][T15824] sk_setsockopt+0x2b9/0x2b20 [ 619.244561][T15824] ? sockopt_capable+0x60/0x60 [ 619.249382][T15824] ? aa_sk_perm+0x83c/0x970 [ 619.253992][T15824] ? __fget_files+0x28/0x460 [ 619.258653][T15824] ? aa_af_perm+0x330/0x330 [ 619.263195][T15824] ? __fget_files+0x28/0x460 [ 619.267831][T15824] ? aa_sock_opt_perm+0x74/0x100 [ 619.272806][T15824] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 619.278416][T15824] ? security_socket_setsockopt+0x7e/0xa0 [ 619.284190][T15824] do_sock_setsockopt+0x11b/0x1a0 [ 619.289332][T15824] __x64_sys_setsockopt+0x182/0x200 [ 619.294577][T15824] do_syscall_64+0x55/0xb0 [ 619.299031][T15824] ? clear_bhb_loop+0x40/0x90 [ 619.303736][T15824] ? clear_bhb_loop+0x40/0x90 [ 619.308464][T15824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.314428][T15824] RIP: 0033:0x7f8784f9de59 [ 619.318876][T15824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.338519][T15824] RSP: 002b:00007f87831d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.346972][T15824] RAX: ffffffffffffffda RBX: 00007f8785226090 RCX: 00007f8784f9de59 [ 619.354994][T15824] RDX: 0000000000000032 RSI: 0000000000000001 RDI: 0000000000000007 [ 619.363015][T15824] RBP: 00007f87831d5090 R08: 0000000000000004 R09: 0000000000000000 [ 619.371016][T15824] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 619.379038][T15824] R13: 00007f8785226128 R14: 00007f8785226090 R15: 00007ffeccc8c9b8 [ 619.387053][T15824] [ 620.154740][T15834] tipc: Enabled bearer , priority 0 [ 620.211372][T15834] tipc: Resetting bearer [ 621.078934][T15833] tipc: Disabling bearer [ 621.342481][T15845] syzkaller0: entered promiscuous mode [ 621.354178][T15845] syzkaller0: entered allmulticast mode [ 621.469947][ T8] usb 4-1: USB disconnect, device number 11 [ 621.756968][T15852] syzkaller0: entered promiscuous mode [ 621.773325][T15852] syzkaller0: entered allmulticast mode [ 623.852268][ T5781] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 624.054067][ T5781] usb 1-1: Using ep0 maxpacket: 8 [ 624.070827][ T5781] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 624.079352][ T5781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.099791][ T5781] usb 1-1: config 0 has no interface number 0 [ 624.115990][ T5781] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 624.152700][ T5781] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 624.162265][ T5781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.167384][T15891] loop2: detected capacity change from 0 to 32768 [ 624.184331][ T5781] usb 1-1: Product: syz [ 624.188736][ T5781] usb 1-1: Manufacturer: syz [ 624.194573][ T5781] usb 1-1: SerialNumber: syz [ 624.219787][ T5781] usb 1-1: config 0 descriptor?? [ 624.232696][ T5781] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 624.405683][T15891] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 624.512242][T15891] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 624.568176][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.578886][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.603946][T15891] XFS (loop2): Starting recovery (logdev: internal) [ 624.655246][T15891] XFS (loop2): Ending recovery (logdev: internal) [ 624.767383][T15891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 627.017469][T13227] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 627.169289][ T5781] usb 1-1: USB disconnect, device number 12 [ 628.434804][T15936] syzkaller0: entered promiscuous mode [ 628.462064][T15936] syzkaller0: entered allmulticast mode [ 629.045327][ T9458] block nbd1: Possible stuck request ffff8880220d8000: control (read@0,1024B). Runtime 510 seconds [ 629.056865][ T9458] block nbd1: Possible stuck request ffff8880220d8200: control (read@1024,3072B). Runtime 510 seconds [ 629.419968][ T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 629.613171][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 629.639204][ T23] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 629.655087][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.683802][ T23] usb 4-1: config 0 has no interface number 0 [ 629.693060][ T23] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.752002][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 629.773011][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.790650][ T23] usb 4-1: Product: syz [ 629.806379][ T23] usb 4-1: Manufacturer: syz [ 629.811021][ T23] usb 4-1: SerialNumber: syz [ 629.835503][ T23] usb 4-1: config 0 descriptor?? [ 629.845817][ T23] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 634.195166][T16020] usb usb8: usbfs: process 16020 (syz.2.3156) did not claim interface 0 before use [ 634.937527][T13183] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 635.323014][T13183] usb 1-1: Using ep0 maxpacket: 8 [ 635.333828][T13183] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 635.342233][T13183] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.425478][T13183] usb 1-1: config 0 has no interface number 0 [ 635.431671][T13183] usb 1-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.492989][T13183] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 635.503260][T13183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.511988][T13183] usb 1-1: Product: syz [ 635.515630][ T5781] usb 4-1: USB disconnect, device number 12 [ 635.517312][T13183] usb 1-1: Manufacturer: syz [ 635.527239][T13183] usb 1-1: SerialNumber: syz [ 635.534393][T13183] usb 1-1: config 0 descriptor?? [ 635.569040][T13183] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 636.792016][T16055] syzkaller0: entered promiscuous mode [ 636.855998][T16055] syzkaller0: entered allmulticast mode [ 636.887426][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 637.302327][T16069] loop2: detected capacity change from 0 to 2048 [ 637.374372][T16069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.425649][T13227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.947532][ T8] usb 1-1: USB disconnect, device number 13 [ 639.681802][T16113] syzkaller0: entered promiscuous mode [ 639.687811][T16113] syzkaller0: entered allmulticast mode [ 639.780023][T16116] loop2: detected capacity change from 0 to 2048 [ 639.848469][T16116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.736297][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 640.915624][T13227] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.964322][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 640.990335][ T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 641.016457][ T8] usb 1-1: config 0 has no interface number 0 [ 641.053185][ T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 641.074182][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.102681][ T8] usb 1-1: Product: syz [ 641.121286][ T8] usb 1-1: Manufacturer: syz [ 641.127020][ T8] usb 1-1: SerialNumber: syz [ 641.142668][ T8] usb 1-1: config 0 descriptor?? [ 641.174413][ T8] smsc95xx v2.0.0 [ 641.283367][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 641.452377][T16128] misc userio: Invalid payload size [ 641.515104][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 641.553627][ T27] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 641.582342][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.623351][ T27] usb 4-1: config 0 has no interface number 0 [ 641.640423][ T27] usb 4-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 641.679634][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 641.711327][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.730335][ T27] usb 4-1: Product: syz [ 641.749152][ T27] usb 4-1: Manufacturer: syz [ 641.783846][ T27] usb 4-1: SerialNumber: syz [ 641.801554][ T27] usb 4-1: config 0 descriptor?? [ 641.825580][ T27] iowarrior 4-1:0.186: no interrupt-in endpoint found [ 642.003169][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 642.117670][T16164] syzkaller0: entered promiscuous mode [ 642.123674][T16164] syzkaller0: entered allmulticast mode [ 642.144726][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 642.443289][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.443893][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.524607][T16169] loop1: detected capacity change from 0 to 2048 [ 642.602998][T16169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.876055][ T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 643.912405][ T8] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 643.931897][ T8] usb 1-1: USB disconnect, device number 14 [ 644.036363][T13070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.193487][T16159] usb 4-1: USB disconnect, device number 13 [ 645.289810][T16219] syzkaller0: entered promiscuous mode [ 645.306120][T16219] syzkaller0: entered allmulticast mode [ 645.976622][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 646.017824][T16229] syzkaller0: entered promiscuous mode [ 646.042887][T16229] syzkaller0: entered allmulticast mode [ 646.725531][T16254] syzkaller0: entered promiscuous mode [ 646.744771][T16254] syzkaller0: entered allmulticast mode [ 646.861722][T16258] syzkaller0: entered promiscuous mode [ 646.867471][T16258] syzkaller0: entered allmulticast mode [ 647.105662][T16266] syzkaller0: entered promiscuous mode [ 647.111224][T16266] syzkaller0: entered allmulticast mode [ 649.394088][T16243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.776786][T16284] FAULT_INJECTION: forcing a failure. [ 649.776786][T16284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.830379][T16284] CPU: 1 PID: 16284 Comm: syz.2.3222 Not tainted syzkaller #0 [ 649.837949][T16284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.848025][T16284] Call Trace: [ 649.851315][T16284] [ 649.854256][T16284] dump_stack_lvl+0x18c/0x250 [ 649.858959][T16284] ? show_regs_print_info+0x20/0x20 [ 649.864177][T16284] ? load_image+0x420/0x420 [ 649.868698][T16284] ? __might_fault+0xaa/0x120 [ 649.873386][T16284] ? __lock_acquire+0x7d80/0x7d80 [ 649.878431][T16284] should_fail_ex+0x394/0x4c0 [ 649.883146][T16284] _copy_from_user+0x2f/0xe0 [ 649.887792][T16284] ___sys_sendmsg+0x1c7/0x360 [ 649.892516][T16284] ? get_pid_task+0x20/0x1e0 [ 649.897155][T16284] ? __sys_sendmsg+0x2b0/0x2b0 [ 649.902037][T16284] ? __lock_acquire+0x7d80/0x7d80 [ 649.907093][T16284] __se_sys_sendmsg+0x1d0/0x2c0 [ 649.911965][T16284] ? __x64_sys_sendmsg+0x80/0x80 [ 649.916939][T16284] ? lockdep_hardirqs_on+0x98/0x150 [ 649.922178][T16284] do_syscall_64+0x55/0xb0 [ 649.926615][T16284] ? clear_bhb_loop+0x40/0x90 [ 649.931300][T16284] ? clear_bhb_loop+0x40/0x90 [ 649.935991][T16284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.941908][T16284] RIP: 0033:0x7f2f1b19de59 [ 649.946339][T16284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.965964][T16284] RSP: 002b:00007f2f1c0da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.974399][T16284] RAX: ffffffffffffffda RBX: 00007f2f1b426090 RCX: 00007f2f1b19de59 [ 649.982382][T16284] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 649.990365][T16284] RBP: 00007f2f1c0da090 R08: 0000000000000000 R09: 0000000000000000 [ 649.998347][T16284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.006328][T16284] R13: 00007f2f1b426128 R14: 00007f2f1b426090 R15: 00007ffdffe9b058 [ 650.014321][T16284] [ 650.203515][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'. [ 650.412067][T16289] syzkaller0: entered promiscuous mode [ 650.462023][T16289] syzkaller0: entered allmulticast mode [ 650.502902][T16291] tipc: Enabling of bearer rejected, failed to enable media [ 650.531966][T16295] syzkaller0: entered promiscuous mode [ 650.543498][T16295] syzkaller0: entered allmulticast mode [ 650.664996][T16297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3229'. [ 650.689983][T16299] syzkaller0: entered promiscuous mode [ 650.696736][T16299] syzkaller0: entered allmulticast mode [ 650.752737][T16299] tipc: Enabled bearer , priority 0 [ 651.163108][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 651.200678][T16303] tipc: Resetting bearer [ 651.245505][T16298] tipc: Resetting bearer [ 651.312617][T16298] tipc: Disabling bearer [ 651.422975][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 651.639373][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 651.671675][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.679407][T16322] syzkaller0: entered promiscuous mode [ 651.698311][T16322] syzkaller0: entered allmulticast mode [ 651.728553][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.741213][T16322] tipc: Enabling of bearer rejected, failed to enable media [ 651.762270][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 651.764170][T16324] syzkaller0: entered promiscuous mode [ 651.781063][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.794327][ T27] usb 3-1: config 0 descriptor?? [ 651.797909][T16324] syzkaller0: entered allmulticast mode [ 652.254184][ T27] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 652.497711][T16159] usb 3-1: USB disconnect, device number 12 [ 652.618213][T16351] usb usb8: usbfs: process 16351 (syz.3.3249) did not claim interface 0 before use [ 652.964447][T16359] syzkaller0: entered promiscuous mode [ 652.970098][T16359] syzkaller0: entered allmulticast mode [ 653.410149][T16373] FAULT_INJECTION: forcing a failure. [ 653.410149][T16373] name failslab, interval 1, probability 0, space 0, times 0 [ 653.425368][T16375] usb usb8: usbfs: process 16375 (syz.1.3261) did not claim interface 0 before use [ 653.433723][T16373] CPU: 0 PID: 16373 Comm: syz.3.3262 Not tainted syzkaller #0 [ 653.442217][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.452335][T16373] Call Trace: [ 653.455667][T16373] [ 653.458642][T16373] dump_stack_lvl+0x18c/0x250 [ 653.463393][T16373] ? show_regs_print_info+0x20/0x20 [ 653.468653][T16373] ? load_image+0x420/0x420 [ 653.473222][T16373] ? __might_sleep+0xe0/0xe0 [ 653.477911][T16373] ? __lock_acquire+0x7d80/0x7d80 [ 653.483029][T16373] should_fail_ex+0x394/0x4c0 [ 653.487768][T16373] should_failslab+0x9/0x20 [ 653.492334][T16373] slab_pre_alloc_hook+0x59/0x300 [ 653.497432][T16373] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 653.503221][T16373] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 653.509001][T16373] __kmem_cache_alloc_node+0x53/0x250 [ 653.514442][T16373] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 653.520219][T16373] __kmalloc+0xa7/0x240 [ 653.524439][T16373] tomoyo_realpath_from_path+0xe6/0x5c0 [ 653.530058][T16373] ? tomoyo_domain+0xd6/0x120 [ 653.534803][T16373] tomoyo_path_number_perm+0x248/0x5e0 [ 653.540321][T16373] ? tomoyo_path_number_perm+0x217/0x5e0 [ 653.546044][T16373] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 653.551563][T16373] ? ksys_write+0x1d2/0x260 [ 653.556159][T16373] ? __fget_files+0x28/0x460 [ 653.560833][T16373] security_file_ioctl+0x70/0xa0 [ 653.565828][T16373] __se_sys_ioctl+0x48/0x170 [ 653.570480][T16373] do_syscall_64+0x55/0xb0 [ 653.574957][T16373] ? clear_bhb_loop+0x40/0x90 [ 653.579685][T16373] ? clear_bhb_loop+0x40/0x90 [ 653.584416][T16373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.590364][T16373] RIP: 0033:0x7f8b7139de59 [ 653.594836][T16373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.614508][T16373] RSP: 002b:00007f8b72200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.622998][T16373] RAX: ffffffffffffffda RBX: 00007f8b71625fa0 RCX: 00007f8b7139de59 [ 653.631028][T16373] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000005 [ 653.639056][T16373] RBP: 00007f8b72200090 R08: 0000000000000000 R09: 0000000000000000 [ 653.647080][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.655111][T16373] R13: 00007f8b71626038 R14: 00007f8b71625fa0 R15: 00007ffd660b7148 [ 653.663152][T16373] [ 653.708765][T16373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 654.162148][T16366] loop0: detected capacity change from 0 to 32768 [ 654.182578][T16366] xfs: Unknown parameter 'nobarrier' [ 654.286773][T16366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.294909][T16394] kvm: emulating exchange as write [ 654.303995][T16366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.413825][T16390] syzkaller0: entered promiscuous mode [ 654.419472][T16390] syzkaller0: entered allmulticast mode [ 654.455815][T16397] loop2: detected capacity change from 0 to 256 [ 654.534172][ T27] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 654.556235][T16397] FAT-fs (loop2): Directory bread(block 64) failed [ 654.569086][T16397] FAT-fs (loop2): Directory bread(block 65) failed [ 654.578789][T16397] FAT-fs (loop2): Directory bread(block 66) failed [ 654.601451][T16397] FAT-fs (loop2): Directory bread(block 67) failed [ 654.621642][T16397] FAT-fs (loop2): Directory bread(block 68) failed [ 654.631341][T16397] FAT-fs (loop2): Directory bread(block 69) failed [ 654.642084][T16397] FAT-fs (loop2): Directory bread(block 70) failed [ 654.651412][T16397] FAT-fs (loop2): Directory bread(block 71) failed [ 654.669507][T16397] FAT-fs (loop2): Directory bread(block 72) failed [ 654.677881][T16397] FAT-fs (loop2): Directory bread(block 73) failed [ 654.724972][ T27] usb 1-1: config 128 interface 0 has no altsetting 0 [ 654.733040][ T27] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 654.760068][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 654.760160][ T28] audit: type=1800 audit(1783286078.758:41): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3269" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 654.789562][T16397] syz.2.3269: attempt to access beyond end of device [ 654.789562][T16397] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 654.803652][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.860394][T16397] syz.2.3269: attempt to access beyond end of device [ 654.860394][T16397] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 654.874387][ T28] audit: type=1800 audit(1783286078.768:42): pid=16397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3269" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 654.944293][T16396] syz.2.3269: attempt to access beyond end of device [ 654.944293][T16396] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 654.978182][T16397] syz.2.3269: attempt to access beyond end of device [ 654.978182][T16397] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.009009][T16396] syz.2.3269: attempt to access beyond end of device [ 655.009009][T16396] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.037189][T16397] syz.2.3269: attempt to access beyond end of device [ 655.037189][T16397] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.056763][T16396] syz.2.3269: attempt to access beyond end of device [ 655.056763][T16396] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.074141][T16397] syz.2.3269: attempt to access beyond end of device [ 655.074141][T16397] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.095717][T16396] syz.2.3269: attempt to access beyond end of device [ 655.095717][T16396] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.109812][T16397] syz.2.3269: attempt to access beyond end of device [ 655.109812][T16397] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 655.883201][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 655.935883][ T29] INFO: task udevd:5793 blocked for more than 143 seconds. [ 655.951533][ T29] Not tainted syzkaller #0 [ 655.956846][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 655.966344][ T29] task:udevd state:D stack:23656 pid:5793 ppid:5140 flags:0x00004006 [ 655.976145][ T29] Call Trace: [ 655.979634][ T29] [ 655.982666][ T29] __schedule+0x15ae/0x4660 [ 655.988301][ T29] ? _raw_spin_unlock+0x40/0x40 [ 655.988349][ T29] ? asan.module_dtor+0x20/0x20 [ 655.988378][ T29] ? mark_lock+0x94/0x320 [ 655.988441][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 655.988469][ T29] ? lock_chain_count+0x20/0x20 [ 655.988494][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 655.988523][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 655.988586][ T29] schedule+0xbd/0x170 [ 655.988612][ T29] io_schedule+0x80/0xd0 [ 655.988638][ T29] folio_wait_bit_common+0x881/0xfa0 [ 655.988680][ T29] ? folio_wait_bit+0x30/0x30 [ 655.988735][ T29] ? _compound_head+0x120/0x120 [ 655.988762][ T29] ? filemap_add_folio+0x190/0x3d0 [ 655.988789][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 655.988814][ T29] ? blkdev_writepage+0x30/0x30 [ 655.988899][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 655.988937][ T29] ? blkdev_writepage+0x30/0x30 [ 655.988963][ T29] read_part_sector+0xd2/0x350 [ 655.988995][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 655.989050][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 655.989082][ T29] ? put_partition+0x360/0x360 [ 655.989221][ T29] ? alloc_pages+0x4e1/0x740 [ 655.989248][ T29] bdev_disk_changed+0x755/0x1450 [ 655.989289][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 655.989344][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 655.989378][ T29] ? iput+0x33f/0x900 [ 655.989400][ T29] blkdev_get_whole+0x30d/0x390 [ 655.989430][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 655.989488][ T29] blkdev_open+0x14e/0x360 [ 655.989510][ T29] do_dentry_open+0x880/0x14b0 [ 655.989536][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 655.989558][ T29] path_openat+0x284f/0x3270 [ 655.989738][ T29] ? do_sys_openat2+0xda/0x1d0 [ 655.989786][ T29] ? __x64_sys_openat+0x139/0x160 [ 655.989812][ T29] ? verify_lock_unused+0x140/0x140 [ 655.989833][ T29] ? do_filp_open+0x430/0x430 [ 655.989866][ T29] do_filp_open+0x1f2/0x430 [ 655.989889][ T29] ? vfs_tmpfile+0x480/0x480 [ 655.989948][ T29] ? _raw_spin_unlock+0x28/0x40 [ 655.989971][ T29] ? alloc_fd+0x590/0x640 [ 655.990000][ T29] do_sys_openat2+0x134/0x1d0 [ 655.990025][ T29] ? do_sys_open+0xe0/0xe0 [ 655.990073][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.990098][ T29] ? lock_chain_count+0x20/0x20 [ 655.990123][ T29] __x64_sys_openat+0x139/0x160 [ 655.990151][ T29] do_syscall_64+0x55/0xb0 [ 655.990206][ T29] ? clear_bhb_loop+0x40/0x90 [ 655.990224][ T29] ? clear_bhb_loop+0x40/0x90 [ 655.990243][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.990979][ T29] RIP: 0033:0x7f5ca50a7407 [ 655.991003][ T29] RSP: 002b:00007fff280ed240 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 656.072980][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 656.092440][ T29] RAX: ffffffffffffffda RBX: 00007f5ca57a8880 RCX: 00007f5ca50a7407 [ 656.092467][ T29] RDX: 00000000000a0800 RSI: 0000563550da8570 RDI: ffffffffffffff9c [ 656.092485][ T29] RBP: 0000563550da7910 R08: 0000000000000000 R09: 0000000000000000 [ 656.092500][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563550df21f0 [ 656.092517][ T29] R13: 0000563550dbf410 R14: 0000000000000000 R15: 0000563550df21f0 [ 656.092580][ T29] [ 656.092649][ T29] [ 656.092649][ T29] Showing all locks held in the system: [ 656.144768][ T8] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 656.316187][ T29] 3 locks held by kworker/0:0/8: [ 656.321206][ T29] 7 locks held by kworker/1:1/27: [ 656.326406][ T29] #0: ffff88801a6e5538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.338116][ T29] #1: ffffc90000a2fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.361149][ T29] #2: ffff888142bba1d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80 [ 656.370648][ T29] #3: ffff88805c17b1d8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 656.380156][ T29] #4: ffff88802502d1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420 [ 656.389718][ T29] #5: ffff888079d078f8 (&dev->mutex#3){+.+.}-{3:3}, at: comedi_alloc_board_minor+0x125/0x500 [ 656.401549][ T29] #6: ffff888142b1e068 (hcd->bandwidth_mutex){+.+.}-{3:3}, at: usb_set_interface+0x351/0x13f0 [ 656.412923][ T29] 1 lock held by khungtaskd/29: [ 656.417843][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 656.428043][ T29] 2 locks held by kworker/u4:2/35: [ 656.433475][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 656.443661][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 656.452469][ T29] 3 locks held by kworker/u4:3/49: [ 656.458895][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 656.469063][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.469091][ T8] usb 3-1: config 0 has no interface number 0 [ 656.474520][ T8] usb 3-1: config 0 interface 186 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 656.484002][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 656.510360][ T29] #2: ffff888067548768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 656.521030][ T29] 3 locks held by kworker/u4:4/59: [ 656.526266][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.538531][ T29] #1: ffffc900015a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.546052][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 656.555226][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 656.570061][ T29] 2 locks held by getty/5532: [ 656.570404][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.575069][ T29] #0: ffff88814c7770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.593608][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 656.605412][ T8] usb 3-1: Product: syz [ 656.607542][ T29] 2 locks held by kworker/0:3/5781: [ 656.609840][ T8] usb 3-1: Manufacturer: syz [ 656.620195][ T8] usb 3-1: SerialNumber: syz [ 656.628107][ T8] usb 3-1: config 0 descriptor?? [ 656.629252][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.649654][ T8] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 656.658779][ T29] #1: ffffc9000467fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 656.681029][ T29] 1 lock held by udevd/5793: [ 656.686067][ T29] #0: ffff888021f9b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 656.704206][ T29] 1 lock held by syz.0.3258/16366: [ 656.709395][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 656.722460][ T29] 1 lock held by syz.0.3258/16393: [ 656.728824][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 656.741861][ T29] 1 lock held by syz.0.3258/16404: [ 656.748113][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 656.761229][ T29] 2 locks held by syz.1.3267/16389: [ 656.766627][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 656.780936][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 656.797779][ T29] 1 lock held by syz.3.3270/16400: [ 656.805141][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f7/0x2070 [ 656.815002][ T29] 1 lock held by syz.3.3270/16401: [ 656.820195][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 656.829370][ T29] 1 lock held by syz.3.3270/16405: [ 656.834741][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 656.844277][ T29] 1 lock held by syz.3.3270/16408: [ 656.849463][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 656.858770][ T29] 1 lock held by syz.3.3270/16413: [ 656.868402][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 656.878406][ T29] 2 locks held by syz.2.3271/16416: [ 656.885922][ T29] [ 656.888350][ T29] ============================================= [ 656.888350][ T29] [ 656.912254][ T29] NMI backtrace for cpu 1 [ 656.916687][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 656.923941][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 656.934059][ T29] Call Trace: [ 656.937388][ T29] [ 656.940364][ T29] dump_stack_lvl+0x18c/0x250 [ 656.945116][ T29] ? __wake_up_klogd+0xd9/0x100 [ 656.950040][ T29] ? show_regs_print_info+0x20/0x20 [ 656.955318][ T29] ? load_image+0x420/0x420 [ 656.959899][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 656.964907][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 656.971105][ T29] ? load_image+0x420/0x420 [ 656.975641][ T29] ? wq_watchdog_touch+0xef/0x170 [ 656.980704][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 656.986868][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 656.992883][ T29] watchdog+0xf59/0xfa0 [ 656.997096][ T29] ? watchdog+0x1e1/0xfa0 [ 657.001463][ T29] kthread+0x2fa/0x390 [ 657.005565][ T29] ? hungtask_pm_notify+0x50/0x50 [ 657.010625][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.015261][ T29] ret_from_fork+0x48/0x80 [ 657.019716][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.024342][ T29] ret_from_fork_asm+0x11/0x20 [ 657.029182][ T29] [ 657.033295][ T29] Sending NMI from CPU 1 to CPUs 0: [ 657.038574][ C0] NMI backtrace for cpu 0 [ 657.038586][ C0] CPU: 0 PID: 35 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 657.038603][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 657.038614][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 657.038637][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x6d/0xe0 [ 657.038662][ C0] Code: 4c 09 01 48 8b 54 24 20 65 4c 8b 05 bd cd 7c 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d ab cd 7c 7e <41> 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 1c [ 657.038677][ C0] RSP: 0018:ffffc90000abf4f0 EFLAGS: 00000202 [ 657.038691][ C0] RAX: 0000000000000003 RBX: ffffffff8f8c3533 RCX: 0000000000000003 [ 657.038702][ C0] RDX: ffffffff813b3212 RSI: ffffffff8cfa0610 RDI: 0000000000000002 [ 657.038714][ C0] RBP: ffffc90000abfb00 R08: ffff888018e91e00 R09: 0000000000000001 [ 657.038725][ C0] R10: 0000000000000003 R11: 0000000080000002 R12: ffffffff8f8c3532 [ 657.038736][ C0] R13: ffffc90000abf5e8 R14: 0000000000000002 R15: dffffc0000000000 [ 657.038748][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 657.038763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.038774][ C0] CR2: 000000110c39b567 CR3: 000000005f0de000 CR4: 00000000003506f0 [ 657.038789][ C0] Call Trace: [ 657.038795][ C0] [ 657.038804][ C0] unwind_next_frame+0xe42/0x2990 [ 657.038827][ C0] ? consume_skb+0xb2/0x110 [ 657.038853][ C0] ? consume_skb+0xb2/0x110 [ 657.038876][ C0] ? stack_trace_save+0x100/0x100 [ 657.038897][ C0] arch_stack_walk+0x144/0x190 [ 657.038917][ C0] ? consume_skb+0xb2/0x110 [ 657.038945][ C0] stack_trace_save+0xaa/0x100 [ 657.038964][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 657.038983][ C0] ? __asan_memset+0x22/0x40 [ 657.039006][ C0] ? chacha_block_generic+0x5ea/0xda0 [ 657.039031][ C0] kasan_set_track+0x4e/0x70 [ 657.039049][ C0] ? kasan_set_track+0x4e/0x70 [ 657.039065][ C0] ? kasan_save_free_info+0x28/0x40 [ 657.039086][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 657.039105][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 657.039121][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 657.039143][ C0] ? skb_release_data+0x609/0x7f0 [ 657.039167][ C0] ? consume_skb+0xb2/0x110 [ 657.039214][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 657.039237][ C0] kasan_save_free_info+0x28/0x40 [ 657.039258][ C0] ____kasan_slab_free+0x126/0x1f0 [ 657.039279][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 657.039297][ C0] ? skb_release_data+0x609/0x7f0 [ 657.039321][ C0] __kmem_cache_free+0xba/0x1f0 [ 657.039348][ C0] skb_release_data+0x609/0x7f0 [ 657.039377][ C0] consume_skb+0xb2/0x110 [ 657.039402][ C0] nsim_dev_trap_report_work+0x723/0xa90 [ 657.039424][ C0] ? process_scheduled_works+0x975/0x1600 [ 657.039456][ C0] process_scheduled_works+0xa60/0x1600 [ 657.039491][ C0] ? worker_attach_to_pool+0x370/0x370 [ 657.039515][ C0] ? assign_work+0x3cc/0x5d0 [ 657.039538][ C0] worker_thread+0xa5e/0xfe0 [ 657.039572][ C0] kthread+0x2fa/0x390 [ 657.039587][ C0] ? pr_cont_work+0x550/0x550 [ 657.039607][ C0] ? kthread_blkcg+0xd0/0xd0 [ 657.039622][ C0] ret_from_fork+0x48/0x80 [ 657.039642][ C0] ? kthread_blkcg+0xd0/0xd0 [ 657.039658][ C0] ret_from_fork_asm+0x11/0x20 [ 657.039688][ C0] [ 657.409680][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 657.416630][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 657.423885][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 657.433995][ T29] Call Trace: [ 657.437330][ T29] [ 657.440302][ T29] dump_stack_lvl+0x18c/0x250 [ 657.445048][ T29] ? show_regs_print_info+0x20/0x20 [ 657.450309][ T29] ? load_image+0x420/0x420 [ 657.454879][ T29] panic+0x2ca/0x720 [ 657.458833][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 657.463389][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 657.468990][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 657.474463][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 657.480655][ T29] watchdog+0xf98/0xfa0 [ 657.484858][ T29] ? watchdog+0x1e1/0xfa0 [ 657.489222][ T29] kthread+0x2fa/0x390 [ 657.493333][ T29] ? hungtask_pm_notify+0x50/0x50 [ 657.498427][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.503084][ T29] ret_from_fork+0x48/0x80 [ 657.507530][ T29] ? kthread_blkcg+0xd0/0xd0 [ 657.512163][ T29] ret_from_fork_asm+0x11/0x20 [ 657.516997][ T29] [ 657.520630][ T29] Kernel Offset: disabled [ 657.524982][ T29] Rebooting in 86400 seconds..