last executing test programs: 8.804941833s ago: executing program 1 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.345182105s ago: executing program 2 (id=433): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "4f72115cada863921f0fe89526cb6a7902ba60f6566792595122eb7da509a358", "4e70055b335a1a6ed5f3c26eaa7cce77", {"c84e6475538b815c38d1926634c44870", "6841e82237f9bcd92c0edffaf372bb75"}}}}}}}, 0x0) 7.173986052s ago: executing program 2 (id=436): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="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", 0x3c1}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 6.96818222s ago: executing program 2 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.261067164s ago: executing program 2 (id=442): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 4.791594408s ago: executing program 2 (id=445): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x48010) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x9, {0x9, 0x7, "ca23dc66d6f1a1"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$kcm(0x11, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0xb7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 3.633212439s ago: executing program 1 (id=450): socket$inet_udp(0x2, 0x2, 0x0) socket(0x27, 0x2, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x400461f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.384689203s ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x3d, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 2.943730151s ago: executing program 1 (id=455): socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 2.725180452s ago: executing program 4 (id=458): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)="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", 0x3c1}], 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 2.724700485s ago: executing program 3 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 2.294925648s ago: executing program 3 (id=462): socket$inet_udp(0x2, 0x2, 0x0) socket(0x27, 0x2, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x400461f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.23428496s ago: executing program 4 (id=463): io_submit(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 2.065190352s ago: executing program 4 (id=464): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.748316298s ago: executing program 3 (id=466): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) statfs(0x0, 0x0) 1.693057136s ago: executing program 0 (id=467): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1.65475747s ago: executing program 2 (id=468): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x300}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.576708289s ago: executing program 4 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 1.329068471s ago: executing program 3 (id=470): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) accept(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x200, 0x0, 0x4}}}}}}}, 0x0) 1.275524159s ago: executing program 0 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.215849066s ago: executing program 4 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 969.047296ms ago: executing program 0 (id=473): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000d00)="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", 0x3c1}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 730.964295ms ago: executing program 0 (id=474): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf25040101800c0018000aac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 401.966168ms ago: executing program 1 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) 301.228121ms ago: executing program 0 (id=476): socket$inet_udp(0x2, 0x2, 0x0) socket(0x27, 0x2, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x400461f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 287.266317ms ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 128.545906ms ago: executing program 1 (id=478): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x48010) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x9, {0x9, 0x7, "ca23dc66d6f1a1"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) socket$kcm(0x11, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0xb7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 76.119725ms ago: executing program 3 (id=479): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) 75.020145ms ago: executing program 0 (id=480): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r1, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 0s ago: executing program 4 (id=481): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x82000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x2c4c, &(0x7f0000000580)={0x0, 0x3074, 0x0, 0x1, 0x1d0}, 0x0, 0x0) pipe(&(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x4}, 0x50) open(&(0x7f00000000c0)='.\x00', 0x2800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 81.894585][ T5825] cgroup: Unknown subsys name 'net' [ 82.005484][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.015370][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.749866][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.584611][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.593964][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.621806][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.629007][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.630784][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.637918][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.647635][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.652142][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.681254][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.689912][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.699008][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.709910][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.718050][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.723838][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.733682][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.741929][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.742451][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.750882][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.758525][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.777126][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.784986][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.822095][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.830325][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.840823][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.859796][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.720915][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 87.851084][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.894935][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 87.908646][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.010625][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.176464][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.184890][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.192639][ T5835] bridge_slave_0: entered allmulticast mode [ 88.199896][ T5835] bridge_slave_0: entered promiscuous mode [ 88.259979][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.269536][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.276892][ T5845] bridge_slave_0: entered allmulticast mode [ 88.286408][ T5845] bridge_slave_0: entered promiscuous mode [ 88.294039][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.303333][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.310641][ T5835] bridge_slave_1: entered allmulticast mode [ 88.318161][ T5835] bridge_slave_1: entered promiscuous mode [ 88.379104][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.387379][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.395111][ T5845] bridge_slave_1: entered allmulticast mode [ 88.403159][ T5845] bridge_slave_1: entered promiscuous mode [ 88.427646][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.434984][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.442443][ T5837] bridge_slave_0: entered allmulticast mode [ 88.449552][ T5837] bridge_slave_0: entered promiscuous mode [ 88.457761][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.464972][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.472490][ T5848] bridge_slave_0: entered allmulticast mode [ 88.479899][ T5848] bridge_slave_0: entered promiscuous mode [ 88.505619][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.519628][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.534927][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.542785][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.550066][ T5837] bridge_slave_1: entered allmulticast mode [ 88.558441][ T5837] bridge_slave_1: entered promiscuous mode [ 88.565629][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.573215][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.580396][ T5848] bridge_slave_1: entered allmulticast mode [ 88.587799][ T5848] bridge_slave_1: entered promiscuous mode [ 88.692264][ T5155] Bluetooth: hci0: command tx timeout [ 88.696531][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.710376][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.750387][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.765259][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.778864][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.792045][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.828513][ T5835] team0: Port device team_slave_0 added [ 88.839957][ T5835] team0: Port device team_slave_1 added [ 88.846936][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.854404][ T5155] Bluetooth: hci1: command tx timeout [ 88.856689][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.867885][ T5846] bridge_slave_0: entered allmulticast mode [ 88.876488][ T5846] bridge_slave_0: entered promiscuous mode [ 88.927665][ T5845] team0: Port device team_slave_0 added [ 88.931909][ T5843] Bluetooth: hci4: command tx timeout [ 88.939818][ T5854] Bluetooth: hci3: command tx timeout [ 88.939827][ T5842] Bluetooth: hci2: command tx timeout [ 88.943783][ T5845] team0: Port device team_slave_1 added [ 88.972301][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.979611][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.989839][ T5846] bridge_slave_1: entered allmulticast mode [ 88.997413][ T5846] bridge_slave_1: entered promiscuous mode [ 89.036902][ T5848] team0: Port device team_slave_0 added [ 89.089699][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.103906][ T5837] team0: Port device team_slave_0 added [ 89.112994][ T5848] team0: Port device team_slave_1 added [ 89.134474][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.142167][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.168580][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.184615][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.211232][ T5837] team0: Port device team_slave_1 added [ 89.231019][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.240924][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.267905][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.279888][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.289920][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.317271][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.372054][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.379830][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.410995][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.438385][ T5846] team0: Port device team_slave_0 added [ 89.448820][ T5846] team0: Port device team_slave_1 added [ 89.471845][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.479484][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.506586][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.572700][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.579699][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.607841][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.624577][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.632100][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.660579][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.674400][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.681428][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.709043][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.765657][ T5845] hsr_slave_0: entered promiscuous mode [ 89.773544][ T5845] hsr_slave_1: entered promiscuous mode [ 89.818232][ T5835] hsr_slave_0: entered promiscuous mode [ 89.824755][ T5835] hsr_slave_1: entered promiscuous mode [ 89.832253][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.840186][ T5835] Cannot create hsr debugfs directory [ 89.884915][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892622][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.918911][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.970113][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.001894][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.032195][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.131969][ T5848] hsr_slave_0: entered promiscuous mode [ 90.138598][ T5848] hsr_slave_1: entered promiscuous mode [ 90.146750][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.154540][ T5848] Cannot create hsr debugfs directory [ 90.199503][ T5837] hsr_slave_0: entered promiscuous mode [ 90.206045][ T5837] hsr_slave_1: entered promiscuous mode [ 90.213591][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.222021][ T5837] Cannot create hsr debugfs directory [ 90.316276][ T5846] hsr_slave_0: entered promiscuous mode [ 90.324424][ T5846] hsr_slave_1: entered promiscuous mode [ 90.330699][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.338886][ T5846] Cannot create hsr debugfs directory [ 90.772069][ T5155] Bluetooth: hci0: command tx timeout [ 90.795885][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.842616][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.885510][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.902406][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.931783][ T5155] Bluetooth: hci1: command tx timeout [ 90.978066][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.012278][ T5155] Bluetooth: hci2: command tx timeout [ 91.021955][ T5854] Bluetooth: hci4: command tx timeout [ 91.027609][ T5155] Bluetooth: hci3: command tx timeout [ 91.037968][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.054939][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.084384][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.180920][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.205805][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.228327][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.243484][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.347817][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.360209][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.403187][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.418480][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.430444][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.523232][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.538014][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.550578][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.571406][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.592441][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.646629][ T4521] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.654006][ T4521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.705202][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.730095][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.737614][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.849147][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.904745][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.912220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.943370][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.950842][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.994297][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.016016][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.143598][ T977] cfg80211: failed to load regulatory.db [ 92.154428][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.199032][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.226640][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.245394][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.318850][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.326408][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.356187][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.364006][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.379352][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.387000][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.404607][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.467340][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.474950][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.520922][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.529109][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.568662][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.588803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.596945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.838009][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.858095][ T5155] Bluetooth: hci0: command tx timeout [ 92.993911][ T5835] veth0_vlan: entered promiscuous mode [ 93.012966][ T5155] Bluetooth: hci1: command tx timeout [ 93.094022][ T5155] Bluetooth: hci3: command tx timeout [ 93.099523][ T5155] Bluetooth: hci4: command tx timeout [ 93.105311][ T5854] Bluetooth: hci2: command tx timeout [ 93.138930][ T5835] veth1_vlan: entered promiscuous mode [ 93.257026][ T5837] veth0_vlan: entered promiscuous mode [ 93.365667][ T5837] veth1_vlan: entered promiscuous mode [ 93.379914][ T5835] veth0_macvtap: entered promiscuous mode [ 93.408829][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.429776][ T5835] veth1_macvtap: entered promiscuous mode [ 93.475239][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.562902][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.599221][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.620230][ T5848] veth0_vlan: entered promiscuous mode [ 93.633761][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.677818][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.688644][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698238][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.707398][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724462][ T5848] veth1_vlan: entered promiscuous mode [ 93.776321][ T5837] veth0_macvtap: entered promiscuous mode [ 93.886337][ T5837] veth1_macvtap: entered promiscuous mode [ 94.014338][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.056740][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.064746][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.075698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.107936][ T5846] veth0_vlan: entered promiscuous mode [ 94.117988][ T5848] veth0_macvtap: entered promiscuous mode [ 94.130975][ T5848] veth1_macvtap: entered promiscuous mode [ 94.169252][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179824][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188951][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199962][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.247837][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.263224][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.307762][ T5846] veth1_vlan: entered promiscuous mode [ 94.332860][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.387025][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.409131][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.435755][ T5845] veth0_vlan: entered promiscuous mode [ 94.450203][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.460668][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.473179][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.482279][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.595591][ T5845] veth1_vlan: entered promiscuous mode [ 94.631936][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.647695][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.681759][ T5846] veth0_macvtap: entered promiscuous mode [ 94.939613][ T5155] Bluetooth: hci0: command tx timeout [ 94.963169][ T5846] veth1_macvtap: entered promiscuous mode [ 95.070538][ T5959] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 95.099518][ T5155] Bluetooth: hci1: command tx timeout [ 95.221587][ T5155] Bluetooth: hci4: command tx timeout [ 95.222316][ T5843] Bluetooth: hci2: command tx timeout [ 95.228244][ T5155] Bluetooth: hci3: command tx timeout [ 95.421377][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.453391][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.565315][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.578656][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.604083][ T5845] veth0_macvtap: entered promiscuous mode [ 95.665343][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.734945][ T5845] veth1_macvtap: entered promiscuous mode [ 95.786090][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.874676][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.901724][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.922168][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.936787][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.988761][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.989975][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.024362][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.115082][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.170061][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.216392][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.251273][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265186][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.347347][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.399968][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.605840][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.628583][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.746838][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.779975][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.831966][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.003787][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 97.047027][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.060273][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.090290][ T5895] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 97.108558][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.126933][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.168961][ T5979] syz_tun: entered allmulticast mode [ 97.189091][ T5895] usb 4-1: Product: syz [ 97.204262][ T5978] syz_tun: left allmulticast mode [ 97.211707][ T5895] usb 4-1: Manufacturer: syz [ 97.229449][ T5895] usb 4-1: SerialNumber: syz [ 97.287079][ T5895] usb 4-1: config 0 descriptor?? [ 97.371810][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.558218][ T43] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 97.605519][ T43] usb 3-1: config 0 has no interface number 0 [ 97.627898][ T5988] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.649532][ T43] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 97.690790][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.708388][ T43] usb 3-1: Product: syz [ 97.715321][ T43] usb 3-1: Manufacturer: syz [ 97.720264][ T43] usb 3-1: SerialNumber: syz [ 97.735745][ T5895] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 97.740376][ T43] usb 3-1: config 0 descriptor?? [ 97.771660][ T5902] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.941803][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 97.993105][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.035212][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.076075][ T5902] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 98.094725][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.117111][ T5902] usb 2-1: config 0 descriptor?? [ 98.171990][ T5995] tipc: Started in network mode [ 98.178151][ T5995] tipc: Node identity 4, cluster identity 4711 [ 98.207425][ T43] usb 3-1: Firmware: major: 154, minor: 51, hardware type: ATUSB (1) [ 98.289156][ T5995] tipc: Node number set to 4 [ 98.425069][ T43] usb 3-1: failed to fetch extended address, random address set [ 98.551285][ T43] usb 3-1: USB disconnect, device number 2 [ 98.615607][ T5929] usb 4-1: USB disconnect, device number 2 [ 98.642636][ T5902] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 98.770565][ T5902] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 18: -32 [ 98.863261][ T5902] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -32 [ 98.945157][ T5902] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 98.992874][ T5902] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 99.034181][ T5902] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -32 [ 99.100244][ T5902] usb 2-1: USB disconnect, device number 2 [ 99.366808][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 99.585313][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.789261][ T6027] mmap: syz.3.19 (6027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.803883][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 99.834897][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.851977][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.881674][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.884975][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.919307][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.962198][ T10] usb 3-1: Product: syz [ 99.968160][ T10] usb 3-1: Manufacturer: syz [ 99.993649][ T10] usb 3-1: SerialNumber: syz [ 100.079485][ T5929] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 100.109211][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.142472][ T5929] usb 2-1: Product: syz [ 100.162635][ T5929] usb 2-1: Manufacturer: syz [ 100.167490][ T5929] usb 2-1: SerialNumber: syz [ 100.218727][ T5929] usb 2-1: config 0 descriptor?? [ 100.250964][ T5929] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 100.261041][ T10] usb 3-1: 0:2 : does not exist [ 100.290249][ T5895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.322835][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 100.419344][ T10] usb 3-1: USB disconnect, device number 3 [ 100.475932][ T5895] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.522965][ T5895] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.563251][ T5895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.593585][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.611276][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.645439][ T6035] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 100.684891][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.720461][ T6048] trusted_key: encrypted_key: insufficient parameters specified [ 101.022415][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.084783][ T5895] usb 1-1: USB disconnect, device number 2 [ 101.208698][ T5902] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 101.233143][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.268533][ T5902] usb 5-1: Product: syz [ 101.290511][ T5902] usb 5-1: Manufacturer: syz [ 101.312838][ T5902] usb 5-1: SerialNumber: syz [ 101.339553][ T5902] usb 5-1: config 0 descriptor?? [ 101.367330][ T5902] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 101.391608][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.554564][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 101.583894][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.597275][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 101.621224][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 101.642911][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 101.660725][ T5929] gspca_sunplus: reg_r err -32 [ 101.683009][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 101.692697][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.700942][ T10] usb 3-1: SerialNumber: syz [ 101.712505][ T5929] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 101.741728][ T6052] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 101.764585][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 101.770572][ T5929] usb 2-1: USB disconnect, device number 3 [ 101.781579][ T5895] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.823597][ T10] usb-storage 3-1:1.0: USB Mass Storage device detected [ 101.873251][ T10] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 101.895127][ T10] scsi host1: usb-storage 3-1:1.0 [ 101.968596][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 102.008633][ T5895] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 102.050777][ T5895] usb 4-1: config 252 has no interface number 0 [ 102.070904][ T5895] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.102162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 102.314085][ T5895] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 102.329575][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.338375][ T5895] usb 4-1: Product: syz [ 102.348618][ T5895] usb 4-1: Manufacturer: syz [ 102.353730][ T5895] usb 4-1: SerialNumber: syz [ 102.419069][ T5895] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 102.481787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 102.501486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.511523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.587250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.104716][ T5902] gspca_sunplus: reg_r err -71 [ 103.119970][ T5902] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 103.145179][ T5902] usb 5-1: USB disconnect, device number 2 [ 103.228113][ T6069] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 103.454701][ T6086] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 103.494107][ T4521] usb 4-1: Failed to submit usb control message: -110 [ 103.517481][ T6086] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.519485][ T4521] usb 4-1: unable to send the bmi data to the device: -110 [ 103.832947][ T4521] usb 4-1: unable to get target info from device [ 103.839465][ T4521] usb 4-1: could not get target info (-110) [ 104.242270][ T4521] usb 4-1: could not probe fw (-110) [ 104.274511][ T5982] usb 3-1: USB disconnect, device number 4 [ 104.357454][ T5929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.533013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.542075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 104.571792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.744433][ T30] audit: type=1326 audit(1755125900.797:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 104.912018][ T5929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.920720][ T5929] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.005855][ T30] audit: type=1326 audit(1755125900.797:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6099 comm="syz.2.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 105.048110][ T5929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.057806][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 105.071386][ T5929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 105.094518][ T5929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.104984][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.119737][ T5929] usb 5-1: Product: syz [ 105.124917][ T5929] usb 5-1: Manufacturer: syz [ 105.145432][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 105.152903][ T5929] cdc_wdm 5-1:1.0: skipping garbage [ 105.180488][ T5929] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 105.187410][ T5929] cdc_wdm 5-1:1.0: Unknown control protocol [ 105.406688][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.700604][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 105.702319][ T977] usb 5-1: USB disconnect, device number 3 [ 105.707390][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 105.719235][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 105.725506][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 105.734806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 105.862723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.994228][ T6122] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.171787][ T977] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.209471][ T6124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.44'. [ 107.371566][ T977] usb 1-1: device descriptor read/64, error -71 [ 108.061675][ T977] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.231620][ T977] usb 1-1: device descriptor read/64, error -71 [ 108.367106][ T977] usb usb1-port1: attempt power cycle [ 108.831565][ T977] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 108.946938][ T977] usb 1-1: device descriptor read/8, error -71 [ 109.221687][ T977] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.255723][ T977] usb 1-1: device descriptor read/8, error -71 [ 109.397730][ T977] usb usb1-port1: unable to enumerate USB device [ 111.322111][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.353182][ T6162] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.891868][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.191265][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 112.293862][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.459361][ T5895] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 112.570805][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.687660][ T5895] usb 1-1: Product: syz [ 112.752840][ T5895] usb 1-1: Manufacturer: syz [ 112.812873][ T5895] usb 1-1: SerialNumber: syz [ 112.902756][ T6178] tipc: Started in network mode [ 112.907903][ T6178] tipc: Node identity ea7738b71a28, cluster identity 4711 [ 112.915541][ T5895] usb 1-1: config 0 descriptor?? [ 112.916871][ T6178] tipc: Enabled bearer , priority 0 [ 112.949306][ T6177] syzkaller0: entered promiscuous mode [ 112.988056][ T6177] syzkaller0: entered allmulticast mode [ 113.194755][ T6177] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 113.275244][ T6175] tipc: Resetting bearer [ 113.281571][ T977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 113.334031][ T6175] tipc: Disabling bearer [ 113.371226][ T5895] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 113.378921][ T5895] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 113.478031][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.495668][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.523152][ T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.682192][ T6190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.704642][ T6165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.714970][ T6165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.766710][ T977] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.810978][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.858332][ T977] usb 3-1: config 0 descriptor?? [ 114.108856][ T6165] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.290985][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.312230][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.320547][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.334264][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.343379][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.351354][ T977] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 114.491630][ T977] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 114.558728][ T5895] usb 1-1: USB disconnect, device number 7 [ 114.607624][ T977] usb 3-1: USB disconnect, device number 5 [ 114.763556][ T6204] fido_id[6204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 115.795963][ T6218] openvswitch: netlink: IP tunnel TTL not specified. [ 115.819975][ T6218] Zero length message leads to an empty skb [ 118.593090][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 118.831859][ T6254] program syz.1.86 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.894054][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 118.966520][ T5923] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 119.121796][ T5923] usb 3-1: config 0 has no interface number 0 [ 119.132134][ T5923] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.181646][ T5923] usb 3-1: config 0 interface 85 has no altsetting 0 [ 119.637850][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 119.647860][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.738294][ T5923] usb 3-1: Product: syz [ 119.831617][ T5923] usb 3-1: Manufacturer: syz [ 119.860969][ T5923] usb 3-1: SerialNumber: syz [ 120.018272][ T5923] usb 3-1: config 0 descriptor?? [ 121.458056][ T5923] appletouch 3-1:0.85: Failed to read mode from device. [ 121.502632][ T5923] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 121.548321][ T5923] usb 3-1: USB disconnect, device number 6 [ 121.732209][ T5895] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.972739][ T5895] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.018342][ T5895] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 122.202892][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.249300][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 122.269412][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 122.306021][ T5895] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.330073][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.623288][ T5895] usb 5-1: Product: syz [ 122.632171][ T5895] usb 5-1: Manufacturer: syz [ 122.741510][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 122.746833][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 122.840836][ T5895] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 122.882413][ T5895] cdc_wdm 5-1:1.0: Unknown control protocol [ 123.425303][ T5923] usb 5-1: USB disconnect, device number 4 [ 125.774187][ T6335] binder: 6334:6335 ioctl c0306201 200000000040 returned -14 [ 125.809108][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 126.133648][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.156543][ T977] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 126.226444][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 126.324084][ T977] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 126.334516][ T977] usb 5-1: config 0 has no interface number 0 [ 126.365218][ T977] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 126.389527][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.406244][ T977] usb 5-1: Product: syz [ 126.410662][ T977] usb 5-1: Manufacturer: syz [ 126.428981][ T977] usb 5-1: SerialNumber: syz [ 126.440574][ T977] usb 5-1: config 0 descriptor?? [ 126.683678][ T977] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 126.881741][ T977] peak_usb 5-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 126.910834][ T977] peak_usb 5-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 126.988292][ T977] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -71 [ 127.031768][ T977] usb 5-1: USB disconnect, device number 5 [ 128.121710][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.301702][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 128.310405][ T5923] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.338327][ T5923] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.366184][ T5923] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.384255][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.398303][ T5923] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 128.468116][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.581659][ T1208] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.727706][ T5923] usb 2-1: config 0 descriptor?? [ 129.033860][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.045778][ T1208] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 129.055894][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.082512][ T1208] usb 3-1: config 0 descriptor?? [ 129.324453][ T5923] hid (null): global environment stack underflow [ 129.342641][ T43] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 129.376429][ T5923] hid (null): usage index exceeded [ 129.592325][ T5923] usb 2-1: USB disconnect, device number 4 [ 129.655979][ T1208] logitech-djreceiver 0003:046D:C71F.0004: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 129.714798][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.741548][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.830191][ T43] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 129.863308][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.902184][ T43] usb 1-1: config 0 descriptor?? [ 129.971013][ T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 129.997298][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 130.041419][ T43] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 130.109029][ T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 130.141321][ T6384] dibusb: i2c wr: len=61 is too big! [ 130.141321][ T6384] [ 130.171834][ T6384] netlink: 'syz.0.126': attribute type 7 has an invalid length. [ 130.180807][ T6384] netlink: 'syz.0.126': attribute type 8 has an invalid length. [ 130.254977][ T43] usb 1-1: media controller created [ 130.301879][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.355447][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 130.375990][ T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 130.450064][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 130.574205][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 130.595067][ T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 130.707336][ T6389] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.752785][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 130.789964][ T43] dvb-usb: error while querying for an remote control event. [ 130.921976][ T1208] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 130.972982][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 130.979207][ T5923] dvb-usb: error while querying for an remote control event. [ 131.142421][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 131.210411][ T5923] dvb-usb: error while querying for an remote control event. [ 131.489461][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 131.506806][ T5923] dvb-usb: error while querying for an remote control event. [ 131.731590][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 131.751050][ T5923] dvb-usb: error while querying for an remote control event. [ 131.772030][ T1208] usb 3-1: device descriptor read/64, error -71 [ 131.862511][ T6406] vti0: entered promiscuous mode [ 131.870767][ T6406] vti0: entered allmulticast mode [ 131.887418][ T977] usb 1-1: USB disconnect, device number 8 [ 132.026467][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 132.042393][ T1208] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 132.273088][ T1208] usb 3-1: device firmware changed [ 132.307310][ T43] usb 3-1: USB disconnect, device number 7 [ 132.591629][ T43] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.800769][ T43] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 132.812369][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.871611][ T43] usb 3-1: Product: syz [ 132.956682][ T43] usb 3-1: Manufacturer: syz [ 132.967974][ T43] usb 3-1: SerialNumber: syz [ 133.022618][ T43] usb 3-1: config 0 descriptor?? [ 133.106848][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 133.108152][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.125241][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.493449][ T43] gspca_sunplus: reg_r err -32 [ 134.501733][ T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 134.632077][ T43] usb 3-1: USB disconnect, device number 8 [ 134.851543][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.132644][ T10] usb 5-1: device descriptor read/64, error -71 [ 135.145770][ T6442] trusted_key: encrypted_key: master key parameter '000000000004093' is invalid [ 135.621399][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.653746][ T6449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.756563][ T6449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.881982][ T10] usb 5-1: device descriptor read/64, error -71 [ 135.966586][ T6450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.142'. [ 136.005960][ T10] usb usb5-port1: attempt power cycle [ 136.382366][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.403586][ T10] usb 5-1: device descriptor read/8, error -71 [ 136.641591][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.674864][ T10] usb 5-1: device descriptor read/8, error -71 [ 136.792854][ T10] usb usb5-port1: unable to enumerate USB device [ 137.640573][ T6453] syzkaller0: entered promiscuous mode [ 137.656764][ T6453] syzkaller0: entered allmulticast mode [ 139.743825][ T1208] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.129825][ T6488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.143688][ T6488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.352100][ T1208] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 140.357240][ T6491] kvm: pic: non byte read [ 140.368496][ T1208] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 140.378979][ T6491] kvm: pic: non byte read [ 140.379078][ T6491] kvm: pic: non byte read [ 140.379165][ T6491] kvm: pic: non byte read [ 140.379250][ T6491] kvm: pic: non byte read [ 140.379342][ T6491] kvm: pic: non byte read [ 140.379429][ T6491] kvm: pic: non byte read [ 140.379515][ T6491] kvm: pic: non byte read [ 140.379602][ T6491] kvm: pic: non byte read [ 140.379688][ T6491] kvm: pic: non byte read [ 140.627069][ T1208] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.673688][ T1208] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.762515][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.887641][ T6499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.904412][ T1208] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.964558][ T6499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.102757][ T1208] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 141.149851][ T6507] netlink: 'syz.1.161': attribute type 11 has an invalid length. [ 141.150937][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.224266][ T6496] syzkaller0: entered promiscuous mode [ 141.230018][ T6496] syzkaller0: entered allmulticast mode [ 141.252013][ T5923] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 141.261149][ T6499] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.451253][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.468998][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.481991][ T5923] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.532195][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.585889][ T5923] usb 3-1: config 0 descriptor?? [ 141.607600][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.625979][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 141.661192][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.726246][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.761071][ T5923] usb 3-1: media controller created [ 141.778371][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.802200][ T6502] dibusb: i2c wr: len=61 is too big! [ 141.802200][ T6502] [ 141.874505][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 141.890833][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.951308][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 142.098164][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 142.143719][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.171696][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.189386][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.243676][ T5923] usb 3-1: USB disconnect, device number 9 [ 142.446110][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 142.637521][ T10] usb 1-1: USB disconnect, device number 9 [ 143.920463][ T6542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.168'. [ 144.464445][ T5902] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.643202][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 144.653583][ T5902] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 144.663691][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.682261][ T5902] usb 1-1: Product: syz [ 144.690322][ T5902] usb 1-1: Manufacturer: syz [ 144.706797][ T5902] usb 1-1: SerialNumber: syz [ 144.736795][ T5902] usb 1-1: config 0 descriptor?? [ 144.746545][ T5902] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 144.866789][ T5155] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 144.883097][ T5155] CPU: 0 UID: 0 PID: 5155 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 144.883119][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.883128][ T5155] Workqueue: hci2 hci_rx_work [ 144.883147][ T5155] Call Trace: [ 144.883152][ T5155] [ 144.883159][ T5155] dump_stack_lvl+0x189/0x250 [ 144.883178][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 144.883199][ T5155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.883213][ T5155] ? __pfx__printk+0x10/0x10 [ 144.883243][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 144.883256][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 144.883271][ T5155] ? kernfs_path_from_node+0x22c/0x260 [ 144.883285][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 144.883302][ T5155] sysfs_create_dir_ns+0x259/0x280 [ 144.883319][ T5155] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 144.883335][ T5155] ? do_raw_spin_unlock+0x122/0x240 [ 144.883355][ T5155] kobject_add_internal+0x59f/0xb40 [ 144.883378][ T5155] kobject_add+0x155/0x220 [ 144.883396][ T5155] ? __pfx_kobject_add+0x10/0x10 [ 144.883411][ T5155] ? _raw_spin_unlock+0x28/0x50 [ 144.883432][ T5155] ? get_device_parent+0x366/0x3a0 [ 144.883453][ T5155] device_add+0x408/0xb50 [ 144.883476][ T5155] hci_conn_add_sysfs+0xd5/0x1e0 [ 144.883499][ T5155] le_conn_complete_evt+0xc3a/0x1220 [ 144.883524][ T5155] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 144.883541][ T5155] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 144.883554][ T5155] ? __asan_memcpy+0x40/0x70 [ 144.883573][ T5155] ? __pfx___mutex_lock+0x10/0x10 [ 144.883587][ T5155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 144.883603][ T5155] ? skb_pull_data+0xfb/0x200 [ 144.883629][ T5155] hci_le_conn_complete_evt+0x187/0x450 [ 144.883650][ T5155] hci_event_packet+0x78c/0x1200 [ 144.883665][ T5155] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 144.883683][ T5155] ? __pfx_hci_event_packet+0x10/0x10 [ 144.883696][ T5155] ? kcov_remote_start+0x4d3/0x7f0 [ 144.883714][ T5155] ? lockdep_hardirqs_on+0x90/0x150 [ 144.883729][ T5155] ? hci_send_to_monitor+0xe2/0x570 [ 144.883748][ T5155] hci_rx_work+0x46a/0xe80 [ 144.883769][ T5155] ? process_scheduled_works+0x9ef/0x17b0 [ 144.883791][ T5155] process_scheduled_works+0xade/0x17b0 [ 144.883824][ T5155] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.883852][ T5155] worker_thread+0x8a0/0xda0 [ 144.883868][ T5155] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 144.883895][ T5155] ? __kthread_parkme+0x7b/0x200 [ 144.883916][ T5155] kthread+0x70e/0x8a0 [ 144.883934][ T5155] ? __pfx_worker_thread+0x10/0x10 [ 144.883950][ T5155] ? __pfx_kthread+0x10/0x10 [ 144.883967][ T5155] ? _raw_spin_unlock_irq+0x23/0x50 [ 144.883978][ T5155] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.883989][ T5155] ? __pfx_kthread+0x10/0x10 [ 144.884005][ T5155] ret_from_fork+0x3fc/0x770 [ 144.884019][ T5155] ? __pfx_ret_from_fork+0x10/0x10 [ 144.884035][ T5155] ? __switch_to_asm+0x39/0x70 [ 144.884049][ T5155] ? __switch_to_asm+0x33/0x70 [ 144.884062][ T5155] ? __pfx_kthread+0x10/0x10 [ 144.884077][ T5155] ret_from_fork_asm+0x1a/0x30 [ 144.884103][ T5155] [ 144.884155][ T5155] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.218661][ T5155] Bluetooth: hci2: failed to register connection device [ 145.938870][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.974829][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.129095][ T5902] gspca_sonixj: reg_w1 err -71 [ 146.134776][ T5902] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 146.193077][ T5902] usb 1-1: USB disconnect, device number 10 [ 146.695503][ T6558] netlink: 14 bytes leftover after parsing attributes in process `syz.3.173'. [ 147.617888][ T6558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.637977][ T6558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.664059][ T6558] bond0 (unregistering): Released all slaves [ 147.911981][ T6570] syz.2.178 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 148.457735][ T1208] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 148.557042][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.731582][ T1208] usb 3-1: Using ep0 maxpacket: 32 [ 148.740239][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.761539][ T1208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.811593][ T1208] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 148.821002][ T1208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.884392][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.078789][ T6597] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 149.424146][ T1208] usb 3-1: config 0 descriptor?? [ 149.436115][ T43] usb 5-1: config 0 has no interfaces? [ 149.621827][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.691886][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.956149][ T43] usb 5-1: config 0 descriptor?? [ 150.030802][ T1208] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 150.190910][ T6593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.187'. [ 150.211548][ T1208] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 150.247364][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.258615][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.287436][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.383740][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.413497][ T1208] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 150.441805][ T10] usb 5-1: USB disconnect, device number 10 [ 150.623157][ T1208] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 150.802852][ T5155] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 150.814223][ T5155] CPU: 1 UID: 0 PID: 5155 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 150.814252][ T5155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.814264][ T5155] Workqueue: hci1 hci_rx_work [ 150.814303][ T5155] Call Trace: [ 150.814312][ T5155] [ 150.814320][ T5155] dump_stack_lvl+0x189/0x250 [ 150.814348][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 150.814376][ T5155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.814399][ T5155] ? __pfx__printk+0x10/0x10 [ 150.814426][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 150.814448][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 150.814474][ T5155] ? kernfs_path_from_node+0x22c/0x260 [ 150.814497][ T5155] ? kernfs_path_from_node+0x2c/0x260 [ 150.814536][ T5155] sysfs_create_dir_ns+0x259/0x280 [ 150.814563][ T5155] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 150.814588][ T5155] ? do_raw_spin_unlock+0x122/0x240 [ 150.814619][ T5155] kobject_add_internal+0x59f/0xb40 [ 150.814655][ T5155] kobject_add+0x155/0x220 [ 150.814686][ T5155] ? __pfx_kobject_add+0x10/0x10 [ 150.814712][ T5155] ? _raw_spin_unlock+0x28/0x50 [ 150.814748][ T5155] ? get_device_parent+0x366/0x3a0 [ 150.814782][ T5155] device_add+0x408/0xb50 [ 150.814816][ T5155] hci_conn_add_sysfs+0xd5/0x1e0 [ 150.814854][ T5155] le_conn_complete_evt+0xc3a/0x1220 [ 150.814898][ T5155] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 150.814927][ T5155] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 150.814948][ T5155] ? __asan_memcpy+0x40/0x70 [ 150.814980][ T5155] ? __pfx___mutex_lock+0x10/0x10 [ 150.815004][ T5155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.815026][ T5155] ? skb_pull_data+0xfb/0x200 [ 150.815056][ T5155] hci_le_conn_complete_evt+0x187/0x450 [ 150.815093][ T5155] hci_event_packet+0x78c/0x1200 [ 150.815119][ T5155] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 150.815149][ T5155] ? __pfx_hci_event_packet+0x10/0x10 [ 150.815173][ T5155] ? kcov_remote_start+0x4d3/0x7f0 [ 150.815202][ T5155] ? lockdep_hardirqs_on+0x90/0x150 [ 150.815228][ T5155] ? hci_send_to_monitor+0xe2/0x570 [ 150.815259][ T5155] hci_rx_work+0x46a/0xe80 [ 150.815292][ T5155] ? process_scheduled_works+0x9ef/0x17b0 [ 150.815319][ T5155] process_scheduled_works+0xade/0x17b0 [ 150.815378][ T5155] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.815425][ T5155] worker_thread+0x8a0/0xda0 [ 150.815452][ T5155] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 150.815496][ T5155] ? __kthread_parkme+0x7b/0x200 [ 150.815542][ T5155] kthread+0x70e/0x8a0 [ 150.815574][ T5155] ? __pfx_worker_thread+0x10/0x10 [ 150.815597][ T5155] ? __pfx_kthread+0x10/0x10 [ 150.815644][ T5155] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.815664][ T5155] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.815682][ T5155] ? __pfx_kthread+0x10/0x10 [ 150.815710][ T5155] ret_from_fork+0x3fc/0x770 [ 150.815736][ T5155] ? __pfx_ret_from_fork+0x10/0x10 [ 150.815765][ T5155] ? __switch_to_asm+0x39/0x70 [ 150.815790][ T5155] ? __switch_to_asm+0x33/0x70 [ 150.815813][ T5155] ? __pfx_kthread+0x10/0x10 [ 150.815842][ T5155] ret_from_fork_asm+0x1a/0x30 [ 150.815889][ T5155] [ 150.815930][ T5155] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.071580][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 151.214126][ T1208] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 151.221814][ T5155] Bluetooth: hci1: failed to register connection device [ 151.551564][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 151.576991][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.618427][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.00 [ 151.680852][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.701979][ T5902] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.822358][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.843401][ T5923] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 151.855605][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.872422][ T10] usb 5-1: config 0 descriptor?? [ 151.886615][ T10] usb 5-1: can't set config #0, error -71 [ 151.949072][ T10] usb 5-1: USB disconnect, device number 11 [ 151.956194][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 152.000546][ T5902] usb 1-1: config 0 has no interfaces? [ 152.042935][ T5902] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 152.084184][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.105752][ T5902] usb 1-1: Product: syz [ 152.110331][ T5902] usb 1-1: Manufacturer: syz [ 152.130275][ T5902] usb 1-1: SerialNumber: syz [ 152.178238][ T5902] usb 1-1: config 0 descriptor?? [ 152.685982][ T1208] usb 3-1: USB disconnect, device number 10 [ 153.071720][ T5902] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 153.217290][ T6642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.230820][ T6642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.343457][ T5902] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.365353][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 153.395954][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8192, setting to 64 [ 153.416630][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.463737][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.477427][ T5902] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.565285][ T5902] usb 5-1: Manufacturer: syz [ 153.573667][ T5902] usb 5-1: config 0 descriptor?? [ 153.939395][ T5902] rc_core: IR keymap rc-hauppauge not found [ 154.001193][ T5902] Registered IR keymap rc-empty [ 154.015813][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.054180][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.083814][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 154.109938][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 154.148021][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.215493][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.242385][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.361933][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.434895][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.483615][ T5895] usb 1-1: USB disconnect, device number 11 [ 154.509467][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.553430][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.603542][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.643944][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.683134][ T5902] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 154.741029][ T5902] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.765866][ T5902] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.812078][ T5902] usb 5-1: USB disconnect, device number 12 [ 155.461567][ T5982] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 155.644411][ T5982] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.661518][ T5982] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 155.681722][ T5982] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.701154][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 155.714562][ T5982] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 155.728052][ T5982] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.739727][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.748199][ T5982] usb 5-1: Product: syz [ 155.752857][ T5982] usb 5-1: Manufacturer: syz [ 155.754417][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 155.783123][ T5982] cdc_wdm 5-1:1.0: skipping garbage [ 155.801032][ T5982] cdc_wdm 5-1:1.0: skipping garbage [ 155.851318][ T5982] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 155.911407][ T5982] cdc_wdm 5-1:1.0: Unknown control protocol [ 155.953196][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 155.977383][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 156.192733][ T5902] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 156.209840][ T5902] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 156.229109][ T5902] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.313291][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0 [ 156.338178][ T5902] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 156.356784][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.384043][ T5902] usb 3-1: Product: syz [ 156.444734][ T5902] usb 3-1: Manufacturer: syz [ 156.475472][ T5902] usb 3-1: SerialNumber: syz [ 156.539460][ T6670] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 156.652021][ T6682] input: syz0 as /devices/virtual/input/input9 [ 156.774073][ T5902] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 156.954111][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.996618][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.075425][ T6670] QAT: Invalid ioctl 35609 [ 157.140682][ T6670] gretap1: entered promiscuous mode [ 157.174762][ T6670] gretap1: entered allmulticast mode [ 157.175455][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.272179][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.472208][ T5190] bcm5974 3-1:1.0: could not read from device [ 157.545493][ T5190] bcm5974 3-1:1.0: could not read from device [ 157.595616][ T5902] bcm5974 3-1:1.0: could not read from device [ 157.648797][ T5902] input: failed to attach handler mousedev to device input10, error: -5 [ 157.683404][ T5190] bcm5974 3-1:1.0: could not read from device [ 157.745627][ T5190] bcm5974 3-1:1.0: could not read from device [ 157.762238][ T5902] usb 3-1: USB disconnect, device number 11 [ 158.253964][ T1208] usb 5-1: USB disconnect, device number 13 [ 159.685239][ T6722] input: syz0 as /devices/virtual/input/input11 [ 160.210658][ T6733] usb usb8: usbfs: process 6733 (syz.0.233) did not claim interface 0 before use [ 160.368358][ T6733] kvm: pic: single mode not supported [ 160.368545][ T6733] picdev_read: 77 callbacks suppressed [ 160.368564][ T6733] kvm: pic: non byte read [ 160.429961][ T6737] ======================================================= [ 160.429961][ T6737] WARNING: The mand mount option has been deprecated and [ 160.429961][ T6737] and is ignored by this kernel. Remove the mand [ 160.429961][ T6737] option from the mount to silence this warning. [ 160.429961][ T6737] ======================================================= [ 160.472056][ T6733] kvm: pic: non byte read [ 160.477364][ T6733] kvm: pic: non byte read [ 160.483744][ T6733] kvm: pic: non byte read [ 160.491371][ T6733] kvm: pic: non byte read [ 160.497921][ T6733] kvm: pic: non byte read [ 160.508157][ T6733] kvm: pic: non byte read [ 160.515532][ T6733] kvm: pic: non byte read [ 160.528308][ T6733] kvm: pic: non byte read [ 160.597138][ T6737] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.628386][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.643203][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.781621][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 161.126025][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.135624][ T5902] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.160470][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.170276][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 161.200515][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 161.219624][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.259537][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.278882][ T5902] usb 2-1: Product: syz [ 161.299408][ T5902] usb 2-1: Manufacturer: syz [ 161.319345][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 161.330627][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 161.353279][ T5902] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 161.384756][ T5902] cdc_wdm 2-1:1.0: Unknown control protocol [ 161.521322][ T6750] pim6reg: entered allmulticast mode [ 161.534118][ T6750] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 161.552604][ T6750] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 161.572155][ T6750] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 161.584650][ T6750] team0: Failed to send options change via netlink (err -105) [ 161.592395][ T6750] team0: Port device netdevsim0 added [ 162.315662][ T30] audit: type=1800 audit(1755125958.370:4): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.241" name="bus" dev="ramfs" ino=10205 res=0 errno=0 [ 163.521960][ T6776] input: syz0 as /devices/virtual/input/input12 [ 163.591712][ T5902] usb 2-1: USB disconnect, device number 5 [ 165.770778][ T6804] netlink: 48 bytes leftover after parsing attributes in process `syz.3.255'. [ 166.502124][ T5854] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 166.512896][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: kworker/u9:7 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 166.512926][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.512940][ T5854] Workqueue: hci4 hci_rx_work [ 166.512968][ T5854] Call Trace: [ 166.512976][ T5854] [ 166.512985][ T5854] dump_stack_lvl+0x189/0x250 [ 166.513013][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 166.513040][ T5854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.513072][ T5854] ? __pfx__printk+0x10/0x10 [ 166.513100][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 166.513121][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 166.513146][ T5854] ? kernfs_path_from_node+0x22c/0x260 [ 166.513166][ T5854] ? kernfs_path_from_node+0x2c/0x260 [ 166.513192][ T5854] sysfs_create_dir_ns+0x259/0x280 [ 166.513219][ T5854] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 166.513246][ T5854] ? do_raw_spin_unlock+0x122/0x240 [ 166.513280][ T5854] kobject_add_internal+0x59f/0xb40 [ 166.513316][ T5854] kobject_add+0x155/0x220 [ 166.513346][ T5854] ? __pfx_kobject_add+0x10/0x10 [ 166.513371][ T5854] ? _raw_spin_unlock+0x28/0x50 [ 166.513407][ T5854] ? get_device_parent+0x366/0x3a0 [ 166.513439][ T5854] device_add+0x408/0xb50 [ 166.513473][ T5854] hci_conn_add_sysfs+0xd5/0x1e0 [ 166.513509][ T5854] le_conn_complete_evt+0xc3a/0x1220 [ 166.513548][ T5854] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 166.513574][ T5854] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 166.513596][ T5854] ? __asan_memcpy+0x40/0x70 [ 166.513634][ T5854] ? __pfx___mutex_lock+0x10/0x10 [ 166.513657][ T5854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.513676][ T5854] ? skb_pull_data+0xfb/0x200 [ 166.513704][ T5854] hci_le_conn_complete_evt+0x187/0x450 [ 166.513737][ T5854] hci_event_packet+0x78c/0x1200 [ 166.513763][ T5854] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 166.513793][ T5854] ? __pfx_hci_event_packet+0x10/0x10 [ 166.513842][ T5854] ? kcov_remote_start+0x4d3/0x7f0 [ 166.513866][ T5854] ? lockdep_hardirqs_on+0x90/0x150 [ 166.513891][ T5854] ? hci_send_to_monitor+0xe2/0x570 [ 166.513925][ T5854] hci_rx_work+0x46a/0xe80 [ 166.513958][ T5854] ? process_scheduled_works+0x9ef/0x17b0 [ 166.513999][ T5854] process_scheduled_works+0xade/0x17b0 [ 166.514070][ T5854] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.514114][ T5854] worker_thread+0x8a0/0xda0 [ 166.514142][ T5854] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.514186][ T5854] ? __kthread_parkme+0x7b/0x200 [ 166.514223][ T5854] kthread+0x70e/0x8a0 [ 166.514251][ T5854] ? __pfx_worker_thread+0x10/0x10 [ 166.514272][ T5854] ? __pfx_kthread+0x10/0x10 [ 166.514301][ T5854] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.514320][ T5854] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.514338][ T5854] ? __pfx_kthread+0x10/0x10 [ 166.514367][ T5854] ret_from_fork+0x3fc/0x770 [ 166.514392][ T5854] ? __pfx_ret_from_fork+0x10/0x10 [ 166.514421][ T5854] ? __switch_to_asm+0x39/0x70 [ 166.514446][ T5854] ? __switch_to_asm+0x33/0x70 [ 166.514469][ T5854] ? __pfx_kthread+0x10/0x10 [ 166.514499][ T5854] ret_from_fork_asm+0x1a/0x30 [ 166.514544][ T5854] [ 166.514577][ T5854] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 166.879035][ T5854] Bluetooth: hci4: failed to register connection device [ 166.931563][ T5902] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 166.971829][ T6815] kvm: vcpu 512: requested lapic timer restore with starting count register 0x390=1814518830 (232258410240 ns) > initial count (2458284544 ns). Using initial count to start timer. [ 167.114159][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.154079][ T5902] usb 5-1: not running at top speed; connect to a high speed hub [ 167.220526][ T5902] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 167.267692][ T5902] usb 5-1: config 1 has no interface number 1 [ 167.289770][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.431739][ T5902] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.476820][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.501810][ T5902] usb 5-1: Product: syz [ 167.535845][ T5902] usb 5-1: Manufacturer: syz [ 167.561298][ T5902] usb 5-1: SerialNumber: syz [ 167.865668][ T5902] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 167.881726][ T5902] usb 5-1: 2:1 : sample bitwidth 60 in over sample bytes 5 [ 167.890157][ T5902] usb 5-1: 2:1 : unsupported sample bitwidth 60 in 5 bytes [ 167.941969][ T5902] usb 5-1: USB disconnect, device number 14 [ 168.121868][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.459405][ T6842] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.512077][ T5902] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.791764][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 168.810142][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.834365][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.858732][ T5902] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.896341][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.919319][ T5902] usb 3-1: config 0 descriptor?? [ 168.951633][ T5982] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.974002][ T5902] hub 3-1:0.0: USB hub found [ 169.160803][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.186811][ T5982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.188952][ T5902] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 169.241782][ T5982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.336347][ T5982] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.378122][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.400977][ T5982] usb 5-1: config 0 descriptor?? [ 169.921756][ T5982] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 170.059235][ T5982] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 170.190678][ T10] usb 5-1: USB disconnect, device number 15 [ 170.468777][ T5902] usbhid 3-1:0.0: can't add hid device: -71 [ 170.483628][ T6869] fido_id[6869]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 170.494855][ T5902] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.575591][ T5902] usb 3-1: USB disconnect, device number 12 [ 171.206312][ T6882] tipc: Started in network mode [ 171.281812][ T6882] tipc: Node identity 7f000001, cluster identity 4711 [ 171.316325][ T6882] tipc: Enabled bearer , priority 10 [ 171.380996][ T6882] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 171.393066][ T6889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.285'. [ 171.405071][ T6882] tipc: Enabled bearer , priority 10 [ 171.421565][ T6889] netlink: 35 bytes leftover after parsing attributes in process `syz.3.285'. [ 171.435717][ T6889] netlink: 'syz.3.285': attribute type 6 has an invalid length. [ 171.471579][ T6889] netlink: 'syz.3.285': attribute type 5 has an invalid length. [ 171.492661][ T6889] netlink: 35 bytes leftover after parsing attributes in process `syz.3.285'. [ 171.806714][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.866497][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.460164][ T5982] tipc: Node number set to 2130706433 [ 172.466021][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 172.642659][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 172.664353][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.720822][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.762402][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.796235][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.820124][ T5923] usb 3-1: config 0 descriptor?? [ 172.838243][ T5923] hub 3-1:0.0: USB hub found [ 173.071237][ T5923] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 173.821747][ T1208] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.981778][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 174.015316][ T1208] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 174.107084][ T1208] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 174.118269][ T1208] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 174.128807][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.145221][ T5923] usbhid 3-1:0.0: can't add hid device: -71 [ 174.153766][ T5923] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.177345][ T1208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.196097][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 174.216924][ T5923] usb 3-1: USB disconnect, device number 13 [ 174.227617][ T1208] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 174.242546][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.276526][ T1208] usb 2-1: config 0 descriptor?? [ 174.512423][ T1208] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 174.578057][ T1208] usb 2-1: USB disconnect, device number 6 [ 174.603737][ T1208] usblp0: removed [ 175.131665][ T1208] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.321659][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 175.337340][ T1208] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 175.380777][ T1208] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 175.426879][ T1208] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 175.462054][ T1208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.481510][ T1208] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.511637][ T1208] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.540095][ T1208] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.549374][ T1208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.582321][ T1208] usb 2-1: config 0 descriptor?? [ 175.844977][ T1208] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 176.067959][ C1] usblp0: nonzero read bulk status received: -71 [ 176.093285][ T1208] usb 2-1: USB disconnect, device number 7 [ 176.135615][ T1208] usblp0: removed [ 176.227249][ T6969] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.540072][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.585603][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.120984][ T5902] hid-generic 007F:6E8D:0005.0007: item fetching failed at offset 1/5 [ 177.153111][ T5902] hid-generic 007F:6E8D:0005.0007: probe with driver hid-generic failed with error -22 [ 177.661614][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.855144][ T5902] usb 1-1: config 0 has no interfaces? [ 177.877001][ T5902] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.931636][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.011004][ T5902] usb 1-1: config 0 descriptor?? [ 178.254792][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.277072][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.306609][ T7004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.365101][ T7004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.398874][ T1208] usb 1-1: USB disconnect, device number 12 [ 178.891586][ T43] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 178.980619][ T7037] tipc: Started in network mode [ 179.015261][ T7037] tipc: Node identity , cluster identity 4711 [ 179.045335][ T7037] tipc: Failed to obtain node identity [ 179.077051][ T7037] tipc: Enabling of bearer rejected, failed to enable media [ 179.121516][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.145716][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 179.164933][ T43] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 179.178779][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.196873][ T43] usb 1-1: Product: syz [ 179.201838][ T43] usb 1-1: Manufacturer: syz [ 179.207607][ T43] usb 1-1: SerialNumber: syz [ 179.518464][ T43] usb 1-1: selecting invalid altsetting 1 [ 179.526187][ T43] cdc_ncm 1-1:1.0: bind() failure [ 179.560771][ T43] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 179.749689][ T43] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 179.784731][ T43] usb 1-1: USB disconnect, device number 13 [ 179.853435][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.871758][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.051693][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 180.067878][ T5902] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.090366][ T5902] usb 3-1: config 0 has no interface number 0 [ 180.100794][ T5902] usb 3-1: config 0 interface 184 has no altsetting 0 [ 180.128644][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.160913][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.190553][ T5902] usb 3-1: Product: syz [ 180.203411][ T5902] usb 3-1: Manufacturer: syz [ 180.209309][ T5902] usb 3-1: SerialNumber: syz [ 180.222201][ T5909] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 180.281942][ T5902] usb 3-1: config 0 descriptor?? [ 180.294802][ T5902] smsc75xx v1.0.0 [ 180.390963][ T7069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.441650][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 180.466943][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.497171][ T7069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 180.519386][ T5909] usb 5-1: config 0 has no interfaces? [ 180.541366][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.577968][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.842319][ T5909] usb 5-1: config 0 descriptor?? [ 181.153061][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 181.353575][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.559090][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.607384][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.652694][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 181.782326][ T5902] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.812592][ T5902] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.875174][ T5902] usb 3-1: USB disconnect, device number 14 [ 183.317521][ T43] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 183.501208][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 183.530542][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 183.559928][ T43] usb 3-1: config 13 has an invalid interface number: 90 but max is 0 [ 183.617672][ T43] usb 3-1: config 13 has no interface number 0 [ 183.645368][ T43] usb 3-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 183.702705][ T43] usb 3-1: language id specifier not provided by device, defaulting to English [ 183.760682][ T43] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 183.795662][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.854110][ T43] usb 3-1: Product: syz [ 183.871482][ T43] usb 3-1: Manufacturer: syz [ 183.876243][ T43] usb 3-1: SerialNumber: syz [ 184.142323][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.184091][ T5902] usb 5-1: USB disconnect, device number 16 [ 184.360273][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.368'. [ 184.361708][ T43] usb 3-1: USB disconnect, device number 15 [ 184.550240][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.708644][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.877884][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.881534][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 184.919977][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 184.944849][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.983208][ T10] usb 1-1: config 0 has no interface number 0 [ 184.989510][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 185.036375][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 185.059910][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.097903][ T10] usb 1-1: Product: syz [ 185.117641][ T10] usb 1-1: Manufacturer: syz [ 185.143787][ T10] usb 1-1: SerialNumber: syz [ 185.163398][ T10] usb 1-1: config 0 descriptor?? [ 185.176644][ T10] smsc75xx v1.0.0 [ 185.187839][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.236958][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.199645][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 186.258266][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.404771][ T30] audit: type=1326 audit(1755125982.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.511040][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 186.511076][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 186.511098][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 186.511754][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 186.523716][ T30] audit: type=1326 audit(1755125982.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.523773][ T30] audit: type=1326 audit(1755125982.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.523827][ T30] audit: type=1326 audit(1755125982.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.523871][ T30] audit: type=1326 audit(1755125982.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.523916][ T30] audit: type=1326 audit(1755125982.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.523960][ T30] audit: type=1326 audit(1755125982.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.524006][ T30] audit: type=1326 audit(1755125982.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7144 comm="syz.2.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff3e018ebe9 code=0x7ffc0000 [ 186.541060][ T10] usb 1-1: USB disconnect, device number 14 [ 186.570390][ T7149] trusted_key: encrypted_key: insufficient parameters specified [ 186.696902][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 187.006249][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.059826][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 188.094482][ T7172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.142419][ T43] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 188.302841][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 188.345893][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.357519][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.369036][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 188.392855][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.419071][ T7181] tipc: Enabled bearer , priority 0 [ 188.429717][ T43] usb 5-1: config 0 descriptor?? [ 188.465702][ T43] hub 5-1:0.0: USB hub found [ 188.575834][ T7181] syzkaller0: entered promiscuous mode [ 188.597618][ T7181] syzkaller0: entered allmulticast mode [ 188.647027][ T43] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 189.531556][ T5909] tipc: Node number set to 4032772279 [ 191.100874][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 191.167247][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.214307][ T43] usb 5-1: USB disconnect, device number 17 [ 192.694342][ T1208] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 192.767875][ T7181] tipc: Resetting bearer [ 192.779183][ T7180] tipc: Resetting bearer [ 192.794643][ T7180] tipc: Disabling bearer [ 192.861641][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 192.883143][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.948679][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.979001][ T1208] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 193.012104][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.099216][ T1208] usb 5-1: config 0 descriptor?? [ 193.106604][ T7249] netlink: 80 bytes leftover after parsing attributes in process `syz.1.418'. [ 193.127816][ T1208] hub 5-1:0.0: USB hub found [ 193.158109][ T7249] netlink: 80 bytes leftover after parsing attributes in process `syz.1.418'. [ 193.410821][ T1208] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 193.535245][ T7254] kernel profiling enabled (shift: 9) [ 194.409883][ T7267] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 194.538673][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546026][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.678027][ T7273] tipc: Enabled bearer , priority 0 [ 194.789550][ T7273] syzkaller0: entered promiscuous mode [ 194.797460][ T7273] syzkaller0: entered allmulticast mode [ 194.821833][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 195.872224][ T7291] program syz.2.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.904139][ T7291] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 195.996597][ T7293] program syz.3.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.158578][ T1208] usbhid 5-1:0.0: can't add hid device: -71 [ 196.182418][ T1208] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 196.224877][ T1208] usb 5-1: USB disconnect, device number 18 [ 196.666163][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 197.077728][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 198.953563][ T5909] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 199.112198][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 199.120263][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.132571][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.142598][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.154473][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.176791][ T5909] usb 3-1: config 0 descriptor?? [ 199.188781][ T5909] hub 3-1:0.0: USB hub found [ 199.393532][ T5909] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 199.589518][ T7273] tipc: Resetting bearer [ 199.612706][ T7272] tipc: Resetting bearer [ 199.631198][ T7272] tipc: Disabling bearer [ 199.651359][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.673911][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.687132][ T7312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.711728][ T7312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.917808][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 200.215955][ T30] audit: type=1326 audit(1755125996.270:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7341 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771fb8ebe9 code=0x7ffc0000 [ 200.358099][ T30] audit: type=1326 audit(1755125996.270:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7341 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f771fb8ebe9 code=0x7ffc0000 [ 200.426623][ T30] audit: type=1326 audit(1755125996.270:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7341 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771fb8ebe9 code=0x7ffc0000 [ 200.503763][ T30] audit: type=1326 audit(1755125996.360:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7341 comm="syz.1.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771fb8ebe9 code=0x7ffc0000 [ 201.449591][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 201.562306][ T7371] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 201.752108][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 201.758415][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.851747][ T5909] usb 3-1: USB disconnect, device number 16 [ 202.165210][ T7376] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.401225][ T7376] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.716154][ T7376] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.885000][ T7400] netlink: 224 bytes leftover after parsing attributes in process `syz.0.474'. [ 202.915214][ T7400] ksmbd: Unknown IPC event: 4, ignore. [ 203.058378][ T7376] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.167023][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'. [ 203.381371][ T7376] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.460133][ T7376] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.480987][ T7412] [ 203.484100][ T7412] ============================= [ 203.489811][ T7412] WARNING: suspicious RCU usage [ 203.495287][ T7412] 6.16.0-syzkaller #0 Not tainted [ 203.500619][ T7412] ----------------------------- [ 203.506498][ T7412] net/core/netclassid_cgroup.c:24 suspicious rcu_dereference_check() usage! [ 203.515279][ T7412] [ 203.515279][ T7412] other info that might help us debug this: [ 203.515279][ T7412] [ 203.525601][ T7412] [ 203.525601][ T7412] rcu_scheduler_active = 2, debug_locks = 1 [ 203.534061][ T7412] 1 lock held by syz.3.479/7412: [ 203.539226][ T7412] #0: ffffffff8e13f2c0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 203.549590][ T7412] [ 203.549590][ T7412] stack backtrace: [ 203.551050][ T7376] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.556481][ T7412] CPU: 0 UID: 0 PID: 7412 Comm: syz.3.479 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 203.556514][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.556527][ T7412] Call Trace: [ 203.556535][ T7412] [ 203.556544][ T7412] dump_stack_lvl+0x189/0x250 [ 203.556589][ T7412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.556615][ T7412] ? __pfx__printk+0x10/0x10 [ 203.556647][ T7412] ? print_lock_name+0xde/0x100 [ 203.556680][ T7412] lockdep_rcu_suspicious+0x140/0x1d0 [ 203.556707][ T7412] task_cls_state+0x1a5/0x1d0 [ 203.556731][ T7412] bpf_get_cgroup_classid_curr+0x18/0x60 [ 203.556759][ T7412] bpf_prog_cd2e46495e8fe8a5+0x20/0x26 [ 203.556779][ T7412] bpf_prog_run_pin_on_cpu+0x67/0x150 [ 203.556813][ T7412] bpf_prog_test_run_syscall+0x312/0x4b0 [ 203.556848][ T7412] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 203.556878][ T7412] ? __fget_files+0x2a/0x420 [ 203.556908][ T7412] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 203.556940][ T7412] bpf_prog_test_run+0x2c7/0x340 [ 203.556977][ T7412] __sys_bpf+0x4a4/0x860 [ 203.557010][ T7412] ? __pfx___sys_bpf+0x10/0x10 [ 203.557064][ T7412] ? rcu_is_watching+0x15/0xb0 [ 203.557096][ T7412] __x64_sys_bpf+0x7c/0x90 [ 203.557124][ T7412] do_syscall_64+0xfa/0x3b0 [ 203.557146][ T7412] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.557168][ T7412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.557189][ T7412] ? clear_bhb_loop+0x60/0xb0 [ 203.557215][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.557235][ T7412] RIP: 0033:0x7f6ff9d8ebe9 [ 203.557254][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.557271][ T7412] RSP: 002b:00007f6ff7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.557293][ T7412] RAX: ffffffffffffffda RBX: 00007f6ff9fb5fa0 RCX: 00007f6ff9d8ebe9 [ 203.557308][ T7412] RDX: 000000000000003a RSI: 0000200000000340 RDI: 000000000000000a [ 203.557321][ T7412] RBP: 00007f6ff9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 203.557333][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.557345][ T7412] R13: 00007f6ff9fb6038 R14: 00007f6ff9fb5fa0 R15: 00007ffc1f426a78 [ 203.557380][ T7412] [ 203.701778][ T5909] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.717323][ T7376] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.922667][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 203.934081][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.955365][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.967087][ T5909] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.977006][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.992383][ T5909] usb 2-1: config 0 descriptor?? [ 204.006824][ T5909] hub 2-1:0.0: USB hub found [ 204.203561][ T5909] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 206.455220][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 206.468051][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.523817][ T5909] usb 2-1: USB disconnect, device number 8 [ 211.983537][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 211.985619][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.989947][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 211.996540][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 212.002858][ T51] Bluetooth: hci1: command 0x0406 tx timeout