last executing test programs: 16.339085019s ago: executing program 3 (id=2268): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000069000000000000000a14000000060a0be1c4fdb404000000000000000002000008140000001100010000000000000000000100000af04e76b3c6aaeed130c44c7b3e87d15c3e5e125343fac3c19a89e70e391fbbfff253c209f47dba61a58072aea50e07a5b08b9baee529e12385671ddb8cb026d8b16395edacc97d1246a8b7fa5829f883dab84652fb0187cdf923721a62fec8c8b4d5cf14d5feab681ec038dffc7dbff9f485ceddbe9655e717ed0f34f9783ee2040be1310752ae7527c0ae9c38e3ea5eea810e30d597"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x10040004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 13.5814647s ago: executing program 3 (id=2274): openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) socket(0x40000000015, 0x4, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fsopen(0x0, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) shutdown(r3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x229) 11.079239238s ago: executing program 3 (id=2276): r0 = userfaultfd(0x80801) r1 = userfaultfd(0x80801) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x40000006) tgkill(0x0, 0x0, 0x27) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000840)={0x3, 0x3, 0x9, 0x6, 0xf1e, 0x6, "991deb753abfea8f408844d477546aef", 0x2, 0x36, 0xe2, 0x7, 0xc, 0xad, 0xee}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000480)={'\x00', 0x0, 0x5, 0x0, 0x2, 0x9, '\x00', "249e4502", "9e068dd9", '\x00', ["fdffcf89171100bb08844f10", "d78cb8b0ff00000000fc00", "0000effffffff700c00500", "000000000000000400"]}) 11.050568673s ago: executing program 1 (id=2277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f00000029c0), 0x400006d, 0x20000004) 9.532214467s ago: executing program 2 (id=2279): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f0000000080)) r4 = fsmount(r2, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-c'], 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) pause() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009"], 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16) 8.148460508s ago: executing program 1 (id=2280): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setrlimit(0xd, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b1, 0x0, 0x8000000000000001}]}) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7fffffff) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) io_uring_enter(r2, 0x6bd4, 0x9404, 0x8, 0x0, 0x0) 7.756898014s ago: executing program 0 (id=2281): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x30, r5, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x203}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918218ef61002ff010000800000", 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f0000000180)=""/236, 0xec) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfb}, 0x2) 7.654618841s ago: executing program 3 (id=2282): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x10040004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 6.477006787s ago: executing program 0 (id=2283): r0 = openat(0xffffffffffffff9c, 0x0, 0x80940, 0xd2) close(r0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) 5.226661936s ago: executing program 0 (id=2284): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8d, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000180)={0x3, {0x7, 0x5, 0x9, 0x2, 0x9, 0x3}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0x0, 0x2, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffbfffffffff, 0x100000000000, 0x100001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_aead={0x4c, 0x12, {{'ccm-aes-ce\x00'}, 0x0, 0x180}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000080), 0x0) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x8, 0x2, 0x6, 0x6}, 0x8, 0xe4c8, &(0x7f00000001c0)={{0xd8c, 0x7, 0x2, 0x2}, &(0x7f0000000100)={{0x7, 0x6, 0x200, 0x7}, &(0x7f00000000c0)={{0x10, 0x9, 0x22, 0x3}}}}, 0xffffffff, &(0x7f0000000280)="eca6fff0b784fc115f6258cc9edee8fe3f0762e00f431da4b4d956621b340e088f39f78db43b4c2883980d3530facf", 0xf}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 5.122725274s ago: executing program 2 (id=2285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000001400078008000640fffffffd080008400000003f0500050002001ad20500010006"], 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c800000090601020000000000faffff0200000005010100070000001e65e6c8090f64702975b7818de28316c07e7596615d7b9d8813e73798bdb0e8"], 0x1c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/44, 0x2c}], 0x1, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) writev(r2, &(0x7f00000003c0), 0x100000000000022d) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4.273520635s ago: executing program 2 (id=2286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000002000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000003ac0)={0x0, 0x5, 0x3016}) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) r2 = socket(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf2502000000140002006970766c616e710000000000000000000900030073797a310000000005000400010000000900030073797a30000009000900010073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8048040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) read(r4, &(0x7f0000000340)=""/88, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socket$packet(0x11, 0x2, 0x300) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d02) 2.656062246s ago: executing program 2 (id=2287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffefff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2.302621495s ago: executing program 1 (id=2288): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$unix(r0, &(0x7f000000d540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="d9fe41", 0x3}], 0x1, &(0x7f00000004c0)=[@rights={{0x10}}], 0x10, 0x800}}], 0x1, 0x0) 2.301605255s ago: executing program 2 (id=2289): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001200970225bd70000000000007000000", @ANYBLOB="b3"], 0x20}}, 0x0) 2.076166563s ago: executing program 2 (id=2290): clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x8d, 0xfffffffffffffff9, 0x2000000000009, 0x7, 0x43, 0x52e6ac5d, 0x2000ffffffff, 0x9655, 0xfffffffffffffffe, 0xa, 0x9, 0x5, 0x8000000b, 0x80000000000000, 0xcc3, 0x1, 0x85, 0x17, 0x3, 0x100000000, 0x5, 0x200000005, 0xfffffffffffffffe, 0x3, 0xa}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000180)={0x3, {0x7, 0x5, 0x9, 0x2, 0x9, 0x3}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x1, 0x714, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0x0, 0x2, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffbfffffffff, 0x100000000000, 0x100001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_aead={0x4c, 0x12, {{'ccm-aes-ce\x00'}, 0x0, 0x180}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000080), 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0x1000000c, 0x12, 0x10003, 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2.075785503s ago: executing program 1 (id=2291): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3c4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x398, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}]}}]}, 0x3c4}}, 0x20000000) 1.126242861s ago: executing program 0 (id=2292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x5, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x8005, 0x5, 0x6, 0x100, 0x27, 0xcc7, 0x8, 0x3, 0x3, 0xff, 0x0, 0x0, 0xa, 0x2, 0x7, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x4, 0x61a, 0x0, 0x4fa7f95b, 0x4, 0x5149]}) 1.01811642s ago: executing program 3 (id=2293): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x49b40) 974.249257ms ago: executing program 1 (id=2294): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000480)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0xdf9, 0x5, 0x800, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x80000001, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x45, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0xa, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xa, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xf9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0xc, 0x1, 0x1fa, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 714.031371ms ago: executing program 0 (id=2295): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r1, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 656.40536ms ago: executing program 1 (id=2296): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000940)="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", 0x0, 0x3800, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x7}, 0x24) 54.12209ms ago: executing program 3 (id=2297): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{0x0}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="2030b2"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x1, 0x5, "afbfb48c1a"}, 0x0}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000003ac0)={0x0, 0x9, 0x100b}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xffffffff, 0x2, 0x7fffffff}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x80000000, 0x7ff, 0x1, 0xdba9, 0x2, 0x80, 0x8001, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8000, 0xf20, 0xa, 0xffff, 0x2}}, &(0x7f0000000480)=0xb0) 0s ago: executing program 0 (id=2298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffefff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): :145F:0212.0003: interface is invalid, ignoring [ 343.477629][ T6662] usb 2-1: USB disconnect, device number 14 [ 349.269409][ T9690] syzkaller0: entered promiscuous mode [ 349.275099][ T9690] syzkaller0: entered allmulticast mode [ 350.592470][ T9674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.912013][ T9747] syzkaller0: entered promiscuous mode [ 355.921693][ T9747] syzkaller0: entered allmulticast mode [ 356.499918][ T9762] syzkaller0: entered promiscuous mode [ 356.505914][ T9762] syzkaller0: entered allmulticast mode [ 357.021215][ T9735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.202372][ T9779] bridge_slave_0: left allmulticast mode [ 360.208365][ T9779] bridge_slave_0: left promiscuous mode [ 360.218917][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.231611][ T9779] bridge_slave_1: left allmulticast mode [ 360.237457][ T9779] bridge_slave_1: left promiscuous mode [ 360.261741][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.292773][ T9779] bond0: (slave bond_slave_0): Releasing backup interface [ 360.320388][ T9779] bond0: (slave bond_slave_1): Releasing backup interface [ 360.345631][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.355804][ T9779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.745313][ T9793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.814953][ T9793] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 361.978621][ T9793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.015913][ T9793] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 362.194926][ T9793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.213084][ T9793] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 362.312696][ T9793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.324835][ T9793] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 363.570673][ T9800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.752210][ T9793] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 363.781990][ T9793] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.828433][ T9793] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 363.851420][ T9793] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 363.893264][ T9793] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 363.931425][ T9793] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 364.024258][ T9793] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 364.052191][ T9793] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 368.281536][ T6664] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 368.357986][ T9855] syzkaller0: entered promiscuous mode [ 368.363741][ T9855] syzkaller0: entered allmulticast mode [ 368.481270][ T6664] usb 2-1: Using ep0 maxpacket: 8 [ 368.498386][ T6664] usb 2-1: config 0 has no interfaces? [ 368.518292][ T6664] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 368.537158][ T6664] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 368.558786][ T6664] usb 2-1: Product: syz [ 368.573995][ T6664] usb 2-1: Manufacturer: syz [ 368.579057][ T6664] usb 2-1: SerialNumber: syz [ 368.589035][ T6664] usb 2-1: config 0 descriptor?? [ 368.743576][ T6678] usb 2-1: USB disconnect, device number 15 [ 372.413543][ T9861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.980733][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 373.012088][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 374.361262][ T6664] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 374.385502][ T9902] vlan3: entered promiscuous mode [ 374.571262][ T6664] usb 1-1: Using ep0 maxpacket: 8 [ 374.592001][ T6664] usb 1-1: config 0 has no interfaces? [ 374.616928][ T6664] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 374.641271][ T6664] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 374.649615][ T6664] usb 1-1: Product: syz [ 374.659169][ T6664] usb 1-1: Manufacturer: syz [ 374.664736][ T6664] usb 1-1: SerialNumber: syz [ 374.682908][ T6664] usb 1-1: config 0 descriptor?? [ 375.089279][ T6682] usb 1-1: USB disconnect, device number 8 [ 375.505900][ T9917] syzkaller0: entered promiscuous mode [ 375.512192][ T9917] syzkaller0: entered allmulticast mode [ 375.807313][ T9928] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 375.837077][ T9928] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 375.873382][ T9928] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 378.471714][ T9938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1263'. [ 378.583250][ T9920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.939277][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.241328][ T6682] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 380.717945][ T9957] process 'syz.3.1269' launched './file2' with NULL argv: empty string added [ 380.952549][ T6682] usb 3-1: Using ep0 maxpacket: 8 [ 380.993053][ T6682] usb 3-1: config 0 has no interfaces? [ 381.014026][ T6682] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 381.027867][ T6682] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 381.036713][ T6682] usb 3-1: Product: syz [ 381.048753][ T6682] usb 3-1: Manufacturer: syz [ 381.066040][ T6682] usb 3-1: SerialNumber: syz [ 381.142464][ T6682] usb 3-1: config 0 descriptor?? [ 381.147895][ T9960] vlan3: entered promiscuous mode [ 381.177401][ T9960] ip6gretap0: entered promiscuous mode [ 381.490349][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 381.540663][ T6680] usb 3-1: USB disconnect, device number 9 [ 381.558766][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 385.222877][ T9979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.382463][ T6678] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 387.592902][ T6678] usb 4-1: Using ep0 maxpacket: 8 [ 387.625354][ T6678] usb 4-1: config 0 has no interfaces? [ 387.639766][ T6678] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 387.651004][ T6678] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 387.659496][ T6678] usb 4-1: Product: syz [ 387.668329][ T6678] usb 4-1: Manufacturer: syz [ 387.673284][ T6678] usb 4-1: SerialNumber: syz [ 387.688973][ T6678] usb 4-1: config 0 descriptor?? [ 387.907747][ T6678] usb 4-1: USB disconnect, device number 9 [ 388.067693][T10031] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 388.106615][T10031] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 388.123637][T10031] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 390.785742][T10073] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 390.803415][T10073] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 390.926092][T10075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1304'. [ 391.379827][T10041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.047611][T10089] loop3: detected capacity change from 0 to 256 [ 392.250688][T10089] FAT-fs (loop3): Directory bread(block 64) failed [ 392.318816][T10089] FAT-fs (loop3): Directory bread(block 65) failed [ 392.416280][T10089] FAT-fs (loop3): Directory bread(block 66) failed [ 392.543839][T10089] FAT-fs (loop3): Directory bread(block 67) failed [ 392.732325][T10089] FAT-fs (loop3): Directory bread(block 68) failed [ 392.738979][T10089] FAT-fs (loop3): Directory bread(block 69) failed [ 392.786520][T10089] FAT-fs (loop3): Directory bread(block 70) failed [ 392.841475][T10089] FAT-fs (loop3): Directory bread(block 71) failed [ 392.848211][T10089] FAT-fs (loop3): Directory bread(block 72) failed [ 392.895175][T10089] FAT-fs (loop3): Directory bread(block 73) failed [ 393.022627][T10100] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 393.045100][T10100] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 393.131892][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 393.155142][ T28] audit: type=1800 audit(1776115540.371:47): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1308" name="file1" dev="loop3" ino=1048703 res=0 errno=0 [ 394.946248][ T6678] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 395.631232][ T6678] usb 1-1: Using ep0 maxpacket: 16 [ 395.757480][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1317'. [ 395.902706][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1317'. [ 396.361540][ T6678] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 396.369200][ T6678] usb 1-1: can't read configurations, error -71 [ 398.391815][ T6682] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 398.655666][ T6682] usb 2-1: Using ep0 maxpacket: 32 [ 398.705737][ T6682] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 398.781523][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 398.993901][ T6682] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 399.011327][ T6682] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 399.019809][ T6682] usb 2-1: Product: syz [ 399.029981][ T6682] usb 2-1: Manufacturer: syz [ 399.045160][ T6682] usb 2-1: SerialNumber: syz [ 399.066823][ T6682] usb 2-1: config 0 descriptor?? [ 399.086088][T10153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 401.166928][ T6662] usb 2-1: USB disconnect, device number 16 [ 402.711328][ T6662] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 403.114383][ T6662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.125756][ T6662] usb 1-1: config 0 has no interfaces? [ 403.196483][ T6662] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 403.271549][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.332876][ T6662] usb 1-1: config 0 descriptor?? [ 403.584326][ T6662] usb 1-1: USB disconnect, device number 11 [ 404.271355][ T6662] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 404.451647][ T6664] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 404.501483][ T6662] usb 1-1: Using ep0 maxpacket: 8 [ 404.516041][ T6662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.537536][ T6662] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.556292][ T6662] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 404.581282][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.591036][ T6662] usb 1-1: Product: syz [ 404.595803][ T6662] usb 1-1: Manufacturer: syz [ 404.600585][ T6662] usb 1-1: SerialNumber: syz [ 404.623843][ T6662] usb 1-1: config 0 descriptor?? [ 404.671383][ T6664] usb 4-1: Using ep0 maxpacket: 32 [ 404.679118][ T6664] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 404.689088][ T6664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.713479][ T6664] usb 4-1: config 0 descriptor?? [ 404.886837][ T6678] usb 1-1: USB disconnect, device number 12 [ 404.941527][ T6664] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 404.976156][ T6664] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 405.018493][ T6664] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 405.038828][ T6664] usb 4-1: media controller created [ 405.058638][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1345'. [ 405.124843][ T6664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 405.211499][ T6664] az6027: usb out operation failed. (-71) [ 405.236115][ T6664] az6027: usb out operation failed. (-71) [ 405.261290][ T6664] stb0899_attach: Driver disabled by Kconfig [ 405.281364][ T6664] az6027: no front-end attached [ 405.281364][ T6664] [ 405.299263][ T6664] az6027: usb out operation failed. (-71) [ 405.311683][ T6664] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 405.341589][ T6664] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 405.401779][ T6664] dvb-usb: schedule remote query interval to 400 msecs. [ 405.425676][ T6664] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 405.461767][ T6664] usb 4-1: USB disconnect, device number 10 [ 405.648120][ T6664] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 405.670397][T10219] syzkaller0: entered promiscuous mode [ 405.697901][T10219] syzkaller0: entered allmulticast mode [ 410.935793][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1355'. [ 411.182883][T10259] loop3: detected capacity change from 0 to 256 [ 412.633797][T10259] FAT-fs (loop3): Directory bread(block 64) failed [ 412.640417][T10259] FAT-fs (loop3): Directory bread(block 65) failed [ 412.663276][T10259] FAT-fs (loop3): Directory bread(block 66) failed [ 412.670820][T10259] FAT-fs (loop3): Directory bread(block 67) failed [ 412.680157][T10259] FAT-fs (loop3): Directory bread(block 68) failed [ 412.718316][T10259] FAT-fs (loop3): Directory bread(block 69) failed [ 412.748582][T10259] FAT-fs (loop3): Directory bread(block 70) failed [ 412.781775][T10259] FAT-fs (loop3): Directory bread(block 71) failed [ 412.809187][T10259] FAT-fs (loop3): Directory bread(block 72) failed [ 412.822831][T10267] syzkaller0: entered promiscuous mode [ 412.838958][T10259] FAT-fs (loop3): Directory bread(block 73) failed [ 412.845808][T10267] syzkaller0: entered allmulticast mode [ 412.971618][ T28] audit: type=1800 audit(1776115560.231:48): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1358" name="file1" dev="loop3" ino=1048705 res=0 errno=0 [ 414.866595][T10280] syzkaller0: entered promiscuous mode [ 414.872704][T10280] syzkaller0: entered allmulticast mode [ 417.686840][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1368'. [ 418.361518][ T6678] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 418.611505][ T6678] usb 4-1: Using ep0 maxpacket: 16 [ 418.684167][ T6678] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 418.760957][ T6678] usb 4-1: config 251 has no interface number 0 [ 418.826380][ T6678] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 418.929163][ T6678] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 419.967337][ T6678] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 419.979287][ T6678] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 419.989410][ T6678] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.003079][ T6678] usb 4-1: config 251 interface 202 has no altsetting 0 [ 420.013184][ T6678] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 420.031201][ T6678] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.039266][ T6678] usb 4-1: Product: syz [ 420.051212][ T6678] usb 4-1: Manufacturer: syz [ 420.055881][ T6678] usb 4-1: SerialNumber: syz [ 420.093510][T10305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 420.970416][T10321] syzkaller0: entered promiscuous mode [ 420.982588][T10321] syzkaller0: entered allmulticast mode [ 420.989785][T10323] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1380'. [ 421.049942][ T6678] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 421.091810][ T6678] usb 4-1: USB disconnect, device number 11 [ 421.773376][ T6661] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 421.963448][ T6661] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.978382][ T6661] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.989197][ T6661] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 421.998650][ T6661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.022331][ T6661] usb 3-1: config 0 descriptor?? [ 422.240859][ T6664] usb 3-1: USB disconnect, device number 10 [ 423.350062][ T6664] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 423.541348][ T6664] usb 3-1: Using ep0 maxpacket: 8 [ 423.564167][ T6664] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.588318][ T6664] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.623622][ T6664] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 423.649209][ T6664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.675569][ T6664] usb 3-1: Product: syz [ 423.679820][ T6664] usb 3-1: Manufacturer: syz [ 423.687524][ T6664] usb 3-1: SerialNumber: syz [ 423.722055][ T6664] usb 3-1: config 0 descriptor?? [ 423.956228][ T6664] usb 3-1: USB disconnect, device number 11 [ 425.137284][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1393'. [ 425.570466][T10372] loop2: detected capacity change from 0 to 256 [ 426.369696][ T6664] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 426.651641][ T6664] usb 2-1: Using ep0 maxpacket: 16 [ 426.677516][ T6664] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 426.686281][ T6664] usb 2-1: config 251 has no interface number 0 [ 426.696298][ T6664] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 426.708405][ T6664] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 426.721441][ T6664] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 426.736909][ T6664] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 426.744549][T10372] FAT-fs (loop2): Directory bread(block 64) failed [ 426.758423][ T6664] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.816782][ T6664] usb 2-1: config 251 interface 202 has no altsetting 0 [ 426.875068][ T6664] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 426.880389][T10372] FAT-fs (loop2): Directory bread(block 65) failed [ 426.913972][ T6664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.948517][ T6664] usb 2-1: Product: syz [ 426.967689][ T6664] usb 2-1: Manufacturer: syz [ 426.990001][ T6664] usb 2-1: SerialNumber: syz [ 427.019620][T10365] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.021815][ T6681] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 427.082682][T10372] FAT-fs (loop2): Directory bread(block 66) failed [ 427.104869][T10372] FAT-fs (loop2): Directory bread(block 67) failed [ 427.111791][T10372] FAT-fs (loop2): Directory bread(block 68) failed [ 427.118511][T10372] FAT-fs (loop2): Directory bread(block 69) failed [ 427.125427][T10372] FAT-fs (loop2): Directory bread(block 70) failed [ 427.141555][T10372] FAT-fs (loop2): Directory bread(block 71) failed [ 427.148353][T10372] FAT-fs (loop2): Directory bread(block 72) failed [ 427.159997][T10372] FAT-fs (loop2): Directory bread(block 73) failed [ 427.263237][ T28] audit: type=1800 audit(1776115574.521:49): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1400" name="file1" dev="loop2" ino=1048707 res=0 errno=0 [ 427.311462][ T6681] usb 1-1: Using ep0 maxpacket: 8 [ 427.319656][ T6681] usb 1-1: config 0 has no interfaces? [ 427.341961][ T6681] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 427.355869][ T6681] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 427.364668][ T6681] usb 1-1: Product: syz [ 427.369112][ T6681] usb 1-1: Manufacturer: syz [ 427.369133][ T6681] usb 1-1: SerialNumber: syz [ 427.380247][ T6681] usb 1-1: config 0 descriptor?? [ 427.598453][ T6681] usb 1-1: USB disconnect, device number 13 [ 427.806668][T10388] syzkaller0: entered promiscuous mode [ 427.812720][T10388] syzkaller0: entered allmulticast mode [ 427.834441][ T6664] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 427.881548][ T6664] usb 2-1: USB disconnect, device number 17 [ 428.720390][T10402] loop3: detected capacity change from 0 to 256 [ 428.778448][T10402] FAT-fs (loop3): Directory bread(block 64) failed [ 428.795636][T10402] FAT-fs (loop3): Directory bread(block 65) failed [ 428.816073][T10402] FAT-fs (loop3): Directory bread(block 66) failed [ 428.833436][T10402] FAT-fs (loop3): Directory bread(block 67) failed [ 428.855591][T10402] FAT-fs (loop3): Directory bread(block 68) failed [ 428.874486][T10402] FAT-fs (loop3): Directory bread(block 69) failed [ 428.889227][T10402] FAT-fs (loop3): Directory bread(block 70) failed [ 428.906558][T10402] FAT-fs (loop3): Directory bread(block 71) failed [ 428.921746][T10402] FAT-fs (loop3): Directory bread(block 72) failed [ 428.936441][T10402] FAT-fs (loop3): Directory bread(block 73) failed [ 429.073040][ T28] audit: type=1800 audit(1776115576.331:50): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1414" name="file1" dev="loop3" ino=1048709 res=0 errno=0 [ 431.805527][T10431] vlan3: entered promiscuous mode [ 432.188572][T10444] NILFS (nullb0): couldn't find nilfs on the device [ 432.773477][T10449] loop0: detected capacity change from 0 to 256 [ 432.938029][T10449] FAT-fs (loop0): Directory bread(block 64) failed [ 432.962403][T10449] FAT-fs (loop0): Directory bread(block 65) failed [ 432.995244][T10449] FAT-fs (loop0): Directory bread(block 66) failed [ 433.027985][T10449] FAT-fs (loop0): Directory bread(block 67) failed [ 433.161392][T10449] FAT-fs (loop0): Directory bread(block 68) failed [ 433.191735][T10449] FAT-fs (loop0): Directory bread(block 69) failed [ 433.198461][T10449] FAT-fs (loop0): Directory bread(block 70) failed [ 433.241408][T10449] FAT-fs (loop0): Directory bread(block 71) failed [ 433.248181][T10449] FAT-fs (loop0): Directory bread(block 72) failed [ 433.279576][T10449] FAT-fs (loop0): Directory bread(block 73) failed [ 433.981341][ T28] audit: type=1800 audit(1776115581.221:51): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1424" name="file1" dev="loop0" ino=1048711 res=0 errno=0 [ 434.389378][T10463] syzkaller0: entered promiscuous mode [ 434.397597][T10463] syzkaller0: entered allmulticast mode [ 438.171226][ T6662] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 438.371380][ T6662] usb 3-1: Using ep0 maxpacket: 8 [ 438.387597][ T6662] usb 3-1: config 0 has no interfaces? [ 438.404024][ T6662] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 438.431225][ T6662] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 438.439496][ T6662] usb 3-1: Product: syz [ 438.467161][ T6662] usb 3-1: Manufacturer: syz [ 438.474782][ T6662] usb 3-1: SerialNumber: syz [ 438.483906][ T6662] usb 3-1: config 0 descriptor?? [ 438.698743][ T6682] usb 3-1: USB disconnect, device number 12 [ 439.736658][T10492] loop0: detected capacity change from 0 to 256 [ 439.913972][T10492] FAT-fs (loop0): Directory bread(block 64) failed [ 439.936597][T10492] FAT-fs (loop0): Directory bread(block 65) failed [ 439.964253][T10492] FAT-fs (loop0): Directory bread(block 66) failed [ 439.991068][T10492] FAT-fs (loop0): Directory bread(block 67) failed [ 440.011831][T10492] FAT-fs (loop0): Directory bread(block 68) failed [ 440.018494][T10492] FAT-fs (loop0): Directory bread(block 69) failed [ 440.052968][T10492] FAT-fs (loop0): Directory bread(block 70) failed [ 440.067566][T10492] FAT-fs (loop0): Directory bread(block 71) failed [ 440.095416][T10492] FAT-fs (loop0): Directory bread(block 72) failed [ 440.135989][T10492] FAT-fs (loop0): Directory bread(block 73) failed [ 440.322646][ T28] audit: type=1800 audit(1776115587.591:52): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1439" name="file1" dev="loop0" ino=1048713 res=0 errno=0 [ 440.344202][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.377139][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1439'. [ 444.438137][T10540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 444.511481][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 448.014672][T10562] syzkaller0: entered promiscuous mode [ 448.040703][T10562] syzkaller0: entered allmulticast mode [ 450.641668][ T6680] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 450.862449][ T6680] usb 1-1: Using ep0 maxpacket: 8 [ 450.967491][ T6680] usb 1-1: config 0 has no interfaces? [ 451.053585][ T6680] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 451.072536][ T6680] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 451.101420][ T6680] usb 1-1: Product: syz [ 451.105722][ T6680] usb 1-1: Manufacturer: syz [ 451.121343][ T6680] usb 1-1: SerialNumber: syz [ 451.165497][ T6680] usb 1-1: config 0 descriptor?? [ 451.587117][ T6680] usb 1-1: USB disconnect, device number 14 [ 452.481635][ T6662] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 452.584175][T10597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 452.600886][T10597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 452.695153][ T6662] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.719062][ T6662] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 452.728900][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.743136][ T6662] usb 1-1: config 0 descriptor?? [ 452.761509][ T6662] pwc: Askey VC010 type 2 USB webcam detected. [ 452.985180][ T6662] pwc: send_video_command error -71 [ 452.994878][ T6662] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 453.004756][ T6662] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 453.038044][ T6662] usb 1-1: USB disconnect, device number 15 [ 454.304393][T10607] NILFS (nullb0): couldn't find nilfs on the device [ 457.537108][T10603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1470'. [ 459.571293][ T6682] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 459.769098][ T6682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.792026][ T6682] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 459.839515][ T6682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.934286][ T6682] usb 4-1: config 0 descriptor?? [ 460.015741][ T6682] pwc: Askey VC010 type 2 USB webcam detected. [ 460.179760][ T6682] pwc: send_video_command error -71 [ 460.208477][ T6682] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 460.225892][ T6682] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 460.255566][ T6682] usb 4-1: USB disconnect, device number 12 [ 461.085370][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1482'. [ 463.061828][ T6682] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 463.250806][T10689] block device autoloading is deprecated and will be removed. [ 463.253312][ T6682] usb 4-1: Using ep0 maxpacket: 32 [ 463.278956][T10682] block device autoloading is deprecated and will be removed. [ 463.289314][ T6682] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 463.323500][ T6682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.355517][ T6682] usb 4-1: config 0 descriptor?? [ 463.518082][T10682] md: md2 stopped. [ 463.608210][ T6682] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 463.670719][ T6682] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 463.691852][ T6682] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 463.911286][ T6662] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 464.105369][ T6662] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.164062][ T6662] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 464.173594][ T6662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.189417][ T6662] usb 2-1: config 0 descriptor?? [ 464.305259][ T6662] pwc: Askey VC010 type 2 USB webcam detected. [ 464.408058][ T6662] pwc: send_video_command error -71 [ 464.417828][ T6662] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 464.425622][ T6661] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 464.446535][ T6662] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 464.488770][ T6662] usb 2-1: USB disconnect, device number 18 [ 465.651412][ T6661] usb 1-1: Using ep0 maxpacket: 16 [ 465.711431][ T6661] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 465.735266][ T6661] usb 1-1: config 251 has no interface number 0 [ 465.743400][ T6661] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 465.756700][ T6661] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 465.769787][ T6661] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 465.781993][ T6661] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 465.793937][ T6661] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.808462][ T6661] usb 1-1: config 251 interface 202 has no altsetting 0 [ 465.829532][ T6661] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 465.839158][ T6661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.847610][ T6661] usb 1-1: Product: syz [ 465.852232][ T6661] usb 1-1: Manufacturer: syz [ 465.856879][ T6661] usb 1-1: SerialNumber: syz [ 465.870287][T10698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 466.623000][ T6661] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 466.659911][ T6661] usb 1-1: USB disconnect, device number 16 [ 466.681742][ T6662] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 466.871274][ T6662] usb 2-1: Using ep0 maxpacket: 32 [ 466.902245][ T6662] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 466.929204][ T6662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.011787][ T6662] usb 2-1: config 0 descriptor?? [ 467.467914][ T6662] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 469.927376][ T6680] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 470.281349][ T6680] usb 3-1: Using ep0 maxpacket: 16 [ 471.388600][ T6680] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 471.397451][ T6680] usb 3-1: config 251 has no interface number 0 [ 471.404462][ T6680] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 471.421215][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 471.432430][ T6680] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 471.454277][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 471.465829][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.554892][ T6680] usb 3-1: config 251 interface 202 has no altsetting 0 [ 471.603097][ T6680] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 471.646812][ T6680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.671314][ T6680] usb 3-1: Product: syz [ 471.675581][ T6680] usb 3-1: Manufacturer: syz [ 471.701276][ T6680] usb 3-1: SerialNumber: syz [ 471.719528][T10760] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 472.533892][ T6680] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 472.605106][ T6680] usb 3-1: USB disconnect, device number 13 [ 476.002270][ T788] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 476.191245][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 476.204198][ T788] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 476.239032][ T788] usb 3-1: config 251 has no interface number 0 [ 476.253650][ T788] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 476.271211][T10812] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 476.281235][ T788] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 476.341202][ T788] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 476.364143][ T788] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 476.411264][ T788] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.448328][ T788] usb 3-1: config 251 interface 202 has no altsetting 0 [ 476.464378][ T788] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 476.494172][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.528074][ T788] usb 3-1: Product: syz [ 476.541824][ T788] usb 3-1: Manufacturer: syz [ 476.560027][ T788] usb 3-1: SerialNumber: syz [ 476.582294][T10806] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.359029][ T788] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 477.422834][ T788] usb 3-1: USB disconnect, device number 14 [ 479.377001][T10840] vlan3: entered promiscuous mode [ 480.891908][ T788] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 481.102654][T10857] vivid-002: disconnect [ 481.125708][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 481.198824][ T788] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 481.258729][ T788] usb 3-1: config 251 has no interface number 0 [ 481.289429][ T788] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 481.327887][T10845] vivid-002: reconnect [ 481.351250][ T788] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 481.406220][ T788] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 481.448105][ T788] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 481.481240][ T788] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.541360][ T788] usb 3-1: config 251 interface 202 has no altsetting 0 [ 481.627901][ T788] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 481.671276][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.701239][ T788] usb 3-1: Product: syz [ 481.709910][ T788] usb 3-1: Manufacturer: syz [ 481.771248][ T788] usb 3-1: SerialNumber: syz [ 481.807007][T10854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 482.927746][ T788] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 482.991539][ T788] usb 3-1: USB disconnect, device number 15 [ 483.665010][T10875] vlan2: entered promiscuous mode [ 484.461221][ T6658] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 484.551265][ T788] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 484.651817][ T6658] usb 1-1: Using ep0 maxpacket: 16 [ 484.683149][ T6658] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 484.699170][ T6658] usb 1-1: config 251 has no interface number 0 [ 484.706927][ T6658] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 484.721554][ T6658] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 484.742570][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 484.749249][ T6658] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 484.770108][ T6658] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 484.781443][ T788] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 484.790493][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.800654][ T6658] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.815364][ T788] usb 3-1: config 0 descriptor?? [ 484.844877][ T6658] usb 1-1: config 251 interface 202 has no altsetting 0 [ 484.874539][ T6658] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 484.904660][ T6658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.945240][ T6658] usb 1-1: Product: syz [ 484.953257][ T6658] usb 1-1: Manufacturer: syz [ 484.958068][ T6658] usb 1-1: SerialNumber: syz [ 485.019115][T10891] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 485.081286][ T788] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 485.920821][ T6658] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 485.975182][ T6658] usb 1-1: USB disconnect, device number 17 [ 486.215125][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 486.267753][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 492.714139][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 492.822849][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 493.068010][T10973] NILFS (nullb0): couldn't find nilfs on the device [ 493.781225][ T6683] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 493.971460][ T6683] usb 1-1: Using ep0 maxpacket: 16 [ 493.989690][ T6683] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 494.002889][ T6683] usb 1-1: config 251 has no interface number 0 [ 494.020783][ T6683] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 494.041949][ T6683] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 494.053174][ T6683] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 494.064867][ T6683] usb 1-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 494.076060][ T6683] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.125544][ T6683] usb 1-1: config 251 interface 202 has no altsetting 0 [ 494.147224][ T6683] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 494.157467][ T6683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.165789][ T6683] usb 1-1: Product: syz [ 494.171370][ T6683] usb 1-1: Manufacturer: syz [ 494.176238][ T6683] usb 1-1: SerialNumber: syz [ 494.196388][T10983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 494.801117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 497.143656][ T6683] cxacru 1-1:251.202: usbatm_usb_probe: bind failed: -19! [ 497.168302][ T6683] usb 1-1: USB disconnect, device number 18 [ 498.140950][T11008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1595'. [ 501.639323][T11045] syzkaller0: entered promiscuous mode [ 501.645998][T11045] syzkaller0: entered allmulticast mode [ 501.729607][T11052] block device autoloading is deprecated and will be removed. [ 501.765441][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.115749][ T6661] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 504.308633][ T6661] usb 1-1: Using ep0 maxpacket: 8 [ 504.326375][ T6661] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 504.343624][ T6661] usb 1-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 504.387075][ T6661] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 504.410278][ T6661] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.430062][ T6661] usb 1-1: Product: syz [ 504.434868][ T6661] usb 1-1: Manufacturer: syz [ 504.439744][ T6661] usb 1-1: SerialNumber: syz [ 504.578440][ T6661] hso 1-1:6.0: Can't find BULK IN endpoint [ 504.784565][ T6661] usb 1-1: USB disconnect, device number 19 [ 509.468323][T11093] vlan3: entered promiscuous mode [ 510.511559][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 510.623184][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1627'. [ 512.032172][T11120] syzkaller0: entered promiscuous mode [ 512.037726][T11120] syzkaller0: entered allmulticast mode [ 512.474721][T11129] md: md2 stopped. [ 514.196224][T11132] vlan2: entered promiscuous mode [ 515.423792][T11157] NILFS (nullb0): couldn't find nilfs on the device [ 517.995771][T11169] syzkaller0: entered promiscuous mode [ 518.018082][T11169] syzkaller0: entered allmulticast mode [ 518.087501][T11174] vlan3: entered promiscuous mode [ 521.495324][T11199] NILFS (nullb0): couldn't find nilfs on the device [ 523.988472][T11213] vlan3: entered promiscuous mode [ 524.397162][T11216] syzkaller0: entered promiscuous mode [ 524.495380][T11216] syzkaller0: entered allmulticast mode [ 526.597865][T11240] NILFS (nullb0): couldn't find nilfs on the device [ 527.398117][ T6662] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 527.413796][ T6682] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 527.414177][ T788] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 527.468297][ T6662] dvb_usb_az6027: probe of 2-1:0.0 failed with error -2 [ 527.505285][ T6662] usb 2-1: USB disconnect, device number 19 [ 527.510819][ T6682] dvb_usb_az6027: probe of 4-1:0.0 failed with error -110 [ 527.529698][ T788] dvb_usb_az6027: probe of 3-1:0.0 failed with error -2 [ 527.547511][ T6682] usb 4-1: USB disconnect, device number 13 [ 527.597133][ T788] usb 3-1: USB disconnect, device number 16 [ 528.837641][T11259] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 529.926732][T11266] syzkaller0: entered promiscuous mode [ 529.935709][T11266] syzkaller0: entered allmulticast mode [ 531.022079][T11282] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 531.458517][T11295] syzkaller0: entered promiscuous mode [ 531.469338][T11295] syzkaller0: entered allmulticast mode [ 534.890268][T11331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1691'. [ 536.668030][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 536.769727][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1699'. [ 537.146275][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1703'. [ 537.927266][T11378] block device autoloading is deprecated and will be removed. [ 537.954065][T11375] block device autoloading is deprecated and will be removed. [ 538.121015][T11375] md: md2 stopped. [ 540.458922][T11400] NILFS (nullb0): couldn't find nilfs on the device [ 541.483346][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1715'. [ 542.030467][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 542.054105][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1717'. [ 543.421192][ T788] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 543.631455][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 543.738614][ T788] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 543.863331][ T788] usb 2-1: config 251 has no interface number 0 [ 544.024958][ T788] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 544.531906][ T788] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 544.543886][ T788] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 544.566261][ T788] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 544.637216][ T788] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.706089][ T788] usb 2-1: config 251 interface 202 has no altsetting 0 [ 544.753626][ T788] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 544.762950][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.770992][ T788] usb 2-1: Product: syz [ 544.776527][ T788] usb 2-1: Manufacturer: syz [ 544.801291][ T788] usb 2-1: SerialNumber: syz [ 544.812014][T11425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 547.376062][ T788] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 547.462441][ T788] usb 2-1: USB disconnect, device number 20 [ 551.001217][ T788] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 551.191579][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 551.207589][ T788] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 551.256522][ T788] usb 2-1: config 251 has no interface number 0 [ 551.340897][ T788] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 551.463485][ T788] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 551.523656][ T788] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 551.826196][ T788] usb 2-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 551.843160][ T788] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.856792][ T788] usb 2-1: config 251 interface 202 has no altsetting 0 [ 551.868638][ T788] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 551.878146][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.886507][ T788] usb 2-1: Product: syz [ 551.890726][ T788] usb 2-1: Manufacturer: syz [ 551.895963][ T788] usb 2-1: SerialNumber: syz [ 551.931841][T11468] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.228559][ T788] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 552.274615][ T788] usb 2-1: USB disconnect, device number 21 [ 553.125432][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1747'. [ 557.113743][T11537] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1759'. [ 557.311433][ T6680] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 557.551396][ T6680] usb 3-1: Using ep0 maxpacket: 16 [ 557.907264][ T6680] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 558.040909][ T6680] usb 3-1: config 251 has no interface number 0 [ 558.118677][ T6680] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 558.239206][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 558.340270][ T6680] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 558.456640][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 558.491672][ T6680] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.524083][ T6680] usb 3-1: config 251 interface 202 has no altsetting 0 [ 558.565994][ T6680] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 558.581265][ T6680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.595630][ T6680] usb 3-1: Product: syz [ 558.599895][ T6680] usb 3-1: Manufacturer: syz [ 558.611112][ T6680] usb 3-1: SerialNumber: syz [ 558.654216][T11532] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 560.808134][T11567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1770'. [ 560.861164][ T6680] cxacru 3-1:251.202: usbatm_usb_probe: bind failed: -19! [ 561.201591][ T6680] usb 3-1: USB disconnect, device number 17 [ 562.474591][T11590] binder: binder_mmap: 11585 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 563.216046][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.371332][T11620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1781'. [ 565.048003][ T788] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 565.270526][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 565.314582][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.358768][ T788] usb 2-1: Product: syz [ 565.375256][ T788] usb 2-1: Manufacturer: syz [ 565.396657][ T788] usb 2-1: SerialNumber: syz [ 565.502656][ T788] usb 2-1: config 0 descriptor?? [ 566.502305][ T788] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 568.664357][ T788] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 568.680825][ T788] usb 2-1: USB disconnect, device number 22 [ 571.641192][ T6680] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 571.847509][ T6680] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 571.867210][ T6680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.878687][ T6680] usb 2-1: Product: syz [ 571.883261][ T6680] usb 2-1: Manufacturer: syz [ 571.888758][ T6680] usb 2-1: SerialNumber: syz [ 571.905915][ T6680] usb 2-1: config 0 descriptor?? [ 572.205984][ T6680] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 573.433707][ T6680] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 573.491915][ T6680] usb 2-1: USB disconnect, device number 23 [ 573.984688][T11697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 574.044682][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1811'. [ 579.092436][T11730] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 579.810179][ T6683] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 580.106450][ T6683] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 580.118666][ T6683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.131229][ T6683] usb 3-1: Product: syz [ 580.149932][ T6683] usb 3-1: Manufacturer: syz [ 580.162044][ T6683] usb 3-1: SerialNumber: syz [ 580.196818][ T6683] usb 3-1: config 0 descriptor?? [ 580.961667][ T6683] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 582.343467][ T6683] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 582.356534][ T6683] usb 3-1: USB disconnect, device number 18 [ 586.025673][T11777] netlink: 'syz.1.1838': attribute type 1 has an invalid length. [ 586.093511][T11777] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.253992][T11779] bond5: (slave veth3): Enslaving as an active interface with a down link [ 586.496964][T11777] vlan3: entered allmulticast mode [ 586.504326][T11777] veth0_to_bond: entered allmulticast mode [ 586.774388][T11777] bond5: (slave vlan3): Opening slave failed [ 587.621316][ T6664] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 587.859056][ T6664] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 587.961254][ T6664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.969517][ T6664] usb 4-1: Product: syz [ 587.974336][ T6664] usb 4-1: Manufacturer: syz [ 587.979103][ T6664] usb 4-1: SerialNumber: syz [ 588.071554][ T6664] usb 4-1: config 0 descriptor?? [ 588.315597][ T6664] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 588.711278][ T6683] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 589.095606][ T6683] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.108123][ T6683] usb 2-1: not running at top speed; connect to a high speed hub [ 589.475567][ T6683] usb 2-1: config 1 interface 0 altsetting 28 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 589.494064][ T6683] usb 2-1: config 1 interface 0 altsetting 28 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.512865][ T6683] usb 2-1: config 1 interface 0 has no altsetting 0 [ 589.527936][ T6683] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 589.537367][ T6683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.546344][ T6683] usb 2-1: Product: syz [ 589.554609][ T6664] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 589.573201][ T6683] usb 2-1: Manufacturer: syz [ 589.575698][ T6664] usb 4-1: USB disconnect, device number 14 [ 589.606181][ T6683] usb 2-1: SerialNumber: syz [ 589.675205][T11807] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 590.072504][ T6683] usbhid 2-1:1.0: can't add hid device: -71 [ 590.084363][ T6683] usbhid: probe of 2-1:1.0 failed with error -71 [ 590.157622][ T6683] usb 2-1: USB disconnect, device number 24 [ 592.149042][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1858'. [ 592.831206][ T788] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 593.053758][ T788] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 593.087816][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.116603][ T788] usb 1-1: Product: syz [ 593.127393][ T788] usb 1-1: Manufacturer: syz [ 593.141576][ T788] usb 1-1: SerialNumber: syz [ 593.171560][ T788] usb 1-1: config 0 descriptor?? [ 593.418579][ T788] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 595.987999][ T788] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 596.038813][ T788] usb 1-1: USB disconnect, device number 20 [ 596.099063][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 596.118507][T11875] vlan2: entered promiscuous mode [ 596.130902][T11875] bridge0: entered promiscuous mode [ 596.328860][T11878] vivid-001: disconnect [ 596.431252][T11878] vivid-001: reconnect [ 603.393944][T11938] syzkaller0: entered promiscuous mode [ 603.399459][T11938] syzkaller0: entered allmulticast mode [ 608.672633][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 608.697450][T11971] vlan3: entered promiscuous mode [ 608.702710][T11971] bridge0: entered promiscuous mode [ 609.676442][T11981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 612.470329][T12011] syzkaller0: entered promiscuous mode [ 612.478629][T12011] syzkaller0: entered allmulticast mode [ 618.102532][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 618.145527][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 618.763255][T12061] syzkaller0: entered promiscuous mode [ 618.768852][T12061] syzkaller0: entered allmulticast mode [ 619.579145][ T6683] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 619.779082][ T6683] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 619.804987][ T6683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.813866][ T6683] usb 2-1: Product: syz [ 619.818175][ T6683] usb 2-1: Manufacturer: syz [ 619.839969][ T6683] usb 2-1: SerialNumber: syz [ 619.852739][ T6683] usb 2-1: config 0 descriptor?? [ 620.077974][ T6683] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 620.365372][T12074] syzkaller0: entered promiscuous mode [ 620.371530][T12074] syzkaller0: entered allmulticast mode [ 622.059497][ T6683] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 622.075465][ T6683] usb 2-1: USB disconnect, device number 25 [ 624.660285][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.221974][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 626.104121][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 628.691164][ T788] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 628.791251][ T6683] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 628.871522][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 628.884865][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 628.909855][ T788] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 628.920212][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.928691][ T788] usb 3-1: Product: syz [ 628.933202][ T788] usb 3-1: Manufacturer: syz [ 628.937993][ T788] usb 3-1: SerialNumber: syz [ 628.945758][ T788] usb 3-1: config 0 descriptor?? [ 628.955026][ T788] hub 3-1:0.0: bad descriptor, ignoring hub [ 628.961344][ T788] hub: probe of 3-1:0.0 failed with error -5 [ 628.974713][ T788] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 629.001169][ T6683] usb 1-1: Using ep0 maxpacket: 32 [ 629.008590][ T6683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.031580][ T6683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.066114][ T6683] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.105727][ T6683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.147012][ T6683] usb 1-1: config 0 descriptor?? [ 629.164926][ T6683] hub 1-1:0.0: USB hub found [ 629.387034][ T6683] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 629.423823][ T6680] usb 3-1: USB disconnect, device number 19 [ 629.806410][ T6683] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 629.873832][ T6683] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 630.211549][ T6678] usb 1-1: USB disconnect, device number 21 [ 630.227601][T12134] syzkaller0: entered promiscuous mode [ 630.237359][T12134] syzkaller0: entered allmulticast mode [ 634.741707][T12180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1953'. [ 638.380115][T12200] syzkaller0: entered promiscuous mode [ 638.400467][T12200] syzkaller0: entered allmulticast mode [ 644.423519][T12213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1963'. [ 644.530743][T12229] tap0: tun_chr_ioctl cmd 1074025677 [ 644.541839][T12229] tap0: linktype set to 778 [ 644.825855][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 646.201393][T12246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 646.563166][T12250] fuse: Bad value for 'fd' [ 647.767274][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1976'. [ 648.650603][T12266] syzkaller0: entered promiscuous mode [ 648.668981][T12266] syzkaller0: entered allmulticast mode [ 650.783554][T12288] fuse: Bad value for 'fd' [ 652.152562][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 655.232814][ T6683] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 655.631428][ T6683] usb 2-1: config 0 has no interfaces? [ 655.734679][ T6683] usb 2-1: string descriptor 0 read error: -22 [ 655.868147][ T6683] usb 2-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice= 7.1c [ 656.027892][ T6683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.050702][ T6683] usb 2-1: config 0 descriptor?? [ 656.295609][T11100] usb 2-1: USB disconnect, device number 26 [ 656.420604][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1991'. [ 656.909662][T12321] vlan3: entered promiscuous mode [ 657.449707][T12326] syzkaller0: entered promiscuous mode [ 657.487978][T12326] syzkaller0: entered allmulticast mode [ 661.144966][T12356] lo: entered promiscuous mode [ 661.165177][T12356] lo: left promiscuous mode [ 662.274946][T12372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2003'. [ 665.595487][T12397] syzkaller0: entered promiscuous mode [ 665.621247][T12397] syzkaller0: entered allmulticast mode [ 666.965823][ T6680] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 667.178938][ T6680] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 667.189637][ T6680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.203611][ T6680] usb 4-1: Product: syz [ 667.208042][ T6680] usb 4-1: Manufacturer: syz [ 667.222103][ T6680] usb 4-1: SerialNumber: syz [ 667.233783][ T6680] usb 4-1: config 0 descriptor?? [ 667.489872][ T6680] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 668.107582][ T6680] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 668.786514][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2013'. [ 668.801322][T12400] vlan3: entered promiscuous mode [ 668.806461][T12400] bridge0: entered promiscuous mode [ 668.812935][T12403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2014'. [ 669.783371][T11100] usb 4-1: USB disconnect, device number 15 [ 670.021228][ T6680] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 670.110650][T12409] ALSA: mixer_oss: invalid OSS volume '' [ 670.293617][ T6680] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.138349][ T6680] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 671.186928][ T6680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.206743][ T6680] usb 3-1: config 0 descriptor?? [ 671.219044][ T6680] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 672.799800][T12445] syzkaller0: entered promiscuous mode [ 672.815760][T12445] syzkaller0: entered allmulticast mode [ 672.866169][ T6662] usb 3-1: USB disconnect, device number 20 [ 675.818063][T12448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2025'. [ 675.838071][T12448] vlan2: entered promiscuous mode [ 676.983494][T12452] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 679.372767][T12476] syzkaller0: entered promiscuous mode [ 679.400687][T12476] syzkaller0: entered allmulticast mode [ 679.431390][T11100] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 679.446904][T12484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2035'. [ 679.640323][T11100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.650756][T11100] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 679.654125][ T6680] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 679.667901][T11100] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 679.677451][T11100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.685949][T11100] usb 1-1: Product: syz [ 679.690178][T11100] usb 1-1: Manufacturer: syz [ 679.695334][T11100] usb 1-1: SerialNumber: syz [ 679.896151][ T6680] usb 2-1: Using ep0 maxpacket: 8 [ 679.912919][ T6680] usb 2-1: config 0 has no interfaces? [ 679.930421][ T6680] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 679.940393][ T6680] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 679.961879][ T6680] usb 2-1: Product: syz [ 679.966129][ T6680] usb 2-1: Manufacturer: syz [ 679.970785][ T6680] usb 2-1: SerialNumber: syz [ 680.005493][ T6680] usb 2-1: config 0 descriptor?? [ 680.079074][T11100] usb 1-1: USB disconnect, device number 22 [ 680.218073][ T6683] usb 2-1: USB disconnect, device number 27 [ 680.270026][T12309] udevd[12309]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.472816][T12503] ubi16: attaching mtd0 [ 684.497878][T12503] ubi16: scanning is finished [ 684.507421][T12503] ubi16: empty MTD device detected [ 684.984758][T12508] macvlan2: entered promiscuous mode [ 685.074478][T12503] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 685.119597][T12503] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 685.160752][T12503] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 685.216673][T12503] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 685.268469][T12503] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 685.335671][T12503] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 685.420765][T12503] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2469199964 [ 685.494978][T12503] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 685.583309][T12515] ubi16: background thread "ubi_bgt16d" started, PID 12515 [ 686.089177][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.331111][ T6678] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 691.771205][T12555] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 692.573495][T12555] wlan1 speed is unknown, defaulting to 1000 [ 692.580030][T12555] wlan1 speed is unknown, defaulting to 1000 [ 692.589578][T12555] wlan1 speed is unknown, defaulting to 1000 [ 692.602678][T12555] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 692.617787][T12555] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 693.082784][ T6678] usb 4-1: Using ep0 maxpacket: 8 [ 693.092773][ T6678] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.103491][ T6678] usb 4-1: config 0 has no interfaces? [ 693.109032][ T6678] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 693.164491][ T6678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.190065][T12555] wlan1 speed is unknown, defaulting to 1000 [ 693.204958][T12555] wlan1 speed is unknown, defaulting to 1000 [ 693.206319][ T6678] usb 4-1: config 0 descriptor?? [ 693.303918][T12555] wlan1 speed is unknown, defaulting to 1000 [ 693.311715][T12555] wlan1 speed is unknown, defaulting to 1000 [ 693.601596][ T6678] usb 4-1: USB disconnect, device number 16 [ 693.718953][T12563] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 693.741620][T12563] vlan3: entered promiscuous mode [ 697.851084][T11100] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 698.445494][T11100] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 698.474066][T11100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.553106][T11100] usb 2-1: Product: syz [ 698.568681][T11100] usb 2-1: Manufacturer: syz [ 698.583538][T11100] usb 2-1: SerialNumber: syz [ 698.610369][T11100] usb 2-1: config 0 descriptor?? [ 698.839054][T11100] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 700.494103][T11100] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 700.952798][T12616] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 701.901686][ T6680] usb 2-1: USB disconnect, device number 28 [ 703.921198][ T6680] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 704.252952][T12624] Bluetooth: hci4: command 0x1003 tx timeout [ 704.253043][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 706.394221][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2081'. [ 706.867275][ T6680] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 707.134804][ T6680] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 707.158694][ T6680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.353641][ T6680] usb 2-1: Product: syz [ 707.362917][ T6680] usb 2-1: Manufacturer: syz [ 707.371395][ T6680] usb 2-1: SerialNumber: syz [ 707.380305][ T6680] usb 2-1: config 0 descriptor?? [ 708.028193][ T6680] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 708.676134][ T6680] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 709.993629][ T6683] usb 2-1: USB disconnect, device number 29 [ 712.911218][ T6662] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 713.021099][ T788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 713.126578][ T6662] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 713.146587][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.164586][ T6662] usb 1-1: Product: syz [ 713.168835][ T6662] usb 1-1: Manufacturer: syz [ 713.177622][ T6662] usb 1-1: SerialNumber: syz [ 713.408183][ T6662] usb 1-1: config 0 descriptor?? [ 713.421202][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 713.429273][ T788] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 713.439357][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.403680][ T788] usb 4-1: config 0 descriptor?? [ 714.416382][ T6662] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 714.620750][ T788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 714.650513][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 714.678371][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 714.686533][ T788] usb 4-1: media controller created [ 714.750860][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.835609][ T788] az6027: usb out operation failed. (-71) [ 714.862361][ T788] az6027: usb out operation failed. (-71) [ 714.868317][ T788] stb0899_attach: Driver disabled by Kconfig [ 714.880321][ T788] az6027: no front-end attached [ 714.880321][ T788] [ 714.890279][ T788] az6027: usb out operation failed. (-71) [ 714.901824][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 714.930865][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 714.970023][ T788] dvb-usb: schedule remote query interval to 400 msecs. [ 714.991286][ T788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 715.026312][ T788] usb 4-1: USB disconnect, device number 18 [ 715.036428][ T6662] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 715.159251][ T788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 716.287758][ T6662] usb 1-1: USB disconnect, device number 23 [ 717.941197][ T6662] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 718.131114][ T6662] usb 4-1: Using ep0 maxpacket: 32 [ 718.147096][ T6662] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 718.161176][ T6662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.172402][ T6662] usb 4-1: config 0 descriptor?? [ 718.394590][ T6662] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 718.412503][ T6662] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 718.462432][ T6662] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 718.475664][ T6662] usb 4-1: media controller created [ 718.559638][ T6662] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 718.661966][ T6662] az6027: usb out operation failed. (-71) [ 718.685943][ T6662] az6027: usb out operation failed. (-71) [ 718.699822][ T6662] stb0899_attach: Driver disabled by Kconfig [ 718.722174][ T6662] az6027: no front-end attached [ 718.722174][ T6662] [ 718.758030][ T6662] az6027: usb out operation failed. (-71) [ 718.778279][ T6662] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 718.816639][ T6662] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input56 [ 718.858895][ T6662] dvb-usb: schedule remote query interval to 400 msecs. [ 718.881910][ T6662] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 718.939531][ T6662] usb 4-1: USB disconnect, device number 19 [ 719.059137][ T6662] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 721.711164][ T788] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 721.907057][ T788] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 721.920501][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.930103][ T788] usb 4-1: Product: syz [ 721.935304][ T788] usb 4-1: Manufacturer: syz [ 721.940400][ T788] usb 4-1: SerialNumber: syz [ 721.950277][ T788] usb 4-1: config 0 descriptor?? [ 722.227639][ T788] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 723.361884][ T788] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 723.804345][T12799] block device autoloading is deprecated and will be removed. [ 723.819887][T12793] block device autoloading is deprecated and will be removed. [ 723.842294][T12793] md: md2 stopped. [ 724.496931][ T6680] usb 4-1: USB disconnect, device number 20 [ 727.081356][ T6683] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 728.182241][T12824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.295448][ T6683] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 728.304969][ T6683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.325266][ T6683] usb 1-1: Product: syz [ 728.329515][ T6683] usb 1-1: Manufacturer: syz [ 728.345650][ T6683] usb 1-1: SerialNumber: syz [ 728.383312][ T6683] usb 1-1: config 0 descriptor?? [ 728.698359][ T6683] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 729.940331][ T6683] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 730.511112][ T6683] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 730.824758][ T6683] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.034114][ T6683] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 731.149569][ T6683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.183724][ T6680] usb 1-1: USB disconnect, device number 24 [ 731.193062][ T6683] usb 2-1: config 0 descriptor?? [ 731.233194][ T6683] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 731.466906][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 731.510914][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2146'. [ 732.213662][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.572334][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.765395][T11100] usb 2-1: USB disconnect, device number 30 [ 734.562090][ T788] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 735.104006][ T788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 735.113440][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.122004][ T788] usb 3-1: Product: syz [ 735.126290][ T788] usb 3-1: Manufacturer: syz [ 735.131388][ T788] usb 3-1: SerialNumber: syz [ 735.138706][ T788] usb 3-1: config 0 descriptor?? [ 735.373206][ T788] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 735.572640][ T6683] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 735.801951][ T6683] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 735.810038][ T6683] usb 2-1: config 0 has no interface number 0 [ 735.840237][ T6683] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.870452][ T6683] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.996498][ T6683] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 736.142806][ T6683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.353904][ T6683] usb 2-1: config 0 descriptor?? [ 736.395699][ T6680] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 736.454026][ T788] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 736.753994][ T6680] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.773310][ T6680] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 736.786347][ T6680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.807978][ T6680] usb 4-1: config 0 descriptor?? [ 736.830822][ T6680] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 736.926610][ T6683] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0005/input/input60 [ 737.127030][ T6683] holtek_kbd 0003:04D9:A055.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 737.164717][ T6683] usb 2-1: USB disconnect, device number 31 [ 737.342743][T13060] fido_id[13060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 737.513892][ T6680] usb 3-1: USB disconnect, device number 21 [ 737.782730][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.783066][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.003332][T13091] syzkaller0: entered promiscuous mode [ 738.003351][T13091] syzkaller0: entered allmulticast mode [ 739.604728][ T788] usb 4-1: USB disconnect, device number 21 [ 739.752816][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 739.757106][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2168'. [ 740.191289][ T788] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 740.375477][ T788] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 740.375502][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.375517][ T788] usb 4-1: Product: syz [ 740.375528][ T788] usb 4-1: Manufacturer: syz [ 740.375538][ T788] usb 4-1: SerialNumber: syz [ 740.823568][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 741.450307][T13135] bond0: entered promiscuous mode [ 741.455599][T13135] bond_slave_0: entered promiscuous mode [ 741.462362][T13135] bond_slave_1: entered promiscuous mode [ 741.482738][T13135] batadv0: entered promiscuous mode [ 741.497605][T13135] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 742.785996][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 742.962315][T13145] syzkaller0: entered promiscuous mode [ 742.968178][T13145] syzkaller0: entered allmulticast mode [ 743.010749][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 743.048359][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 743.079337][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 743.098016][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 743.112692][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 743.127422][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 743.151752][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 743.259904][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 743.395349][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 743.430808][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 743.469597][ T788] lan78xx: probe of 4-1:1.0 failed with error -71 [ 743.534466][ T788] usb 4-1: USB disconnect, device number 22 [ 744.851689][ T6681] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 745.063381][ T6681] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 745.099020][ T6681] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 745.137135][ T6681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.157072][ T6681] usb 3-1: config 0 descriptor?? [ 745.171220][ T788] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 745.182267][ T6681] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 745.403557][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 745.433618][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 745.501519][ T788] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 745.510829][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.542889][ T788] usb 1-1: Product: syz [ 745.556428][ T788] usb 1-1: Manufacturer: syz [ 745.581114][ T788] usb 1-1: SerialNumber: syz [ 745.589697][ T788] usb 1-1: config 0 descriptor?? [ 745.599141][ T788] hub 1-1:0.0: bad descriptor, ignoring hub [ 745.612010][ T788] hub: probe of 1-1:0.0 failed with error -5 [ 745.622921][ T788] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input63 [ 746.112408][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 746.122461][ T5780] CPU: 0 PID: 5780 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 746.130180][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 746.140289][ T5780] Workqueue: hci3 hci_rx_work [ 746.145049][ T5780] Call Trace: [ 746.148390][ T5780] [ 746.151363][ T5780] dump_stack_lvl+0x18c/0x250 [ 746.156098][ T5780] ? show_regs_print_info+0x20/0x20 [ 746.161357][ T5780] ? load_image+0x420/0x420 [ 746.165919][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 746.171078][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 746.175811][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 746.181055][ T5780] kobject_add_internal+0x61c/0xcc0 [ 746.186390][ T5780] kobject_add+0x164/0x240 [ 746.190841][ T5780] ? __rwlock_init+0x150/0x150 [ 746.195697][ T5780] ? kobject_init+0x1e0/0x1e0 [ 746.200521][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 746.205469][ T5780] ? get_device_parent+0x366/0x390 [ 746.210645][ T5780] device_add+0x408/0xc20 [ 746.215027][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 746.220009][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 746.225328][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 746.230494][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 746.236968][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 746.242667][ T5780] ? skb_pull_data+0xfb/0x200 [ 746.247513][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 746.253300][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 746.259601][ T5780] hci_event_packet+0x7ba/0x1270 [ 746.264597][ T5780] ? bis_list+0x290/0x290 [ 746.268976][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 746.274225][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 746.279471][ T5780] hci_rx_work+0x43a/0xd60 [ 746.283964][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 746.289745][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 746.295390][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 746.300904][ T5780] ? assign_work+0x3d2/0x5d0 [ 746.305552][ T5780] worker_thread+0xa55/0xfc0 [ 746.310219][ T5780] kthread+0x2fa/0x390 [ 746.314325][ T5780] ? pr_cont_work+0x560/0x560 [ 746.319046][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 746.323705][ T5780] ret_from_fork+0x48/0x80 [ 746.328168][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 746.332797][ T5780] ret_from_fork_asm+0x11/0x20 [ 746.337619][ T5780] [ 746.346740][ T5780] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 746.361038][ T5780] Bluetooth: hci3: failed to register connection device [ 746.421776][ T788] usb 1-1: USB disconnect, device number 25 [ 747.209088][ T6681] usb 3-1: USB disconnect, device number 22 [ 747.279189][T13230] syzkaller0: entered promiscuous mode [ 747.290860][T13230] syzkaller0: entered allmulticast mode [ 747.311199][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 747.354106][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'. [ 747.588651][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.401108][T12624] Bluetooth: hci3: command 0x0406 tx timeout [ 750.234202][T13268] lo speed is unknown, defaulting to 1000 [ 750.240648][T13268] lo speed is unknown, defaulting to 1000 [ 750.253795][T13268] lo speed is unknown, defaulting to 1000 [ 750.318450][T13268] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 750.588410][T13268] lo speed is unknown, defaulting to 1000 [ 750.642131][T13268] lo speed is unknown, defaulting to 1000 [ 750.657838][T13268] lo speed is unknown, defaulting to 1000 [ 750.672133][T13268] lo speed is unknown, defaulting to 1000 [ 751.595456][ T6680] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 752.220316][T13299] syzkaller0: entered promiscuous mode [ 752.227625][T13299] syzkaller0: entered allmulticast mode [ 752.311094][ T6680] usb 2-1: Using ep0 maxpacket: 16 [ 752.318765][ T6680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 752.344233][ T6680] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 752.371314][ T6680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.379410][ T6680] usb 2-1: Product: syz [ 752.401565][ T6680] usb 2-1: Manufacturer: syz [ 752.406340][ T6680] usb 2-1: SerialNumber: syz [ 752.418371][ T6680] usb 2-1: config 0 descriptor?? [ 752.431154][ T6681] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 752.446247][ T6680] hub 2-1:0.0: bad descriptor, ignoring hub [ 752.452885][ T6680] hub: probe of 2-1:0.0 failed with error -5 [ 752.468911][ T6680] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input65 [ 752.617557][ T6681] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 752.689214][ T6681] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 752.713307][ T6681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.728979][ T6681] usb 3-1: config 0 descriptor?? [ 753.036804][ T6681] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 753.462889][T11100] usb 2-1: USB disconnect, device number 32 [ 754.154474][T12624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 754.164149][T12624] CPU: 1 PID: 12624 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 754.171980][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.182055][T12624] Workqueue: hci3 hci_rx_work [ 754.186782][T12624] Call Trace: [ 754.190076][T12624] [ 754.193039][T12624] dump_stack_lvl+0x18c/0x250 [ 754.197763][T12624] ? show_regs_print_info+0x20/0x20 [ 754.202993][T12624] ? load_image+0x420/0x420 [ 754.207532][T12624] sysfs_create_dir_ns+0x26e/0x2a0 [ 754.212686][T12624] ? sysfs_warn_dup+0xa0/0xa0 [ 754.217424][T12624] ? do_raw_spin_unlock+0x121/0x230 [ 754.222682][T12624] kobject_add_internal+0x61c/0xcc0 [ 754.227911][T12624] kobject_add+0x164/0x240 [ 754.232347][T12624] ? __rwlock_init+0x150/0x150 [ 754.237130][T12624] ? kobject_init+0x1e0/0x1e0 [ 754.241841][T12624] ? _raw_spin_unlock+0x28/0x40 [ 754.246727][T12624] ? get_device_parent+0x366/0x390 [ 754.251881][T12624] device_add+0x408/0xc20 [ 754.256262][T12624] hci_conn_add_sysfs+0xd5/0x1e0 [ 754.261390][T12624] le_conn_complete_evt+0xf5d/0x1540 [ 754.266856][T12624] ? hci_event_packet+0x4cb/0x1270 [ 754.271991][T12624] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 754.278386][T12624] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 754.284093][T12624] ? skb_pull_data+0xfb/0x200 [ 754.288797][T12624] hci_le_conn_complete_evt+0x187/0x440 [ 754.294372][T12624] ? hci_remote_host_features_evt+0x150/0x150 [ 754.300466][T12624] hci_event_packet+0x7ba/0x1270 [ 754.305432][T12624] ? bis_list+0x290/0x290 [ 754.309794][T12624] ? lockdep_hardirqs_on+0x98/0x150 [ 754.315114][T12624] ? hci_send_to_monitor+0xd7/0x4f0 [ 754.320357][T12624] hci_rx_work+0x43a/0xd60 [ 754.324840][T12624] ? process_scheduled_works+0x96f/0x15d0 [ 754.330601][T12624] process_scheduled_works+0xa5d/0x15d0 [ 754.336214][T12624] ? worker_attach_to_pool+0x380/0x380 [ 754.341702][T12624] ? assign_work+0x3d2/0x5d0 [ 754.346320][T12624] worker_thread+0xa55/0xfc0 [ 754.351391][T12624] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 754.357332][T12624] ? _raw_spin_unlock+0x40/0x40 [ 754.362213][T12624] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 754.368158][T12624] kthread+0x2fa/0x390 [ 754.372262][T12624] ? pr_cont_work+0x560/0x560 [ 754.376975][T12624] ? kthread_blkcg+0xd0/0xd0 [ 754.381628][T12624] ret_from_fork+0x48/0x80 [ 754.386061][T12624] ? kthread_blkcg+0xd0/0xd0 [ 754.390665][T12624] ret_from_fork_asm+0x11/0x20 [ 754.395465][T12624] [ 754.400567][T12624] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 754.414781][T12624] Bluetooth: hci3: failed to register connection device [ 755.872286][ T6682] usb 3-1: USB disconnect, device number 23 [ 756.036719][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 756.079063][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2200'. [ 756.700066][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 756.862995][T13370] syzkaller0: entered promiscuous mode [ 756.868733][T13370] syzkaller0: entered allmulticast mode [ 757.009239][T13336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.261406][ T6682] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 759.453579][ T6682] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.492779][ T6682] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 759.502524][ T6682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.520087][ T6682] usb 2-1: config 0 descriptor?? [ 759.546615][ T6682] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 760.709040][T13427] syzkaller0: entered promiscuous mode [ 760.717028][T13427] syzkaller0: entered allmulticast mode [ 760.901216][ T6662] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 761.101463][ T6662] usb 1-1: Using ep0 maxpacket: 8 [ 761.110333][ T6662] usb 1-1: config 0 has no interfaces? [ 761.118365][ T6662] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 761.128560][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 761.137007][ T6662] usb 1-1: Product: syz [ 761.141412][ T6662] usb 1-1: Manufacturer: syz [ 761.146167][ T6662] usb 1-1: SerialNumber: syz [ 761.306172][ T6662] usb 1-1: config 0 descriptor?? [ 761.912766][ T6682] usb 1-1: USB disconnect, device number 26 [ 761.943645][T12298] udevd[12298]: setting mode of /dev/bus/usb/001/026 to 020664 failed: No such file or directory [ 761.988482][T12298] udevd[12298]: setting owner of /dev/bus/usb/001/026 to uid=0, gid=0 failed: No such file or directory [ 762.006637][ T6662] usb 2-1: USB disconnect, device number 33 [ 762.062555][T13457] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2216'. [ 763.481365][ T6662] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 763.537280][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 763.693571][ T6662] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 763.719419][ T6662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.754360][ T6662] usb 2-1: config 0 descriptor?? [ 764.008503][ T6662] ath6kl: Failed to submit usb control message: -71 [ 764.045469][ T6662] ath6kl: unable to send the bmi data to the device: -71 [ 764.080504][ T6662] ath6kl: Unable to send get target info: -71 [ 764.110484][ T6662] ath6kl: Failed to init ath6kl core: -71 [ 764.148150][ T6662] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 764.218676][ T6662] usb 2-1: USB disconnect, device number 34 [ 765.259642][T13495] syzkaller0: entered promiscuous mode [ 765.265585][T13495] syzkaller0: entered allmulticast mode [ 767.251827][ T6682] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 767.458178][ T6682] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.491218][ T6682] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 767.500380][ T6682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.540253][ T6682] usb 4-1: config 0 descriptor?? [ 767.558065][ T6682] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 767.641443][T11100] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 767.878876][T11100] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 767.889775][T11100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.915199][T11100] usb 1-1: Product: syz [ 767.919445][T11100] usb 1-1: Manufacturer: syz [ 767.951856][T11100] usb 1-1: SerialNumber: syz [ 768.073511][T12624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.085621][T12624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.100771][T12624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.111272][T13512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.120149][T13512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.133297][T12624] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 768.144565][T12624] CPU: 1 PID: 12624 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 768.148294][T13553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.152260][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 768.152301][T12624] Workqueue: hci2 hci_rx_work [ 768.152341][T12624] Call Trace: [ 768.152350][T12624] [ 768.152359][T12624] dump_stack_lvl+0x18c/0x250 [ 768.152401][T12624] ? show_regs_print_info+0x20/0x20 [ 768.152436][T12624] ? load_image+0x420/0x420 [ 768.152478][T12624] sysfs_create_dir_ns+0x26e/0x2a0 [ 768.152506][T12624] ? sysfs_warn_dup+0xa0/0xa0 [ 768.152529][T12624] ? do_raw_spin_unlock+0x121/0x230 [ 768.152571][T12624] kobject_add_internal+0x61c/0xcc0 [ 768.152610][T12624] kobject_add+0x164/0x240 [ 768.152636][T12624] ? __rwlock_init+0x150/0x150 [ 768.152668][T12624] ? kobject_init+0x1e0/0x1e0 [ 768.152696][T12624] ? _raw_spin_unlock+0x28/0x40 [ 768.152731][T12624] ? get_device_parent+0x366/0x390 [ 768.152768][T12624] device_add+0x408/0xc20 [ 768.228627][T13553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 768.229758][T12624] hci_conn_add_sysfs+0xd5/0x1e0 [ 768.229797][T12624] le_conn_complete_evt+0xf5d/0x1540 [ 768.261472][T12624] ? hci_event_packet+0x4cb/0x1270 [ 768.266633][T12624] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 768.272916][T12624] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 768.278679][T12624] ? skb_pull_data+0xfb/0x200 [ 768.283400][T12624] hci_le_conn_complete_evt+0x187/0x440 [ 768.289084][T12624] ? hci_remote_host_features_evt+0x150/0x150 [ 768.295222][T12624] hci_event_packet+0x7ba/0x1270 [ 768.300301][T12624] ? bis_list+0x290/0x290 [ 768.304675][T12624] ? lockdep_hardirqs_on+0x98/0x150 [ 768.309999][T12624] ? hci_send_to_monitor+0xd7/0x4f0 [ 768.315237][T12624] hci_rx_work+0x43a/0xd60 [ 768.319721][T12624] ? process_scheduled_works+0x96f/0x15d0 [ 768.325476][T12624] process_scheduled_works+0xa5d/0x15d0 [ 768.331091][T12624] ? worker_attach_to_pool+0x380/0x380 [ 768.336596][T12624] ? assign_work+0x3d2/0x5d0 [ 768.341239][T12624] worker_thread+0xa55/0xfc0 [ 768.345887][T12624] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 768.352078][T12624] ? _raw_spin_unlock+0x40/0x40 [ 768.356962][T12624] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 768.362934][T12624] kthread+0x2fa/0x390 [ 768.367034][T12624] ? pr_cont_work+0x560/0x560 [ 768.371748][T12624] ? kthread_blkcg+0xd0/0xd0 [ 768.376367][T12624] ret_from_fork+0x48/0x80 [ 768.380820][T12624] ? kthread_blkcg+0xd0/0xd0 [ 768.385438][T12624] ret_from_fork_asm+0x11/0x20 [ 768.390250][T12624] [ 768.403004][T12624] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 768.425857][T12624] Bluetooth: hci2: failed to register connection device [ 768.428575][T13553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.626908][T11100] net_ratelimit: 1 callbacks suppressed [ 768.626931][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 768.680028][T13545] lo speed is unknown, defaulting to 1000 [ 769.199528][T13545] chnl_net:caif_netlink_parms(): no params data found [ 769.240522][ T6664] usb 4-1: USB disconnect, device number 23 [ 769.888028][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 769.902228][T13668] syzkaller0: entered promiscuous mode [ 769.907763][T13668] syzkaller0: entered allmulticast mode [ 769.926533][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 769.992878][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 770.043812][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 770.057984][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 770.071872][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 770.086561][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 770.101123][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 770.152917][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 770.193656][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 770.261662][T11100] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 770.287318][T11100] lan78xx: probe of 1-1:1.0 failed with error -71 [ 770.332906][T11100] usb 1-1: USB disconnect, device number 27 [ 770.554869][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 770.591683][ T5084] Bluetooth: hci1: command tx timeout [ 770.683321][T13545] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.702554][T13545] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.709881][T13545] bridge_slave_0: entered allmulticast mode [ 770.756662][T13545] bridge_slave_0: entered promiscuous mode [ 772.078503][T13545] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.126051][T13545] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.257237][T13545] bridge_slave_1: entered allmulticast mode [ 772.380614][T13545] bridge_slave_1: entered promiscuous mode [ 772.673094][T13553] Bluetooth: hci1: command tx timeout [ 772.937368][T13545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.952227][T13545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.036505][T13545] team0: Port device team_slave_0 added [ 774.133563][T13545] team0: Port device team_slave_1 added [ 774.271137][ T6681] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 774.294763][T13545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.311102][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.359247][T13545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.446264][T13545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.456802][ T6681] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.483118][T13545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.575380][ T6681] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 774.607158][ T6681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.634454][T13545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.646916][ T6681] usb 4-1: config 0 descriptor?? [ 774.676985][ T6681] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 774.721542][T13553] Bluetooth: hci1: command tx timeout [ 774.928364][T13545] hsr_slave_0: entered promiscuous mode [ 774.958047][T13545] hsr_slave_1: entered promiscuous mode [ 775.246009][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.254921][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.264341][T13553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 775.277396][T13553] CPU: 1 PID: 13553 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 775.285119][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.295231][T13553] Workqueue: hci2 hci_rx_work [ 775.299991][T13553] Call Trace: [ 775.303319][T13553] [ 775.306303][T13553] dump_stack_lvl+0x18c/0x250 [ 775.311058][T13553] ? show_regs_print_info+0x20/0x20 [ 775.316336][T13553] ? load_image+0x420/0x420 [ 775.320920][T13553] sysfs_create_dir_ns+0x26e/0x2a0 [ 775.326094][T13553] ? sysfs_warn_dup+0xa0/0xa0 [ 775.330837][T13553] ? do_raw_spin_unlock+0x121/0x230 [ 775.336091][T13553] kobject_add_internal+0x61c/0xcc0 [ 775.341358][T13553] kobject_add+0x164/0x240 [ 775.345817][T13553] ? __rwlock_init+0x150/0x150 [ 775.350600][T13553] ? kobject_init+0x1e0/0x1e0 [ 775.355381][T13553] ? _raw_spin_unlock+0x28/0x40 [ 775.360254][T13553] ? get_device_parent+0x366/0x390 [ 775.365392][T13553] device_add+0x408/0xc20 [ 775.369754][T13553] hci_conn_add_sysfs+0xd5/0x1e0 [ 775.374714][T13553] le_conn_complete_evt+0xf5d/0x1540 [ 775.380016][T13553] ? hci_event_packet+0x4cb/0x1270 [ 775.385175][T13553] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 775.391461][T13553] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 775.397204][T13553] ? skb_pull_data+0xfb/0x200 [ 775.401904][T13553] hci_le_conn_complete_evt+0x187/0x440 [ 775.407471][T13553] ? hci_remote_host_features_evt+0x150/0x150 [ 775.413664][T13553] hci_event_packet+0x7ba/0x1270 [ 775.418628][T13553] ? bis_list+0x290/0x290 [ 775.422979][T13553] ? lockdep_hardirqs_on+0x98/0x150 [ 775.428196][T13553] ? hci_send_to_monitor+0xd7/0x4f0 [ 775.433415][T13553] hci_rx_work+0x43a/0xd60 [ 775.437867][T13553] ? process_scheduled_works+0x96f/0x15d0 [ 775.443608][T13553] process_scheduled_works+0xa5d/0x15d0 [ 775.449196][T13553] ? worker_attach_to_pool+0x380/0x380 [ 775.454695][T13553] ? assign_work+0x3d2/0x5d0 [ 775.459352][T13553] worker_thread+0xa55/0xfc0 [ 775.463975][T13553] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 775.469911][T13553] ? _raw_spin_unlock+0x40/0x40 [ 775.474806][T13553] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 775.480762][T13553] kthread+0x2fa/0x390 [ 775.484857][T13553] ? pr_cont_work+0x560/0x560 [ 775.489563][T13553] ? kthread_blkcg+0xd0/0xd0 [ 775.494185][T13553] ret_from_fork+0x48/0x80 [ 775.498623][T13553] ? kthread_blkcg+0xd0/0xd0 [ 775.503238][T13553] ret_from_fork_asm+0x11/0x20 [ 775.508054][T13553] [ 775.512452][T13553] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 775.527255][T13553] Bluetooth: hci2: failed to register connection device [ 775.690391][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.742191][ T8969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.767425][ T8969] bridge_slave_1: left allmulticast mode [ 775.792992][ T8969] bridge_slave_1: left promiscuous mode [ 775.817151][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.863558][ T8969] bridge_slave_0: left allmulticast mode [ 775.879814][ T8969] bridge_slave_0: left promiscuous mode [ 775.905135][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.176806][ T8969] bond5 (unregistering): (slave veth3): Releasing active interface [ 776.522725][ T6682] usb 4-1: USB disconnect, device number 24 [ 776.850482][T13553] Bluetooth: hci1: command tx timeout [ 776.881406][ T8969] bond5 (unregistering): Released all slaves [ 777.618848][T13553] Bluetooth: hci2: command 0x0406 tx timeout [ 777.982666][ T8969] bond4 (unregistering): Released all slaves [ 778.184625][ T8969] bond3 (unregistering): Released all slaves [ 778.353647][ T8969] bond2 (unregistering): Released all slaves [ 778.557794][ T8969] bond1 (unregistering): Released all slaves [ 779.415266][ T8969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.476197][ T8969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.909044][ T8969] bond0 (unregistering): Released all slaves [ 780.841355][ T6662] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 781.033108][ T6662] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 781.162661][ T6662] usb 1-1: config 0 has no interface number 0 [ 781.168863][ T6662] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.204636][ T6662] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.235205][ T6662] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 781.297352][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.339181][ T6662] usb 1-1: config 0 descriptor?? [ 782.115967][ T6662] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 782.129646][ T6662] prodikeys 0003:041E:2801.0006: unknown main item tag 0x0 [ 782.151375][ T6662] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 782.174598][ T6662] hid_prodikeys: hid-prodikeys: failed to find output report [ 782.174598][ T6662] [ 782.240806][ T8969] IPVS: stop unused estimator thread 0... [ 782.341384][ T6680] usb 1-1: USB disconnect, device number 28 [ 782.546283][T14022] fido_id[14022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 782.906470][T13545] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 782.948015][T13545] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 782.963441][T13545] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 782.975869][T13545] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.122783][T13545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.520545][T13545] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.765817][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.774235][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.818215][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.825574][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.093245][ T6664] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 784.132010][ T28] audit: type=1326 audit(2000000148.620:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.156234][ T28] audit: type=1326 audit(2000000148.620:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.185166][ T28] audit: type=1326 audit(2000000148.620:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.210585][ T28] audit: type=1326 audit(2000000148.620:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.233489][ T28] audit: type=1326 audit(2000000148.630:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.283088][ T28] audit: type=1326 audit(2000000148.630:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.310787][ T28] audit: type=1326 audit(2000000148.630:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.350822][ T6664] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 784.371120][ T6664] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 784.405682][ T6664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.424844][ T28] audit: type=1326 audit(2000000148.630:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.457853][ T6664] usb 1-1: config 0 descriptor?? [ 784.464140][ T28] audit: type=1326 audit(2000000148.650:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.494887][ T6664] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 784.522604][T14086] net_ratelimit: 1 callbacks suppressed [ 784.522621][T14086] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 784.564300][ T28] audit: type=1326 audit(2000000148.650:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14084 comm="syz.3.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5106f9c819 code=0x7ffc0000 [ 784.936478][T13545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.042281][T14071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.083303][T14071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.111074][T13553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 785.122950][T13553] CPU: 1 PID: 13553 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 785.130636][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 785.140728][T13553] Workqueue: hci0 hci_rx_work [ 785.145501][T13553] Call Trace: [ 785.149246][T13553] [ 785.152197][T13553] dump_stack_lvl+0x18c/0x250 [ 785.156999][T13553] ? show_regs_print_info+0x20/0x20 [ 785.162253][T13553] ? load_image+0x420/0x420 [ 785.166839][T13553] sysfs_create_dir_ns+0x26e/0x2a0 [ 785.172013][T13553] ? sysfs_warn_dup+0xa0/0xa0 [ 785.177274][T13553] ? do_raw_spin_unlock+0x121/0x230 [ 785.182550][T13553] kobject_add_internal+0x61c/0xcc0 [ 785.187822][T13553] kobject_add+0x164/0x240 [ 785.192309][T13553] ? __rwlock_init+0x150/0x150 [ 785.197150][T13553] ? kobject_init+0x1e0/0x1e0 [ 785.201881][T13553] ? _raw_spin_unlock+0x28/0x40 [ 785.206758][T13553] ? get_device_parent+0x366/0x390 [ 785.211897][T13553] device_add+0x408/0xc20 [ 785.216253][T13553] hci_conn_add_sysfs+0xd5/0x1e0 [ 785.221223][T13553] le_conn_complete_evt+0xf5d/0x1540 [ 785.226710][T13553] ? hci_event_packet+0x4cb/0x1270 [ 785.231868][T13553] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 785.238137][T13553] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 785.243790][T13553] ? skb_pull_data+0xfb/0x200 [ 785.248491][T13553] hci_le_conn_complete_evt+0x187/0x440 [ 785.254077][T13553] ? hci_remote_host_features_evt+0x150/0x150 [ 785.260205][T13553] hci_event_packet+0x7ba/0x1270 [ 785.265221][T13553] ? bis_list+0x290/0x290 [ 785.269624][T13553] ? lockdep_hardirqs_on+0x98/0x150 [ 785.274875][T13553] ? hci_send_to_monitor+0xd7/0x4f0 [ 785.280095][T13553] hci_rx_work+0x43a/0xd60 [ 785.284582][T13553] ? process_scheduled_works+0x96f/0x15d0 [ 785.290351][T13553] process_scheduled_works+0xa5d/0x15d0 [ 785.295946][T13553] ? worker_attach_to_pool+0x380/0x380 [ 785.301454][T13553] ? assign_work+0x3d2/0x5d0 [ 785.306121][T13553] worker_thread+0xa55/0xfc0 [ 785.310882][T13553] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 785.317066][T13553] ? _raw_spin_unlock+0x40/0x40 [ 785.322028][T13553] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 785.327968][T13553] kthread+0x2fa/0x390 [ 785.332071][T13553] ? pr_cont_work+0x560/0x560 [ 785.336788][T13553] ? kthread_blkcg+0xd0/0xd0 [ 785.341405][T13553] ret_from_fork+0x48/0x80 [ 785.345851][T13553] ? kthread_blkcg+0xd0/0xd0 [ 785.350474][T13553] ret_from_fork_asm+0x11/0x20 [ 785.355289][T13553] [ 785.361767][T13553] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 785.376042][T13553] Bluetooth: hci0: failed to register connection device [ 785.423918][T13545] veth0_vlan: entered promiscuous mode [ 785.475472][T13545] veth1_vlan: entered promiscuous mode [ 785.536070][T13545] veth0_macvtap: entered promiscuous mode [ 785.561489][T13545] veth1_macvtap: entered promiscuous mode [ 785.604636][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.636268][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.804616][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.819874][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.834016][T13545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.921332][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.934003][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.949040][T13545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.968868][T13545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.604074][T13545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.627766][T13545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.637020][T13545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.647610][T13545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.656929][T13545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.757946][T11100] usb 1-1: USB disconnect, device number 29 [ 787.114179][T14114] syzkaller0: entered promiscuous mode [ 787.151355][T14114] syzkaller0: entered allmulticast mode [ 787.452420][T13553] Bluetooth: hci0: command 0x0406 tx timeout [ 790.277433][ T8969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.341374][ T8969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.570841][ T8969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.607093][ T8969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.483327][T14224] syzkaller0: entered promiscuous mode [ 795.503879][T14224] syzkaller0: entered allmulticast mode [ 795.531122][ T6680] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 795.746090][ T6680] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.791719][ T6680] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 795.819742][ T6680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.842415][ T6680] usb 1-1: config 0 descriptor?? [ 795.868647][ T6680] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 796.955389][T14213] lo speed is unknown, defaulting to 1000 [ 797.623713][T14214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.632911][T14214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.675937][T13553] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 797.685630][T13553] CPU: 1 PID: 13553 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 797.693327][T13553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.703463][T13553] Workqueue: hci0 hci_rx_work [ 797.708179][T13553] Call Trace: [ 797.711479][T13553] [ 797.714440][T13553] dump_stack_lvl+0x18c/0x250 [ 797.719160][T13553] ? show_regs_print_info+0x20/0x20 [ 797.724400][T13553] ? load_image+0x420/0x420 [ 797.728943][T13553] sysfs_create_dir_ns+0x26e/0x2a0 [ 797.734074][T13553] ? sysfs_warn_dup+0xa0/0xa0 [ 797.738949][T13553] ? do_raw_spin_unlock+0x121/0x230 [ 797.744199][T13553] kobject_add_internal+0x61c/0xcc0 [ 797.749431][T13553] kobject_add+0x164/0x240 [ 797.753869][T13553] ? __rwlock_init+0x150/0x150 [ 797.758683][T13553] ? kobject_init+0x1e0/0x1e0 [ 797.763405][T13553] ? _raw_spin_unlock+0x28/0x40 [ 797.768281][T13553] ? get_device_parent+0x366/0x390 [ 797.773426][T13553] device_add+0x408/0xc20 [ 797.777876][T13553] hci_conn_add_sysfs+0xd5/0x1e0 [ 797.782946][T13553] le_conn_complete_evt+0xf5d/0x1540 [ 797.788253][T13553] ? hci_event_packet+0x4cb/0x1270 [ 797.793401][T13553] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 797.799691][T13553] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 797.805477][T13553] ? skb_pull_data+0xfb/0x200 [ 797.810215][T13553] hci_le_conn_complete_evt+0x187/0x440 [ 797.815792][T13553] ? hci_remote_host_features_evt+0x150/0x150 [ 797.821891][T13553] hci_event_packet+0x7ba/0x1270 [ 797.826874][T13553] ? bis_list+0x290/0x290 [ 797.831242][T13553] ? lockdep_hardirqs_on+0x98/0x150 [ 797.836480][T13553] ? hci_send_to_monitor+0xd7/0x4f0 [ 797.841705][T13553] hci_rx_work+0x43a/0xd60 [ 797.846199][T13553] ? process_scheduled_works+0x96f/0x15d0 [ 797.851938][T13553] process_scheduled_works+0xa5d/0x15d0 [ 797.857529][T13553] ? worker_attach_to_pool+0x380/0x380 [ 797.863016][T13553] ? assign_work+0x3d2/0x5d0 [ 797.867739][T13553] worker_thread+0xa55/0xfc0 [ 797.872400][T13553] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 797.878336][T13553] ? _raw_spin_unlock+0x40/0x40 [ 797.883239][T13553] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 797.889407][T13553] kthread+0x2fa/0x390 [ 797.893542][T13553] ? pr_cont_work+0x560/0x560 [ 797.898282][T13553] ? kthread_blkcg+0xd0/0xd0 [ 797.903023][T13553] ret_from_fork+0x48/0x80 [ 797.907467][T13553] ? kthread_blkcg+0xd0/0xd0 [ 797.912080][T13553] ret_from_fork_asm+0x11/0x20 [ 797.916920][T13553] [ 797.931919][T13553] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 797.946058][T13553] Bluetooth: hci0: failed to register connection device [ 798.316839][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'. [ 798.355353][T14289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2268'. [ 798.831383][ T6664] usb 1-1: USB disconnect, device number 30 [ 800.011073][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 800.168024][T14322] netlink: 'syz.0.2271': attribute type 10 has an invalid length. [ 800.331702][T14322] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 803.403599][T14348] syzkaller0: entered promiscuous mode [ 803.409165][T14348] syzkaller0: entered allmulticast mode [ 803.537795][T14353] syzkaller0: entered promiscuous mode [ 803.571287][T14353] syzkaller0: entered allmulticast mode [ 805.891129][ T6664] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 806.115802][ T6664] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 806.149358][ T6664] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 806.195023][ T6664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.263882][ T6664] usb 3-1: config 0 descriptor?? [ 806.298948][ T6664] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 806.324539][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 806.324556][ T28] audit: type=1804 audit(2000000170.810:108): pid=14389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2280" name="bus" dev="ramfs" ino=32619 res=1 errno=0 [ 806.830745][T14405] futex_wake_op: syz.0.2281 tries to shift op by 144; fix this program [ 807.292526][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.305019][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.372970][ T5084] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 807.382687][ T5084] CPU: 0 PID: 5084 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 807.390292][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 807.400439][ T5084] Workqueue: hci3 hci_rx_work [ 807.405236][ T5084] Call Trace: [ 807.408558][ T5084] [ 807.411544][ T5084] dump_stack_lvl+0x18c/0x250 [ 807.416297][ T5084] ? show_regs_print_info+0x20/0x20 [ 807.421561][ T5084] ? load_image+0x420/0x420 [ 807.426139][ T5084] sysfs_create_dir_ns+0x26e/0x2a0 [ 807.431316][ T5084] ? sysfs_warn_dup+0xa0/0xa0 [ 807.436060][ T5084] ? do_raw_spin_unlock+0x121/0x230 [ 807.441357][ T5084] kobject_add_internal+0x61c/0xcc0 [ 807.446775][ T5084] kobject_add+0x164/0x240 [ 807.451276][ T5084] ? __rwlock_init+0x150/0x150 [ 807.456465][ T5084] ? kobject_init+0x1e0/0x1e0 [ 807.461223][ T5084] ? _raw_spin_unlock+0x28/0x40 [ 807.466152][ T5084] ? get_device_parent+0x366/0x390 [ 807.471331][ T5084] device_add+0x408/0xc20 [ 807.475730][ T5084] hci_conn_add_sysfs+0xd5/0x1e0 [ 807.480732][ T5084] le_conn_complete_evt+0xf5d/0x1540 [ 807.486167][ T5084] ? hci_event_packet+0x4cb/0x1270 [ 807.491355][ T5084] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 807.497707][ T5084] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 807.503401][ T5084] ? skb_pull_data+0xfb/0x200 [ 807.508146][ T5084] hci_le_conn_complete_evt+0x187/0x440 [ 807.513758][ T5084] ? hci_remote_host_features_evt+0x150/0x150 [ 807.519897][ T5084] hci_event_packet+0x7ba/0x1270 [ 807.524941][ T5084] ? bis_list+0x290/0x290 [ 807.529352][ T5084] ? lockdep_hardirqs_on+0x98/0x150 [ 807.534620][ T5084] ? hci_send_to_monitor+0xd7/0x4f0 [ 807.539972][ T5084] hci_rx_work+0x43a/0xd60 [ 807.544488][ T5084] ? process_scheduled_works+0x96f/0x15d0 [ 807.550267][ T5084] process_scheduled_works+0xa5d/0x15d0 [ 807.555925][ T5084] ? worker_attach_to_pool+0x380/0x380 [ 807.561452][ T5084] ? assign_work+0x3d2/0x5d0 [ 807.566070][ T5084] worker_thread+0xa55/0xfc0 [ 807.570711][ T5084] kthread+0x2fa/0x390 [ 807.574799][ T5084] ? pr_cont_work+0x560/0x560 [ 807.579506][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 807.584117][ T5084] ret_from_fork+0x48/0x80 [ 807.588642][ T5084] ? kthread_blkcg+0xd0/0xd0 [ 807.593271][ T5084] ret_from_fork_asm+0x11/0x20 [ 807.598118][ T5084] [ 807.602772][ T5084] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 807.617195][ T5084] Bluetooth: hci3: failed to register connection device [ 807.716757][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'. [ 807.756245][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'. [ 808.968576][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.150257][ T6680] usb 3-1: USB disconnect, device number 24 [ 809.888869][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 811.817206][T14453] syzkaller0: entered promiscuous mode [ 811.842758][T14453] syzkaller0: entered allmulticast mode [ 814.410223][T14502] [ 814.413086][T14502] ============================= [ 814.418313][T14502] WARNING: suspicious RCU usage [ 814.423494][T14502] syzkaller #0 Not tainted [ 814.427963][T14502] ----------------------------- [ 814.432932][T14502] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 814.441489][T14502] [ 814.441489][T14502] other info that might help us debug this: [ 814.441489][T14502] [ 814.451860][T14502] [ 814.451860][T14502] rcu_scheduler_active = 2, debug_locks = 1 [ 814.460058][T14502] 1 lock held by syz.0.2298/14502: [ 814.465327][T14502] #0: ffffffff8e3c2748 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 814.474438][T14502] [ 814.474438][T14502] stack backtrace: [ 814.480375][T14502] CPU: 0 PID: 14502 Comm: syz.0.2298 Not tainted syzkaller #0 [ 814.487885][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 814.498000][T14502] Call Trace: [ 814.501332][T14502] [ 814.504309][T14502] dump_stack_lvl+0x18c/0x250 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 814.509073][T14502] ? show_regs_print_info+0x20/0x20 [ 814.514342][T14502] ? load_image+0x420/0x420 [ 814.518940][T14502] lockdep_rcu_suspicious+0x1e1/0x300 [ 814.524386][T14502] ieee80211_check_concurrent_iface+0x475/0x950 [ 814.530715][T14502] ieee80211_open+0xc1/0x200 [ 814.535377][T14502] __dev_open+0x2cb/0x430 [ 814.539771][T14502] ? dev_open+0x190/0x190 [ 814.544166][T14502] __dev_change_flags+0x211/0x6a0 [ 814.549273][T14502] ? dev_get_flags+0x1c0/0x1c0 [ 814.554110][T14502] ? mutex_lock_nested+0x20/0x20 [ 814.559131][T14502] dev_change_flags+0x88/0x1a0 [ 814.563978][T14502] dev_ioctl+0x7b4/0x1140 [ 814.568381][T14502] sock_do_ioctl+0x239/0x310 [ 814.573036][T14502] ? sock_show_fdinfo+0xb0/0xb0 [ 814.577984][T14502] sock_ioctl+0x5ba/0x7e0 [ 814.582379][T14502] ? sock_poll+0x3e0/0x3e0 [ 814.586858][T14502] ? bpf_lsm_file_ioctl+0x9/0x10 [ 814.591845][T14502] ? security_file_ioctl+0x80/0xa0 [ 814.597039][T14502] ? sock_poll+0x3e0/0x3e0 [ 814.601550][T14502] __se_sys_ioctl+0xfd/0x170 [ 814.606191][T14502] do_syscall_64+0x55/0xa0 [ 814.610639][T14502] ? clear_bhb_loop+0x40/0x90 [ 814.615361][T14502] ? clear_bhb_loop+0x40/0x90 [ 814.620071][T14502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 814.626006][T14502] RIP: 0033:0x7f24ebb9c819 [ 814.630466][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.650109][T14502] RSP: 002b:00007f24eca16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.658734][T14502] RAX: ffffffffffffffda RBX: 00007f24ebe15fa0 RCX: 00007f24ebb9c819 [ 814.666746][T14502] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 000000000000000a [ 814.674754][T14502] RBP: 00007f24ebc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 814.682759][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.690766][T14502] R13: 00007f24ebe16038 R14: 00007f24ebe15fa0 R15: 00007ffc3d96ccd8 [ 814.698807][T14502] [ 814.775129][T14502] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 814.785264][T14502] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 814.864293][ T6681] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 816.236628][ T76] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.251559][ T76] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.267253][ T6681] usb 4-1: device descriptor read/all, error -71 [ 816.394856][ T76] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.406086][ T76] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.498588][ T76] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.510012][ T76] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.559826][ T76] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 816.577210][ T76] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 816.801167][ T76] tipc: Left network mode [ 817.806010][ T76] bond0: left promiscuous mode [ 817.810877][ T76] bond_slave_0: left promiscuous mode [ 817.820778][ T76] bond_slave_1: left promiscuous mode [ 817.833957][ T76] batadv0: left promiscuous mode [ 817.846541][ T76] hsr_slave_0: left promiscuous mode [ 817.854011][ T76] hsr_slave_1: left promiscuous mode [ 817.860425][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.868655][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.878425][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.887205][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.896012][ T76] bridge_slave_1: left allmulticast mode [ 817.902069][ T76] bridge_slave_1: left promiscuous mode [ 817.909026][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.920492][ T76] bridge_slave_0: left allmulticast mode [ 817.927009][ T76] bridge_slave_0: left promiscuous mode [ 817.933571][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.981256][ T76] veth1_macvtap: left promiscuous mode [ 817.987268][ T76] veth0_macvtap: left promiscuous mode [ 817.994940][ T76] veth1_vlan: left promiscuous mode [ 818.000594][ T76] veth0_vlan: left promiscuous mode [ 818.306673][ T76] bond6 (unregistering): Released all slaves [ 818.465324][ T76] bond5 (unregistering): Released all slaves [ 818.617214][ T76] bond4 (unregistering): Released all slaves [ 818.763389][ T76] bond3 (unregistering): Released all slaves [ 818.914614][ T76] bond2 (unregistering): Released all slaves [ 818.940833][ T76] bond1 (unregistering): (slave geneve2): Releasing active interface [ 819.094563][ T76] bond1 (unregistering): Released all slaves [ 819.769655][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.825528][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.197933][ T76] bond0 (unregistering): Released all slaves [ 820.370289][ T6664] lo speed is unknown, defaulting to 1000 [ 820.713601][ T76] IPVS: stop unused estimator thread 0... [ 820.896013][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.010112][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.077617][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.146226][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.778870][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.790726][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 821.875113][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.887195][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 821.964135][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.979088][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 822.065058][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.079728][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 822.306355][ T76] tipc: Left network mode [ 824.289266][ T76] bond0: (slave wlan1): Releasing backup interface