last executing test programs: 12m30.775403783s ago: executing program 4 (id=1342): syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b000100000000"], 0x0) 12m23.81612157s ago: executing program 4 (id=1356): socket(0x10, 0x3, 0xffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/comedi3\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x5, 0x101341) io_setup(0x8, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000000340), 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, 0x0) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_setup(0x31, &(0x7f00000001c0)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x3, 0x158}, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 12m22.172740828s ago: executing program 4 (id=1359): syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x52, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x44000, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) io_setup(0xd4, &(0x7f00000001c0)=0x0) r2 = eventfd2(0x2, 0x80000) io_submit(r1, 0x4, &(0x7f0000000580)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xffff, r0, &(0x7f0000000200)="8367f03c68a1cae6cc3ddde20dfaf2cd0eb21d", 0x13, 0x61, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x33ef, r0, &(0x7f0000000280)="c99956970c07c864d3cc513257d207ef9368af9677656712d6886ddd7780cd58cc984f2e52d6f4873e8608d42e28980cbdcd133bf337a575e7b57b0b7b961cc7e5951288086a80033b7f3d51a70d94f027e88633aa3dd720176c1529fc20627ea7f99e849eaef9f334d07f9b87a12da063f61bc94e35a36914af66c7a62be4de583be4e9723e6d261eae86685e5bde9e0f15da03b53d2520f949b7ec1411479ab9d57d256eeeda40e5fc3e791bad414337ef", 0xb2, 0x9, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0xc59d, r0, &(0x7f0000000440)="76d20bbf74bb045cbe57d1aac64c733a97c5a6cce2024e23463f155475c451ae3d4c722db205d6e7ed3131", 0x2b, 0x401}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0xe, r0, &(0x7f00000004c0)="a2cbf198a83f76979c31064df8d12f008788e12511c8d50f677090285c0266fe61d1b037cf3b87fe5e7085fa9a4efa27754ab3cf8dbe64576d7942b5bd2d047961bdc63acaf6faaf1ad2db0483", 0x4d, 0x9, 0x0, 0x1}]) 12m18.528557487s ago: executing program 4 (id=1366): syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b000100000000"], 0x0) 12m13.593457295s ago: executing program 4 (id=1375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x9, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x2) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000194c0), 0x2, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x1, 0x20080) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000340)=0x40) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000019500)={0x1, @meta={0x50314b52, 0x6ce5b2eb, 0x910d, 0x688b, 0x1bb92698}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000019600)={0x80000001, 0x1, 0x4}) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000019640)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000019700)=0xf) 12m9.361010716s ago: executing program 4 (id=1378): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x41, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x1, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000140), 0x0, 0x0, &(0x7f00000003c0)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x2007fffffffffffe, 0x7, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0xb04}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11m53.658640304s ago: executing program 32 (id=1378): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x41, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x1, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000140), 0x0, 0x0, &(0x7f00000003c0)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x2007fffffffffffe, 0x7, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0xb04}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m39.784711802s ago: executing program 2 (id=3636): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x0, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x2, 'syz0\x00'}, &(0x7f0000000200)=0x28) 2m39.572942058s ago: executing program 2 (id=3637): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 2m39.336819071s ago: executing program 2 (id=3638): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) 2m39.243800393s ago: executing program 2 (id=3639): openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 2m38.836538588s ago: executing program 2 (id=3641): syz_usb_connect(0x0, 0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202", @ANYRES16], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyUSB0\x00', 0x0, 0x0) 2m36.996091384s ago: executing program 2 (id=3650): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x7) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='27', 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x0, 0x0, 0xfff}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008090}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) 2m30.572932687s ago: executing program 5 (id=3690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in={0x2, 0x4e24, @local}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)=' ', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) writev(r1, &(0x7f0000000c00)=[{&(0x7f0000000600)="61e2", 0x2}], 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$nbd(r1, &(0x7f00000003c0)=ANY=[], 0x10) 2m30.403742835s ago: executing program 5 (id=3691): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[], 0x0) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0xffffffff, 0x0, 0xfff, 0x1, 0xb, "e8a872c03d775900", 0x7, 0x7}) 2m26.641360373s ago: executing program 5 (id=3713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1a7) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000c80)="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", 0xf40, 0x0) 2m26.482264128s ago: executing program 5 (id=3715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x304, 0x38}, "2cae8100e0be7939", "0f00000000100080ec613a187d1b6512", '\x00', "404574dd3a00"}, 0x28) sendto$inet6(r0, &(0x7f0000000500)="c3", 0x4000, 0x40, 0x0, 0x0) 2m26.122074257s ago: executing program 5 (id=3716): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 2m25.846745886s ago: executing program 5 (id=3719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x2, 0xee, "d80161846b90a664b47f910f0352e5bde5fcc95bc7aada490310c219a15f2e432227b877158baad30e07ee261206de41d3d350a8453e8cf5e71c27cf68d9ac80cb0bfe8e664aa2aab464a4571dd441d2892563151b88245096a8e58db50e419ccf6661963d24e7d552588174768f734a822aa2fc917457ee440dc72250345a43fa4cf1d30e74b8a14797582a003ee0e6b4230baf6cce6cadc3f19c987388bf82255758eeeec01681d01fce8fcc4a9a1441c1a76783354dc9f239b5325c0222d63ea43a58240cd02142faec554a34fd48ddd1e0f33db334e26d897678363f67d3e331db355eeb049320c58e88db78"}, &(0x7f0000000200)=0xf6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r5, 0x84, 0x25, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x4, 0xd}, 0x90) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48d, 0x0, 0x1fe}]}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 2m10.653232663s ago: executing program 33 (id=3719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x2, 0xee, "d80161846b90a664b47f910f0352e5bde5fcc95bc7aada490310c219a15f2e432227b877158baad30e07ee261206de41d3d350a8453e8cf5e71c27cf68d9ac80cb0bfe8e664aa2aab464a4571dd441d2892563151b88245096a8e58db50e419ccf6661963d24e7d552588174768f734a822aa2fc917457ee440dc72250345a43fa4cf1d30e74b8a14797582a003ee0e6b4230baf6cce6cadc3f19c987388bf82255758eeeec01681d01fce8fcc4a9a1441c1a76783354dc9f239b5325c0222d63ea43a58240cd02142faec554a34fd48ddd1e0f33db334e26d897678363f67d3e331db355eeb049320c58e88db78"}, &(0x7f0000000200)=0xf6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r5, 0x84, 0x25, &(0x7f0000000240)={r6, @in={{0x2, 0x4e22, @multicast1}}, 0x3, 0x4, 0xd}, 0x90) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48d, 0x0, 0x1fe}]}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r2], 0x28}}, 0x0) 2m7.057757261s ago: executing program 3 (id=3786): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r0, 0x9, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x4000000}, 0x0) 2m6.732918851s ago: executing program 3 (id=3788): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m5.08591619s ago: executing program 3 (id=3793): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$MSR(0x0, 0x82, 0x0) syz_clone(0x29420cd2a56fb3d, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, 0x0, 0x54) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b4a, 0x100000600081009) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000010c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001140), 0x0, 0x0) recvmsg(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)}, 0x22) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000800)="450454b055d0581c5009da5981ae9956b670be74aacf6edde361cf2c9df4b46294a1d630f8ac13", 0x27}, {&(0x7f0000000840)="cc54571bf39cc3bf3191993f0279edd7f4471b74caac6687420d3f69c2f8ed3b4f", 0x21}, {&(0x7f00000001c0)="c778758d1707009895d080adb177d1d8e55acd7a2b8867bb549d8e8e7b49f9f65f004c", 0x23}], 0x4, 0x0, 0x0, 0x37c109a92a17dee7}, 0xc000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f0000000340)=0xa, 0x1959cc36) connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x80000001, @loopback}, 0x1c) shutdown(r5, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x18}, 0xa) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x40285881, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat(r7, &(0x7f0000000040)='mnt\x00', 0x0, 0x0) r9 = add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000061616161616161616161616161616161616161616161614161616161616161613131313131313131313131313131"], 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}, 0x4, r9, '\x00', @auto=[0x2e, 0x39, 0x39, 0x40]}) unlinkat(r8, &(0x7f0000000200)='./file0\x00', 0x200) 2m5.013868301s ago: executing program 3 (id=3794): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x240980c4) syz_open_pts(0xffffffffffffffff, 0x200) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000080)='.\x00', 0x0) 2m4.916444292s ago: executing program 3 (id=3796): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e05002a200301e7003ea53755d822487457d23c000f71f16eaf"], 0x8) 2m3.132903302s ago: executing program 3 (id=3800): r0 = fsopen(&(0x7f00000007c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000840)='client.admin@00000000-0000-0000-0000-000000000000.ceph=/\x00', 0x0) 52.309074411s ago: executing program 1 (id=3967): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 50.866682552s ago: executing program 1 (id=3969): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e01000100000000002700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e2401"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 49.364767319s ago: executing program 1 (id=3971): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000180)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) 48.837133498s ago: executing program 1 (id=3973): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) unshare(0x22020600) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 48.753214062s ago: executing program 1 (id=3974): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='mnt\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000280)={0xffffffff, 0x0, 0xfff, 0x1, 0xb, "e8a872c03d775900", 0x7, 0x7}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x800}}, 0x30) 45.980507171s ago: executing program 1 (id=3977): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 43.9070575s ago: executing program 34 (id=3977): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.408655829s ago: executing program 0 (id=4039): syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0) mkdir(&(0x7f0000000040)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='mnt\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='mnt/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) 7.724531631s ago: executing program 0 (id=4040): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000400)=""/102392, 0x18ff8) prlimit64(0x0, 0xf, &(0x7f0000019440)={0x8, 0x100000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f000001d840)=[{&(0x7f000001d880)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001", 0x4b}], 0x1) pipe(&(0x7f000001d900)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) mknodat$null(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f00000194c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) fchmodat(0xffffffffffffff9c, &(0x7f000001b680)='./file0\x00', 0x17f) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f000001d6c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.233146184s ago: executing program 0 (id=4041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x10000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@private1, 0x9c940000, 0x0, 0x3, 0x8, 0x1, 0xfffe}, 0x20) 2.725409559s ago: executing program 0 (id=4042): mkdirat(0xffffffffffffff9c, &(0x7f0000019c40)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000019c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000019cc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000019d00)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000019d40)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000019d80)='./file0\x00', &(0x7f0000019dc0), 0x0, &(0x7f0000019e00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00'/13]) creat(&(0x7f0000019e80)='./file0/file0\x00', 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x10000, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000019580)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f00000195c0)={0x2, 0x4c61, @rand_addr=0x64010102}, 0x10) 1.038828822s ago: executing program 0 (id=4043): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000800)="2ae0e710", 0x4, 0x0, &(0x7f0000000840)={0xa, 0x0, 0x4, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000880), 0x4000000000001e9, 0x10162, 0x0) read(r0, &(0x7f00000008c0)=""/10, 0xa) 0s ago: executing program 0 (id=4044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000500)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000540)=0x4, 0x4) socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): T1236] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1346.494515][ T1236] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1346.494661][ T1236] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1346.498223][ T1236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.498243][ T1236] usb 3-1: Product: syz [ 1346.498256][ T1236] usb 3-1: Manufacturer: syz [ 1346.498270][ T1236] usb 3-1: SerialNumber: syz [ 1346.507756][T17097] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1346.735067][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1346.735308][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1346.908474][ T60] Bluetooth: hci0: command tx timeout [ 1346.999043][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1347.067775][ T1236] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input42 [ 1347.262600][ T1236] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1347.262621][ T1236] (id 0x00) [ 1347.353212][ T1236] rc_core: IR keymap rc-imon-pad not found [ 1347.353235][ T1236] Registered IR keymap rc-empty [ 1347.353440][ T1236] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1347.353457][ T1236] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1347.473899][ T1236] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1347.476794][ T1236] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input43 [ 1347.506852][ T1236] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:75> initialized [ 1347.641342][ T1921] usb 3-1: USB disconnect, device number 75 [ 1348.348673][T17121] siw: device registration error -23 [ 1348.469072][T17123] siw: device registration error -23 [ 1348.921790][ T60] Bluetooth: hci0: command tx timeout [ 1349.243921][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1349.244147][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1349.507370][ T5790] libceph: connect (1)[c::]:6789 error -101 [ 1349.507633][ T5790] libceph: mon0 (1)[c::]:6789 connect error [ 1349.616415][T17138] bond5: entered allmulticast mode [ 1349.668059][T17138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1349.904685][T17136] ceph: No mds server is up or the cluster is laggy [ 1349.964678][T17154] siw: device registration error -23 [ 1350.551337][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1350.576584][T12601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.723760][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1350.725425][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.725494][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.853532][ T10] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1350.853819][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1350.853908][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1350.856165][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1350.856244][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1350.901602][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1350.945087][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1350.945184][ T10] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1350.947839][ T10] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1350.991358][ T60] Bluetooth: hci0: command tx timeout [ 1351.076363][T17051] rxe_eth0 speed is unknown, defaulting to 1000 [ 1351.397706][ C1] net_ratelimit: 250 callbacks suppressed [ 1351.564499][ T10] usb 2-1: USB disconnect, device number 67 [ 1351.644304][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1351.686054][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1351.688554][ T10] keyspan 2-1:1.0: device disconnected [ 1352.358446][T12601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.424724][T17181] bond5: option mode: unable to set because the bond device is up [ 1352.425483][T17051] wlan1 speed is unknown, defaulting to 1000 [ 1352.487968][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3289'. [ 1352.493567][T17190] FAULT_INJECTION: forcing a failure. [ 1352.493567][T17190] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.493602][T17190] CPU: 0 UID: 0 PID: 17190 Comm: syz.1.3289 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1352.493632][T17190] Tainted: [L]=SOFTLOCKUP [ 1352.493639][T17190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.493651][T17190] Call Trace: [ 1352.493660][T17190] [ 1352.493670][T17190] dump_stack_lvl+0xe8/0x150 [ 1352.493705][T17190] should_fail_ex+0x46b/0x600 [ 1352.493743][T17190] should_failslab+0xa8/0x100 [ 1352.493767][T17190] __kmalloc_noprof+0xfb/0x790 [ 1352.493797][T17190] ? security_sk_alloc+0x52/0x360 [ 1352.493823][T17190] ? security_sk_alloc+0x52/0x360 [ 1352.493857][T17190] security_sk_alloc+0x52/0x360 [ 1352.493886][T17190] sk_prot_alloc+0x101/0x210 [ 1352.493919][T17190] ? sk_alloc+0x27/0x390 [ 1352.493946][T17190] sk_alloc+0x3a/0x390 [ 1352.493974][T17190] __netlink_create+0x62/0x260 [ 1352.494008][T17190] netlink_create+0x3be/0x580 [ 1352.494030][T17190] ? __pfx_rtnetlink_bind+0x10/0x10 [ 1352.494056][T17190] __sock_create+0x4b3/0x9d0 [ 1352.494088][T17190] __sys_socket+0xd6/0x1b0 [ 1352.494114][T17190] __x64_sys_socket+0x7a/0x90 [ 1352.494137][T17190] do_syscall_64+0x166/0x520 [ 1352.494164][T17190] ? trace_irq_disable+0x3b/0x140 [ 1352.494191][T17190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.494213][T17190] ? clear_bhb_loop+0x70/0xc0 [ 1352.494237][T17190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.494257][T17190] RIP: 0033:0x7f4918f7e559 [ 1352.494277][T17190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.494294][T17190] RSP: 002b:00007f49171d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1352.494316][T17190] RAX: ffffffffffffffda RBX: 00007f4919205fa0 RCX: 00007f4918f7e559 [ 1352.494332][T17190] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 1352.494345][T17190] RBP: 00007f49190158b0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.494358][T17190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.494371][T17190] R13: 00007f4919206038 R14: 00007f4919205fa0 R15: 00007ffe2c9fcad8 [ 1352.494404][T17190] [ 1352.571741][T17192] siw: device registration error -23 [ 1353.071149][ T60] Bluetooth: hci0: command tx timeout [ 1353.438592][T12601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.824505][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1354.137293][T17241] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3305'. [ 1354.137724][T17241] FAULT_INJECTION: forcing a failure. [ 1354.137724][T17241] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1354.137753][T17241] CPU: 1 UID: 0 PID: 17241 Comm: syz.5.3305 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1354.137785][T17241] Tainted: [L]=SOFTLOCKUP [ 1354.137791][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.137801][T17241] Call Trace: [ 1354.137808][T17241] [ 1354.137844][T17241] dump_stack_lvl+0xe8/0x150 [ 1354.137875][T17241] should_fail_ex+0x46b/0x600 [ 1354.137910][T17241] get_futex_key+0x1b4/0x1580 [ 1354.137947][T17241] ? __pfx_get_futex_key+0x10/0x10 [ 1354.137983][T17241] futex_wake+0x119/0x600 [ 1354.138007][T17241] ? rcu_is_watching+0x16/0xb0 [ 1354.138025][T17241] ? __pfx_futex_wake+0x10/0x10 [ 1354.138060][T17241] do_futex+0x458/0x4e0 [ 1354.138078][T17241] ? __asan_memcpy+0x40/0x70 [ 1354.138105][T17241] ? __pfx_do_futex+0x10/0x10 [ 1354.138125][T17241] ? lock_acquire+0x115/0x350 [ 1354.138155][T17241] __se_sys_futex+0x3a8/0x450 [ 1354.138201][T17241] ? __pfx___se_sys_futex+0x10/0x10 [ 1354.138218][T17241] ? fd_install+0x30f/0x3e0 [ 1354.138245][T17241] ? __x64_sys_futex+0x21/0xf0 [ 1354.138282][T17241] do_syscall_64+0x166/0x520 [ 1354.138309][T17241] ? trace_irq_disable+0x3b/0x140 [ 1354.138335][T17241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.138355][T17241] ? clear_bhb_loop+0x70/0xc0 [ 1354.138377][T17241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.138411][T17241] RIP: 0033:0x7f4e36dfe559 [ 1354.138429][T17241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.138444][T17241] RSP: 002b:00007f4e350560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1354.138464][T17241] RAX: ffffffffffffffda RBX: 00007f4e37085fa8 RCX: 00007f4e36dfe559 [ 1354.138476][T17241] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4e37085fac [ 1354.138487][T17241] RBP: 00007f4e37085fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1354.138499][T17241] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1354.138510][T17241] R13: 00007f4e37086038 R14: 00007ffeb3bed9c0 R15: 00007ffeb3bedaa8 [ 1354.138535][T17241] [ 1354.651180][T12601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.850959][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1355.038666][T17266] siw: device registration error -23 [ 1355.111421][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1355.112321][ T10] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1355.120331][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.120353][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1355.120420][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.120480][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.181131][ T10] hub 6-1:1.0: bad descriptor, ignoring hub [ 1355.181164][ T10] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1355.182223][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 1355.182237][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 1355.309764][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1355.309783][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 1355.529877][T17280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1355.763767][T11898] usb 6-1: USB disconnect, device number 4 [ 1356.159299][ T60] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1356.338123][T17297] netlink: 'syz.0.3330': attribute type 8 has an invalid length. [ 1356.338146][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3330'. [ 1356.436038][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3332'. [ 1356.436055][T17302] net_ratelimit: 160 callbacks suppressed [ 1356.436067][T17302] openvswitch: netlink: Flow actions attr not present in new flow. [ 1357.409263][T17330] siw: device registration error -23 [ 1358.652581][T17367] siw: device registration error -23 [ 1359.533840][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3369'. [ 1359.735619][T17401] siw: device registration error -23 [ 1360.081776][T12601] bridge_slave_1: left allmulticast mode [ 1360.081886][T12601] bridge_slave_1: left promiscuous mode [ 1360.082128][T12601] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.133909][T17412] FAULT_INJECTION: forcing a failure. [ 1360.133909][T17412] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.133943][T17412] CPU: 0 UID: 0 PID: 17412 Comm: syz.0.3377 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1360.133972][T17412] Tainted: [L]=SOFTLOCKUP [ 1360.133980][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1360.133992][T17412] Call Trace: [ 1360.134002][T17412] [ 1360.134011][T17412] dump_stack_lvl+0xe8/0x150 [ 1360.134049][T17412] should_fail_ex+0x46b/0x600 [ 1360.134083][T17412] ? __d_alloc+0x37/0x6f0 [ 1360.134111][T17412] should_failslab+0xa8/0x100 [ 1360.134136][T17412] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1360.134172][T17412] ? __d_alloc+0x37/0x6f0 [ 1360.134204][T17412] __d_alloc+0x37/0x6f0 [ 1360.134238][T17412] d_alloc_pseudo+0x21/0xc0 [ 1360.134266][T17412] alloc_path_pseudo+0x107/0x220 [ 1360.134304][T17412] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1360.134326][T17412] ? rt_spin_lock+0x1e2/0x400 [ 1360.134357][T17412] alloc_file_pseudo+0xa8/0x1e0 [ 1360.134383][T17412] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1360.134410][T17412] ? alloc_fd+0x654/0x6d0 [ 1360.134438][T17412] sock_alloc_file+0xb8/0x2f0 [ 1360.134468][T17412] ? sctp_getsockopt_peeloff_common+0x38d/0x5f0 [ 1360.134497][T17412] sctp_getsockopt_peeloff_common+0x39e/0x5f0 [ 1360.134526][T17412] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 1360.134563][T17412] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 1360.134593][T17412] ? __local_bh_enable+0x1e3/0x2f0 [ 1360.134625][T17412] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 1360.134657][T17412] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1360.134684][T17412] ? lockdep_hardirqs_on+0x7b/0x110 [ 1360.134718][T17412] sctp_getsockopt+0x3a5/0xb90 [ 1360.134742][T17412] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1360.134767][T17412] do_sock_getsockopt+0x51d/0x7e0 [ 1360.134799][T17412] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1360.134845][T17412] ? __fget_files+0x3a8/0x420 [ 1360.134867][T17412] ? __fget_files+0x2a/0x420 [ 1360.134900][T17412] __x64_sys_getsockopt+0x1aa/0x250 [ 1360.134937][T17412] do_syscall_64+0x166/0x520 [ 1360.134963][T17412] ? trace_irq_disable+0x3b/0x140 [ 1360.134990][T17412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.135012][T17412] ? clear_bhb_loop+0x70/0xc0 [ 1360.135034][T17412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.135054][T17412] RIP: 0033:0x7fd4a98de559 [ 1360.135075][T17412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1360.135092][T17412] RSP: 002b:00007fd4a7b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1360.135116][T17412] RAX: ffffffffffffffda RBX: 00007fd4a9b65fa0 RCX: 00007fd4a98de559 [ 1360.135132][T17412] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1360.135146][T17412] RBP: 00007fd4a99758b0 R08: 0000200000000400 R09: 0000000000000000 [ 1360.135161][T17412] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 1360.135176][T17412] R13: 00007fd4a9b66038 R14: 00007fd4a9b65fa0 R15: 00007ffc437db7b8 [ 1360.135210][T17412] [ 1360.619287][T12601] bridge_slave_0: left allmulticast mode [ 1360.619315][T12601] bridge_slave_0: left promiscuous mode [ 1360.619552][T12601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.035676][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1361.255320][T17444] FAULT_INJECTION: forcing a failure. [ 1361.255320][T17444] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.255342][T17444] CPU: 0 UID: 0 PID: 17444 Comm: syz.5.3388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1361.255373][T17444] Tainted: [L]=SOFTLOCKUP [ 1361.255383][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1361.255399][T17444] Call Trace: [ 1361.255404][T17444] [ 1361.255411][T17444] dump_stack_lvl+0xe8/0x150 [ 1361.255443][T17444] should_fail_ex+0x46b/0x600 [ 1361.255481][T17444] should_failslab+0xa8/0x100 [ 1361.255494][T17444] ? alloc_empty_file+0x5b/0x1d0 [ 1361.255506][T17444] kmem_cache_alloc_noprof+0x9e/0x690 [ 1361.255524][T17444] ? alloc_empty_file+0x5b/0x1d0 [ 1361.255539][T17444] alloc_empty_file+0x5b/0x1d0 [ 1361.255552][T17444] alloc_file_pseudo+0x115/0x1e0 [ 1361.255566][T17444] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1361.255580][T17444] ? alloc_fd+0x654/0x6d0 [ 1361.255595][T17444] sock_alloc_file+0xb8/0x2f0 [ 1361.255611][T17444] ? sctp_getsockopt_peeloff_common+0x38d/0x5f0 [ 1361.255627][T17444] sctp_getsockopt_peeloff_common+0x39e/0x5f0 [ 1361.255647][T17444] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 1361.255667][T17444] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 1361.255684][T17444] ? __local_bh_enable+0x1e3/0x2f0 [ 1361.255705][T17444] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 1361.255722][T17444] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 1361.255743][T17444] ? lockdep_hardirqs_on+0x7b/0x110 [ 1361.255763][T17444] sctp_getsockopt+0x3a5/0xb90 [ 1361.255775][T17444] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1361.255789][T17444] do_sock_getsockopt+0x51d/0x7e0 [ 1361.255807][T17444] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1361.255830][T17444] ? __fget_files+0x3a8/0x420 [ 1361.255842][T17444] ? __fget_files+0x2a/0x420 [ 1361.255859][T17444] __x64_sys_getsockopt+0x1aa/0x250 [ 1361.255878][T17444] do_syscall_64+0x166/0x520 [ 1361.255892][T17444] ? trace_irq_disable+0x3b/0x140 [ 1361.255907][T17444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.255918][T17444] ? clear_bhb_loop+0x70/0xc0 [ 1361.255932][T17444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.255942][T17444] RIP: 0033:0x7f4e36dfe559 [ 1361.255954][T17444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1361.255963][T17444] RSP: 002b:00007f4e35056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1361.255976][T17444] RAX: ffffffffffffffda RBX: 00007f4e37085fa0 RCX: 00007f4e36dfe559 [ 1361.255984][T17444] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 1361.255991][T17444] RBP: 00007f4e36e958b0 R08: 0000200000000400 R09: 0000000000000000 [ 1361.255998][T17444] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 1361.256005][T17444] R13: 00007f4e37086038 R14: 00007f4e37085fa0 R15: 00007ffeb3bedaa8 [ 1361.256023][T17444] [ 1361.580621][ T1236] net_ratelimit: 827 callbacks suppressed [ 1361.581089][ T1236] libceph: connect (1)[c::]:6789 error -101 [ 1361.581355][ T1236] libceph: mon0 (1)[c::]:6789 connect error [ 1361.582257][ T1236] libceph: connect (1)[c::]:6789 error -101 [ 1361.582467][ T1236] libceph: mon0 (1)[c::]:6789 connect error [ 1361.633187][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.633251][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.872045][ T1236] libceph: connect (1)[c::]:6789 error -101 [ 1361.872315][ T1236] libceph: mon0 (1)[c::]:6789 connect error [ 1362.066133][T17445] ceph: No mds server is up or the cluster is laggy [ 1362.380566][ T1236] libceph: connect (1)[c::]:6789 error -101 [ 1362.380777][ T1236] libceph: mon0 (1)[c::]:6789 connect error [ 1363.333657][T12601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1363.378721][T17473] netlink: 'syz.5.3399': attribute type 30 has an invalid length. [ 1363.421305][T12601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.486559][T12601] bond0 (unregistering): Released all slaves [ 1363.552902][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1363.553276][T17051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.553394][T17051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.554433][T17051] bridge_slave_0: entered allmulticast mode [ 1363.556644][T17051] bridge_slave_0: entered promiscuous mode [ 1363.879861][ T1236] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1363.890127][T17051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.890242][T17051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.890496][T17051] bridge_slave_1: entered allmulticast mode [ 1363.894293][T17051] bridge_slave_1: entered promiscuous mode [ 1364.031469][ T1236] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1364.033487][ T1236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.033560][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.129652][ T1236] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1364.138270][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1364.138362][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1364.159990][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1364.160099][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1364.163311][ T1236] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1364.167320][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1364.167424][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1364.222552][ T1236] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1364.473931][T11898] usb 1-1: USB disconnect, device number 58 [ 1364.564797][ T60] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1364.641141][T11898] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1364.677222][T11898] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1364.679526][T11898] keyspan 1-1:1.0: device disconnected [ 1364.726352][T17051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.766000][T17051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1364.809822][ T5790] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1365.015056][ T5790] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1365.016667][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.016709][ T5790] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1365.016729][ T5790] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1365.018499][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1365.018518][ T5790] usb 2-1: Product: syz [ 1365.018533][ T5790] usb 2-1: Manufacturer: syz [ 1365.042874][T17490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1365.047617][ T5790] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 1365.315432][ T5790] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1365.384780][ T5790] usb 2-1: USB disconnect, device number 68 [ 1365.387416][T17051] team0: Port device team_slave_0 added [ 1365.426691][T17051] team0: Port device team_slave_1 added [ 1365.492617][T17504] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.3411' sets config #0 [ 1365.494084][T17504] usb usb5: usbfs: interface 0 claimed by hub while 'syz.5.3411' sets config #1 [ 1365.613711][ T5790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1365.614871][ T5790] garmin_gps 2-1:1.0: device disconnected [ 1366.238930][T17051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.238942][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.238967][T17051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.321975][T17525] siw: device registration error -23 [ 1366.340932][T17051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.340939][T17051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.340953][T17051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.381921][T17477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1366.664373][T17532] net_ratelimit: 164 callbacks suppressed [ 1367.408733][ T60] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1367.542563][T12601] hsr_slave_0: left promiscuous mode [ 1367.580251][T12601] hsr_slave_1: left promiscuous mode [ 1367.585322][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.585349][T12601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.641268][T12601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.641283][T12601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.659594][ T1921] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1367.813859][ T1921] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1367.815483][ T1921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.815535][ T1921] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1367.815566][ T1921] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.818032][ T1921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1367.818053][ T1921] usb 6-1: Product: syz [ 1367.818068][ T1921] usb 6-1: Manufacturer: syz [ 1367.839187][T17543] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1367.854471][ T1921] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1368.045368][ T1921] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1368.046690][T12601] veth1_macvtap: left promiscuous mode [ 1368.047202][T12601] veth0_macvtap: left promiscuous mode [ 1368.104150][T17562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1368.142500][T12601] veth1_vlan: left promiscuous mode [ 1368.214440][T12601] veth0_vlan: left promiscuous mode [ 1368.374612][ T5790] usb 6-1: USB disconnect, device number 5 [ 1368.436072][ T5790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1368.453345][ T5790] garmin_gps 6-1:1.0: device disconnected [ 1368.532654][T17569] siw: device registration error -23 [ 1369.954266][T12601] team0 (unregistering): Port device team_slave_1 removed [ 1370.050410][T12601] team0 (unregistering): Port device team_slave_0 removed [ 1371.625579][T17596] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.788956][ C0] net_ratelimit: 207 callbacks suppressed [ 1372.019357][ T4792] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1372.194310][ T4792] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1372.195966][ T4792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.198539][ T4792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.198556][ T4792] usb 3-1: Product: syz [ 1372.198568][ T4792] usb 3-1: Manufacturer: syz [ 1372.198581][ T4792] usb 3-1: SerialNumber: syz [ 1372.260758][ T4792] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected [ 1372.261014][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1372.299321][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1372.299419][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 1372.299518][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1372.299606][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1372.299701][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 1372.299807][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 1372.325553][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1372.364341][ T4792] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1372.477452][ T1915] usb 3-1: USB disconnect, device number 76 [ 1372.607182][ T1915] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1372.632402][ T1915] keyspan 3-1:1.0: device disconnected [ 1372.764658][T17051] hsr_slave_0: entered promiscuous mode [ 1372.823520][T17051] hsr_slave_1: entered promiscuous mode [ 1372.824149][T17051] debugfs: 'hsr0' already exists in 'hsr' [ 1372.824162][T17051] Cannot create hsr debugfs directory [ 1373.257046][T17656] siw: device registration error -23 [ 1374.319079][ T4792] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1374.487372][ T4792] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1374.511302][ T4792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.511372][ T4792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.547276][ T4792] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1374.547543][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1374.547621][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1374.578182][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1374.578317][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1374.604668][ T4792] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1374.693167][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1374.693271][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1374.717910][ T4792] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1374.787824][ T4792] usb 6-1: USB disconnect, device number 6 [ 1374.895314][ T4792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1374.946018][ T4792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1374.948143][ T4792] keyspan 6-1:1.0: device disconnected [ 1375.110963][T17686] tipc: Started in network mode [ 1375.110990][T17686] tipc: Node identity ac1414aa, cluster identity 4711 [ 1375.111326][T17686] tipc: New replicast peer: 172.20.20.187 [ 1375.333885][T17686] tipc: Enabled bearer , priority 10 [ 1375.913577][ T4792] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1375.940281][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1376.089541][ T4792] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1376.091077][ T4792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.093599][ T4792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.093620][ T4792] usb 6-1: Product: syz [ 1376.093634][ T4792] usb 6-1: Manufacturer: syz [ 1376.093648][ T4792] usb 6-1: SerialNumber: syz [ 1376.102751][ T4792] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 1376.102970][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1376.105810][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1376.105948][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 1376.106057][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1376.106177][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1376.106292][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 83 [ 1376.106387][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 1376.115259][ T4792] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1376.138804][ T1915] tipc: Node number set to 2886997162 [ 1376.340264][ T4792] usb 6-1: USB disconnect, device number 7 [ 1376.383156][ T4792] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1376.400928][ T4792] keyspan 6-1:1.0: device disconnected [ 1376.776545][T17702] overlayfs: overlapping lowerdir path [ 1376.828476][ C1] net_ratelimit: 1337 callbacks suppressed [ 1377.318322][ T4792] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1377.517029][ T4792] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1377.535559][ T4792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.535635][ T4792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.615475][ T4792] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1377.615818][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1377.615911][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1377.665036][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1377.665140][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1377.766448][ T4792] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1377.794347][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1377.794445][ T4792] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1377.824919][ T4792] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1377.929251][ T4792] usb 6-1: USB disconnect, device number 8 [ 1377.999851][ T4792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1378.031457][ T4792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1378.034216][ T4792] keyspan 6-1:1.0: device disconnected [ 1378.995862][T17753] overlayfs: overlapping lowerdir path [ 1379.328180][ T1236] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1379.496639][ T1236] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1379.500393][ T1236] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.500458][ T1236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.551918][ T1236] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 1379.552275][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 1379.552366][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 1379.653436][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 1379.653537][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 1379.727028][ T1236] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1379.769703][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 1379.769775][ T1236] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 1379.900212][ T1236] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1380.032198][ T1236] usb 1-1: USB disconnect, device number 59 [ 1380.038128][ T1915] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1380.073510][ T1236] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1380.148413][ T1236] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1380.149580][ T1236] keyspan 1-1:1.0: device disconnected [ 1380.278241][ T1915] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1380.298373][ T1915] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.298451][ T1915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.424736][ T1915] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1380.425035][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1380.425125][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1380.440903][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1380.441003][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1380.460926][ T1915] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1380.566652][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1380.566748][ T1915] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1380.582728][ T1915] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1380.728249][ T1915] usb 2-1: USB disconnect, device number 69 [ 1380.881629][ T1915] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1380.975767][ T1915] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1381.075965][ T1915] keyspan 2-1:1.0: device disconnected [ 1381.610652][T17785] 8021q: VLANs not supported on gre0 [ 1381.653795][ T5257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1381.867809][ C1] net_ratelimit: 222 callbacks suppressed [ 1381.967914][ T1915] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1382.122536][ T1915] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1382.125231][ T1915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.125317][ T1915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.200015][ T1915] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 1382.200317][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 81 [ 1382.208156][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 1 [ 1382.214505][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 1382.214597][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 1382.285764][ T1915] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1382.312496][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 1382.312554][ T1915] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 1382.355449][ T1915] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1382.445353][ T1915] usb 6-1: USB disconnect, device number 9 [ 1382.479760][ T1915] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1382.551434][ T1915] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1382.554845][ T1915] keyspan 6-1:1.0: device disconnected [ 1383.156466][ T4792] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1383.318386][ T4792] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1383.320584][ T4792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.320654][ T4792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.360891][ T4792] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 1383.361110][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 1383.361177][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 1383.363691][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 1383.363797][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 1383.366875][ T4792] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1383.422977][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 1383.423056][ T4792] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 1383.426798][ T4792] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1383.632674][ T4792] usb 3-1: USB disconnect, device number 77 [ 1383.731238][ T4792] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1383.811866][ T4792] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1383.820442][ T4792] keyspan 3-1:1.0: device disconnected [ 1384.723948][T17880] FAULT_INJECTION: forcing a failure. [ 1384.723948][T17880] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1384.723978][T17880] CPU: 0 UID: 0 PID: 17880 Comm: syz.1.3532 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1384.724005][T17880] Tainted: [L]=SOFTLOCKUP [ 1384.724013][T17880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.724024][T17880] Call Trace: [ 1384.724032][T17880] [ 1384.724041][T17880] dump_stack_lvl+0xe8/0x150 [ 1384.724076][T17880] should_fail_ex+0x46b/0x600 [ 1384.724112][T17880] get_futex_key+0x8e2/0x1580 [ 1384.724154][T17880] ? __pfx_get_futex_key+0x10/0x10 [ 1384.724196][T17880] futex_wake+0x119/0x600 [ 1384.724227][T17880] ? __pfx_futex_wake+0x10/0x10 [ 1384.724250][T17880] ? do_raw_spin_lock+0x12b/0x2f0 [ 1384.724293][T17880] do_futex+0x458/0x4e0 [ 1384.724320][T17880] ? __pfx_do_futex+0x10/0x10 [ 1384.724347][T17880] ? __might_fault+0xaf/0x130 [ 1384.724378][T17880] mm_exit_exec_release+0x10d/0x290 [ 1384.724408][T17880] exit_mm+0x50/0x240 [ 1384.724433][T17880] do_exit+0x6cd/0x2360 [ 1384.724455][T17880] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1384.724488][T17880] ? __pfx_do_exit+0x10/0x10 [ 1384.724509][T17880] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1384.724540][T17880] ? rt_spin_unlock+0x159/0x200 [ 1384.724565][T17880] do_group_exit+0x22d/0x2f0 [ 1384.724586][T17880] ? rt_spin_unlock+0x165/0x200 [ 1384.724611][T17880] get_signal+0x121b/0x12c0 [ 1384.724659][T17880] arch_do_signal_or_restart+0xbb/0x860 [ 1384.724691][T17880] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1384.724728][T17880] ? __fget_files+0x2a/0x420 [ 1384.724761][T17880] exit_to_user_mode_loop+0x10e/0x770 [ 1384.724788][T17880] ? rcu_is_watching+0x16/0xb0 [ 1384.724812][T17880] do_syscall_64+0x328/0x520 [ 1384.724837][T17880] ? trace_irq_disable+0x3b/0x140 [ 1384.724920][T17880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.724941][T17880] ? clear_bhb_loop+0x70/0xc0 [ 1384.724966][T17880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.724986][T17880] RIP: 0033:0x7f4918f7e559 [ 1384.725005][T17880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1384.725022][T17880] RSP: 002b:00007f49171d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1384.725045][T17880] RAX: fffffffffffffe00 RBX: 00007f4919205fa8 RCX: 00007f4918f7e559 [ 1384.725060][T17880] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4919205fa8 [ 1384.725073][T17880] RBP: 00007f4919205fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.725086][T17880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.725099][T17880] R13: 00007f4919206038 R14: 00007ffe2c9fc9f0 R15: 00007ffe2c9fcad8 [ 1384.725131][T17880] [ 1387.068366][ C1] net_ratelimit: 1406 callbacks suppressed [ 1387.835668][T17051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1388.001229][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1388.053398][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1388.070188][T17051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1388.119248][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1388.243538][T17051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1388.371337][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1388.375880][T17051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1388.518639][T17051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1388.913665][T18028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1389.274259][T17051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.409747][T17051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.503271][ T1846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.531222][ T1846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.666709][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.706733][ T1846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.924074][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1390.087884][ T10] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1390.089655][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1390.089685][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1390.092207][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1390.092228][ T10] usb 2-1: Product: syz [ 1390.092242][ T10] usb 2-1: Manufacturer: syz [ 1390.152930][T18052] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1390.173036][ T10] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 1390.188546][ T10] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 1390.381106][ T10] usb 2-1: USB disconnect, device number 70 [ 1390.413164][ T10] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1390.414203][ T10] iuu_phoenix 2-1:1.0: device disconnected [ 1391.696837][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1391.826741][ T10] usb 2-1: device descriptor read/64, error -71 [ 1392.067573][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1392.187249][T18145] overlayfs: failed to resolve './file1': -2 [ 1392.206712][ T10] usb 2-1: device descriptor read/64, error -71 [ 1392.266731][ C1] net_ratelimit: 71 callbacks suppressed [ 1392.317409][ T10] usb usb2-port1: attempt power cycle [ 1392.562491][T17051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.686753][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1392.707591][ T10] usb 2-1: device descriptor read/8, error -71 [ 1392.956901][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1392.970850][ T10] usb 2-1: device descriptor read/8, error -71 [ 1393.087458][ T10] usb usb2-port1: unable to enumerate USB device [ 1393.230837][T17051] veth0_vlan: entered promiscuous mode [ 1393.372932][T17051] veth1_vlan: entered promiscuous mode [ 1393.422652][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1393.435527][T18183] overlayfs: failed to resolve './file1': -2 [ 1393.567423][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1393.570669][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.570818][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1393.570844][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1393.574742][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1393.574762][ T10] usb 6-1: Product: syz [ 1393.574777][ T10] usb 6-1: Manufacturer: syz [ 1393.641954][T17051] veth0_macvtap: entered promiscuous mode [ 1393.661587][T17051] veth1_macvtap: entered promiscuous mode [ 1393.693025][T18172] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1393.719057][ T10] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 1393.741984][ T10] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 1393.823344][T17051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1393.885329][T17051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1393.920348][ T1915] usb 6-1: USB disconnect, device number 10 [ 1394.032289][ T1915] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 1394.048434][ T1915] garmin_gps 6-1:1.0: device disconnected [ 1394.400676][ T1846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.403904][ T1846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.609298][ T1846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.118725][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1395.300433][ T10] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1395.301856][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1395.301884][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1395.343355][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1395.343374][ T10] usb 3-1: Product: syz [ 1395.343388][ T10] usb 3-1: Manufacturer: syz [ 1395.416402][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1395.419310][T18202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1395.423418][ T10] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 1395.465801][ T10] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 1395.646384][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1395.646527][ T1023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.646542][ T1023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.818936][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.827319][ T1236] usb 3-1: USB disconnect, device number 78 [ 1395.913662][ T1236] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1395.914615][ T1236] iuu_phoenix 3-1:1.0: device disconnected [ 1395.956312][ T5919] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1396.049657][T12599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.049674][T12599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.132298][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1396.284109][ T5919] usb usb6-port1: attempt power cycle [ 1396.626309][ T5919] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1396.649552][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1396.886246][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1396.910586][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1397.016909][ T5919] usb usb6-port1: unable to enumerate USB device [ 1397.090538][T11126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1397.144257][T11126] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1397.154512][T11126] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1397.186452][T11126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1397.227510][T11126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1397.466212][ C1] net_ratelimit: 294 callbacks suppressed [ 1397.940212][T18261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3660'. [ 1398.038382][ T5919] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1398.038579][ T1236] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1398.260079][ T1236] usb 2-1: Using ep0 maxpacket: 32 [ 1398.261947][ T5919] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1398.264307][ T1236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1398.264370][ T1236] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1398.346363][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1398.346397][ T5919] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1398.351174][ T1236] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1398.351203][ T1236] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1398.351222][ T1236] usb 2-1: config 14 has no interface number 0 [ 1398.351232][ T1236] usb 2-1: config 14 has no interface number 1 [ 1398.351273][ T1236] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1398.351289][ T1236] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1398.351303][ T1236] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1398.351317][ T1236] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1398.351332][ T1236] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1398.351345][ T1236] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1398.351359][ T1236] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1398.351369][ T1236] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1398.351538][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1398.351549][ T5919] usb 4-1: Product: syz [ 1398.351556][ T5919] usb 4-1: Manufacturer: syz [ 1398.424542][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.424562][ T1236] usb 2-1: Product: syz [ 1398.424633][ T1236] usb 2-1: Manufacturer: syz [ 1398.424648][ T1236] usb 2-1: SerialNumber: syz [ 1398.433440][T18257] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1398.469209][ T5919] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected [ 1398.521204][ T5919] usb 4-1: iuu_phoenix converter now attached to ttyUSB0 [ 1398.701798][ T4792] usb 4-1: USB disconnect, device number 68 [ 1398.732148][ T4792] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1398.754883][ T4792] iuu_phoenix 4-1:1.0: device disconnected [ 1399.008126][ T1921] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1399.031798][ T1236] legousbtower 2-1:14.57: interrupt endpoints not found [ 1399.128885][T18265] ceph: No mds server is up or the cluster is laggy [ 1399.268160][ T1921] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1399.433527][ T1236] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1399.469362][ T60] Bluetooth: hci2: command tx timeout [ 1399.617336][ T1236] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1399.721131][ T5919] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1400.443052][T18258] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3658'. [ 1400.513232][ T1236] usb 2-1: USB disconnect, device number 75 [ 1400.582783][ T1236] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1401.192047][T18241] rxe_eth0 speed is unknown, defaulting to 1000 [ 1401.545688][ T60] Bluetooth: hci2: command tx timeout [ 1401.696920][ T1236] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1401.857079][ T1236] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1401.858899][ T1236] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 1401.858928][ T1236] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1401.861483][ T1236] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1401.861504][ T1236] usb 6-1: Product: syz [ 1401.861519][ T1236] usb 6-1: Manufacturer: syz [ 1401.930530][T18306] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1401.970142][ T1236] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected [ 1402.004118][ T1236] usb 6-1: iuu_phoenix converter now attached to ttyUSB0 [ 1402.151835][ T1236] usb 6-1: USB disconnect, device number 15 [ 1402.230013][ T1236] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1402.231059][ T1236] iuu_phoenix 6-1:1.0: device disconnected [ 1402.589025][ C0] net_ratelimit: 135 callbacks suppressed [ 1402.687940][ T5919] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1402.855519][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 1402.858852][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1402.858899][ T5919] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1402.860252][ T5919] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1402.860273][ T5919] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1402.860293][ T5919] usb 2-1: config 14 has no interface number 0 [ 1402.860310][ T5919] usb 2-1: config 14 has no interface number 1 [ 1402.860368][ T5919] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1402.860392][ T5919] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1402.860417][ T5919] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1402.860444][ T5919] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1402.860473][ T5919] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1402.860501][ T5919] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1402.860528][ T5919] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1402.864575][ T5919] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1402.869157][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.869177][ T5919] usb 2-1: Product: syz [ 1402.869191][ T5919] usb 2-1: Manufacturer: syz [ 1402.869206][ T5919] usb 2-1: SerialNumber: syz [ 1403.077090][ T1846] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1403.210198][ T5919] legousbtower 2-1:14.57: interrupt endpoints not found [ 1403.239154][ T5919] legousbtower 2-1:14.228: get version request failed: -71 [ 1403.239348][ T5919] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1403.289270][ T5919] usb 2-1: USB disconnect, device number 76 [ 1403.415492][ T1236] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1403.461831][T18241] wlan1 speed is unknown, defaulting to 1000 [ 1403.555472][ T1236] usb 6-1: device descriptor read/64, error -71 [ 1403.625570][ T60] Bluetooth: hci2: command tx timeout [ 1403.795407][ T1236] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1403.935454][ T1236] usb 6-1: device descriptor read/64, error -71 [ 1404.046950][ T1236] usb usb6-port1: attempt power cycle [ 1404.404617][ T1236] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1404.416580][ T1236] usb 6-1: device descriptor read/8, error -71 [ 1404.655427][ T1236] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1404.676248][ T1236] usb 6-1: device descriptor read/8, error -71 [ 1404.785931][ T1236] usb usb6-port1: unable to enumerate USB device [ 1404.985720][ T1846] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.711917][ T60] Bluetooth: hci2: command tx timeout [ 1405.750599][ T1846] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.795675][T18388] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 5 (only 8 groups) [ 1406.827255][T18394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.706479][ T12] net_ratelimit: 91 callbacks suppressed [ 1407.752005][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1407.872918][T18418] netlink: 'syz.3.3721': attribute type 10 has an invalid length. [ 1408.090274][ T1846] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.940646][T18418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1408.943732][T18418] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1411.366296][T18408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1411.366316][T18408] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1411.378184][ T1236] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1411.437004][T18408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1411.437023][T18408] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1411.531690][ T1236] usb 4-1: Using ep0 maxpacket: 16 [ 1411.538004][ T1236] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1411.553270][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.553290][ T1236] usb 4-1: Product: syz [ 1411.553305][ T1236] usb 4-1: Manufacturer: syz [ 1411.553320][ T1236] usb 4-1: SerialNumber: syz [ 1411.883139][ T1236] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1412.150956][ T1236] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1412.151745][T18241] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.151784][ T1236] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1412.151848][ T1236] usb 4-1: media controller created [ 1412.151861][T18241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.152083][T18241] bridge_slave_0: entered allmulticast mode [ 1412.228411][T18241] bridge_slave_0: entered promiscuous mode [ 1412.608727][ T1236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.611442][T18241] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.611538][T18241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.611724][T18241] bridge_slave_1: entered allmulticast mode [ 1412.654414][T18241] bridge_slave_1: entered promiscuous mode [ 1412.824395][ C0] net_ratelimit: 120 callbacks suppressed [ 1413.440980][ T1236] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1414.046968][ T1236] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1414.068944][ T1236] usb 4-1: USB disconnect, device number 69 [ 1415.436172][ T36] audit: type=1800 audit(1792145035.516:211): pid=18530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.3746" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1415.486792][T18530] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1415.486828][T18530] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1415.486849][T18530] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1416.438639][T18241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.463480][T18241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.922923][T18408] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1416.922950][T18408] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1417.110648][T18558] siw: device registration error -23 [ 1417.182765][T18552] ipvlan0: entered promiscuous mode [ 1417.870994][T18559] net_ratelimit: 101 callbacks suppressed [ 1418.121199][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1418.340022][T18241] team0: Port device team_slave_0 added [ 1418.624274][T18568] bridge0: left allmulticast mode [ 1418.659385][ T10] wlan1 speed is unknown, defaulting to 1000 [ 1418.659451][ T10] syz2: Port: 1 Link DOWN [ 1418.685110][T18241] team0: Port device team_slave_1 added [ 1418.686820][T18408] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1418.686837][T18408] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1419.560018][T18580] netlink: 'syz.0.3768': attribute type 1 has an invalid length. [ 1419.669416][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1419.963133][ T1846] bridge_slave_1: left allmulticast mode [ 1419.963162][ T1846] bridge_slave_1: left promiscuous mode [ 1419.963405][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.217822][ T1846] bridge_slave_0: left allmulticast mode [ 1420.217853][ T1846] bridge_slave_0: left promiscuous mode [ 1420.218099][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.273598][ T1846] gretap0 (unregistering): left promiscuous mode [ 1421.293705][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1421.444252][ T10] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 1421.445484][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1421.445498][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1421.448169][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1421.448180][ T10] usb 2-1: Product: syz [ 1421.448188][ T10] usb 2-1: Manufacturer: syz [ 1421.506641][ T10] iuu_phoenix 2-1:1.0: iuu_phoenix converter detected [ 1421.510443][ T10] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 1421.953464][ T1846] bond0 (unregistering): left promiscuous mode [ 1421.953488][ T1846] bond_slave_0: left promiscuous mode [ 1421.953732][ T1846] bond_slave_1: left promiscuous mode [ 1421.994423][ T1846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.056014][ T1846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.125525][ T1846] bond0 (unregistering): Released all slaves [ 1422.164138][T18578] tipc: Started in network mode [ 1422.164176][T18578] tipc: Node identity ac1414aa, cluster identity 4711 [ 1422.164490][T18578] tipc: New replicast peer: 172.20.20.187 [ 1422.165214][T18578] tipc: Enabled bearer , priority 10 [ 1422.898327][ T5715] net_ratelimit: 178 callbacks suppressed [ 1422.900233][T18580] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1422.909296][T18593] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90 [ 1422.922197][ T5790] usb 2-1: USB disconnect, device number 77 [ 1422.977848][ T5790] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1422.992906][ T5790] iuu_phoenix 2-1:1.0: device disconnected [ 1423.079648][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.079685][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.160612][T18241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.160624][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.160649][T18241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.294762][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1423.296004][T18595] bond1: entered allmulticast mode [ 1423.296496][T18595] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1423.297194][ T1846] tipc: Left network mode [ 1423.643480][T18608] overlayfs: overlapping lowerdir path [ 1423.661384][T18408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1423.661400][T18408] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1423.724803][ T1236] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1423.771592][T18241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.771600][T18241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.771632][T18241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.782062][T17021] tipc: Node number set to 2886997162 [ 1423.893295][ T1236] usb 4-1: Using ep0 maxpacket: 32 [ 1423.965427][ T1236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1423.965480][ T1236] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1423.968582][ T1236] usb 4-1: config 14 has an invalid interface number: 57 but max is 0 [ 1423.968603][ T1236] usb 4-1: config 14 has no interface number 0 [ 1423.968633][ T1236] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1424.031580][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.031599][ T1236] usb 4-1: Product: syz [ 1424.031614][ T1236] usb 4-1: Manufacturer: syz [ 1424.031630][ T1236] usb 4-1: SerialNumber: syz [ 1424.354153][T18612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3779'. [ 1424.529627][ T1236] legousbtower 4-1:14.57: interrupt endpoints not found [ 1424.596603][ T1236] usb 4-1: USB disconnect, device number 70 [ 1424.759181][T11126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1424.817258][T11126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1424.832767][T11126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1424.873485][T11126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1424.894996][T11126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1425.209311][T18620] tipc: Enabling of bearer rejected, already enabled [ 1425.242193][T18241] hsr_slave_0: entered promiscuous mode [ 1425.263673][T18241] hsr_slave_1: entered promiscuous mode [ 1425.264264][T18241] debugfs: 'hsr0' already exists in 'hsr' [ 1425.264277][T18241] Cannot create hsr debugfs directory [ 1426.125052][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1426.131784][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1426.152493][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1426.173222][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1426.185150][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1426.697893][T18639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1426.850511][T18638] overlayfs: overlapping lowerdir path [ 1427.949825][T18652] net_ratelimit: 116 callbacks suppressed [ 1428.087820][ T36] audit: type=1326 audit(1792145048.257:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18651 comm="syz.0.3792" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4a98de559 code=0x0 [ 1428.168832][T18639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.169686][T18639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.211628][T18658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 1428.506252][ T60] Bluetooth: hci1: command tx timeout [ 1429.233603][T18681] siw: device registration error -23 [ 1430.582565][ T60] Bluetooth: hci1: command tx timeout [ 1430.715604][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1430.903741][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1431.079517][T11126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1431.116772][T11126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1431.132881][T11126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1431.135412][T11126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1431.168126][T11126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1431.331769][T18690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.341640][T18690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.502585][ T1846] team0: left promiscuous mode [ 1431.502608][ T1846] team_slave_0: left promiscuous mode [ 1431.502840][ T1846] team_slave_1: left promiscuous mode [ 1431.683443][ T1846] hsr_slave_0: left promiscuous mode [ 1431.702847][ T1846] hsr_slave_1: left promiscuous mode [ 1431.703992][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.704009][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.763764][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.763779][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.845579][ T1846] veth1_macvtap: left promiscuous mode [ 1431.845645][ T1846] veth0_macvtap: left promiscuous mode [ 1431.847139][ T1846] veth1_vlan: left promiscuous mode [ 1431.847261][ T1846] veth0_vlan: left promiscuous mode [ 1432.662338][ T60] Bluetooth: hci1: command tx timeout [ 1432.874159][ T1846] team0 (unregistering): Port device team_slave_1 removed [ 1432.924407][ T1846] team0 (unregistering): Port device team_slave_0 removed [ 1433.142131][ C1] net_ratelimit: 141 callbacks suppressed [ 1433.294940][T18701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3803'. [ 1433.302728][ T60] Bluetooth: hci0: command tx timeout [ 1434.113416][T18600] rxe_eth0 speed is unknown, defaulting to 1000 [ 1435.665070][ T60] Bluetooth: hci1: command tx timeout [ 1435.665101][ T60] Bluetooth: hci0: command tx timeout [ 1436.972965][T18600] wlan1 speed is unknown, defaulting to 1000 [ 1436.983023][T18727] siw: device registration error -23 [ 1437.015445][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1437.091082][T18694] rxe_eth0 speed is unknown, defaulting to 1000 [ 1437.708939][T11126] Bluetooth: hci0: command tx timeout [ 1438.128420][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1438.139445][T18694] wlan1 speed is unknown, defaulting to 1000 [ 1438.357900][ T1846] IPVS: stop unused estimator thread 0... [ 1438.422666][T12606] net_ratelimit: 184 callbacks suppressed [ 1439.243349][T18767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.782474][T11126] Bluetooth: hci0: command tx timeout [ 1441.139093][ T1846] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.245417][T18822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3828'. [ 1442.438581][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1443.631865][ C0] net_ratelimit: 134 callbacks suppressed [ 1444.429428][ T1846] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.123217][ T1846] bond0: (slave netdevsim1): Releasing backup interface [ 1445.178354][ T1846] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.330809][T18205] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1445.437571][T18841] bond7: entered allmulticast mode [ 1445.438169][T18841] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1445.484868][T18205] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 1445.487163][T18205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.526751][T18205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.526772][T18205] usb 2-1: Product: syz [ 1445.526788][T18205] usb 2-1: Manufacturer: syz [ 1445.526802][T18205] usb 2-1: SerialNumber: syz [ 1445.599188][T18205] keyspan 2-1:1.0: Keyspan 1 port adapter converter detected [ 1445.599434][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1445.605054][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1445.605151][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 82 [ 1445.608548][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1445.608652][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1445.608770][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 83 [ 1445.608866][T18205] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 1445.623777][T18205] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1446.072188][T18205] usb 2-1: USB disconnect, device number 78 [ 1446.087391][T18205] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1446.088439][T18205] keyspan 2-1:1.0: device disconnected [ 1446.357355][ T1846] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.617393][T18864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3838'. [ 1447.571265][T18894] bond2: entered allmulticast mode [ 1447.576304][T18894] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1447.762282][T18241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1447.837848][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1447.838237][T18600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.838347][T18600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.838539][T18600] bridge_slave_0: entered allmulticast mode [ 1447.878779][T18600] bridge_slave_0: entered promiscuous mode [ 1447.975559][T18241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1448.057205][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1448.058365][T18600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.058547][T18600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.058750][T18600] bridge_slave_1: entered allmulticast mode [ 1448.066274][T18600] bridge_slave_1: entered promiscuous mode [ 1449.097431][ C0] net_ratelimit: 56 callbacks suppressed [ 1449.221374][ T5747] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1449.393258][ T5747] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1449.398351][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.430670][ T5747] usb 2-1: config 0 descriptor?? [ 1449.458343][ T5747] cp210x 2-1:0.0: cp210x converter detected [ 1449.848810][ T5747] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1449.881597][ T5747] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1449.881619][ T5747] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1449.906726][ T5747] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1449.930406][ T5747] usb 2-1: USB disconnect, device number 79 [ 1449.992904][ T5747] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1450.002228][ T5747] cp210x 2-1:0.0: device disconnected [ 1450.191774][T18241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1450.272111][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1450.406701][T18241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1450.455763][T18241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.896003][T18600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.966667][T18600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.483591][T18694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.483802][T18694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.484035][T18694] bridge_slave_0: entered allmulticast mode [ 1452.491793][T18694] bridge_slave_0: entered promiscuous mode [ 1452.556135][T18600] team0: Port device team_slave_0 added [ 1452.572376][T18694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.572504][T18694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.572741][T18694] bridge_slave_1: entered allmulticast mode [ 1452.593660][T18694] bridge_slave_1: entered promiscuous mode [ 1452.622919][T18600] team0: Port device team_slave_1 added [ 1453.117603][T18694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.124841][T18600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.124853][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.124878][T18600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.230946][T18954] bond3: entered allmulticast mode [ 1453.231497][T18954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1453.247132][T18694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.248262][T18600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.248273][T18600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.248299][T18600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.474113][T18694] team0: Port device team_slave_0 added [ 1453.489429][T18694] team0: Port device team_slave_1 added [ 1453.718385][T18600] hsr_slave_0: entered promiscuous mode [ 1453.726844][T18600] hsr_slave_1: entered promiscuous mode [ 1453.733878][T18600] debugfs: 'hsr0' already exists in 'hsr' [ 1453.733915][T18600] Cannot create hsr debugfs directory [ 1453.741614][T18694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.741625][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.741651][T18694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.777483][T18694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.777494][T18694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.777519][T18694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.991567][ T36] audit: type=1326 audit(1792145074.160:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.991618][ T36] audit: type=1326 audit(1792145074.160:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993217][ T36] audit: type=1326 audit(1792145074.160:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993262][ T36] audit: type=1326 audit(1792145074.160:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993299][ T36] audit: type=1326 audit(1792145074.160:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993337][ T36] audit: type=1326 audit(1792145074.160:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993375][ T36] audit: type=1326 audit(1792145074.160:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993413][ T36] audit: type=1326 audit(1792145074.160:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.993703][ T36] audit: type=1326 audit(1792145074.160:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1453.994466][ T36] audit: type=1326 audit(1792145074.160:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18961 comm="syz.1.3858" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4918f7e559 code=0x7ffc0000 [ 1454.179849][ C0] net_ratelimit: 67 callbacks suppressed [ 1454.539828][ T1921] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1454.577552][ T1846] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.670000][ T1921] usb 2-1: device descriptor read/64, error -71 [ 1455.731436][ T1921] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1455.873827][ T1921] usb 2-1: device descriptor read/64, error -71 [ 1455.980505][ T1921] usb usb2-port1: attempt power cycle [ 1456.182269][T18694] hsr_slave_0: entered promiscuous mode [ 1456.184502][T18694] hsr_slave_1: entered promiscuous mode [ 1456.185726][T18694] debugfs: 'hsr0' already exists in 'hsr' [ 1456.185747][T18694] Cannot create hsr debugfs directory [ 1456.329628][ T1921] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1456.350476][ T1921] usb 2-1: device descriptor read/8, error -71 [ 1456.589654][ T1921] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1456.610891][ T1921] usb 2-1: device descriptor read/8, error -71 [ 1456.720175][ T1921] usb usb2-port1: unable to enumerate USB device [ 1457.207081][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1457.239091][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1457.244083][ T1846] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.258528][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1457.319312][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1457.377763][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1457.384881][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1458.629419][T19032] fuse: Bad value for 'fd' [ 1459.057243][ T1846] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.219276][ C0] net_ratelimit: 58 callbacks suppressed [ 1459.559244][ T1921] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1459.663826][T11126] Bluetooth: hci5: command tx timeout [ 1459.949211][ T1921] usb 2-1: device descriptor read/64, error -71 [ 1461.039180][ T1921] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1461.169382][ T1921] usb 2-1: device descriptor read/64, error -71 [ 1461.279634][ T1921] usb usb2-port1: attempt power cycle [ 1461.482769][ T1846] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.691472][ T1921] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1461.711405][T11126] Bluetooth: hci5: command tx timeout [ 1461.712570][ T1921] usb 2-1: device descriptor read/8, error -71 [ 1461.950987][ T1921] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1461.970759][ T1921] usb 2-1: device descriptor read/8, error -71 [ 1462.085871][ T1921] usb usb2-port1: unable to enumerate USB device [ 1462.368286][T19005] rxe_eth0 speed is unknown, defaulting to 1000 [ 1463.050287][T19005] wlan1 speed is unknown, defaulting to 1000 [ 1463.072289][T19124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.518830][ T1921] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1463.610264][T18600] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1463.669527][ T1921] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1463.670870][ T1921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.670893][ T1921] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1463.670970][ T1921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.686772][T18600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1463.781558][T11126] Bluetooth: hci5: command tx timeout [ 1463.803200][T18600] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1463.852193][T18600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1463.949441][ T1846] bridge_slave_1: left allmulticast mode [ 1463.949460][ T1846] bridge_slave_1: left promiscuous mode [ 1463.949670][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.958028][T17021] usb 2-1: USB disconnect, device number 88 [ 1464.100767][ T1846] bridge_slave_0: left allmulticast mode [ 1464.100786][ T1846] bridge_slave_0: left promiscuous mode [ 1464.103972][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.338840][ C0] net_ratelimit: 115 callbacks suppressed [ 1464.349195][ T1846] bridge_slave_1: left allmulticast mode [ 1464.349233][ T1846] bridge_slave_1: left promiscuous mode [ 1464.349491][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.510667][ T1846] bridge_slave_0: left allmulticast mode [ 1464.510695][ T1846] bridge_slave_0: left promiscuous mode [ 1464.510940][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.859356][T11126] Bluetooth: hci5: command tx timeout [ 1466.660778][ T1846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.718135][T19148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.749232][ T1846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.791558][ T1846] bond0 (unregistering): Released all slaves [ 1466.807423][ T1846] bond1 (unregistering): Released all slaves [ 1467.379644][ T1846] gretap0 (unregistering): left promiscuous mode [ 1467.659438][ T1846] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1467.659460][ T1846] bridge1 (unregistering): left promiscuous mode [ 1467.659488][ T1846] bridge1 (unregistering): left allmulticast mode [ 1467.873826][ T1846] bond1 (unregistering): Released all slaves [ 1467.950762][T18600] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1468.055786][T18600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1468.849806][T18600] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1468.928376][T18600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1468.985237][ T1846] tipc: Disabling bearer [ 1468.996603][ T1846] tipc: Left network mode [ 1469.388650][ T4792] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1469.559017][ T4792] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1469.560192][ T4792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.560232][ T4792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.618243][ C1] net_ratelimit: 41 callbacks suppressed [ 1469.626241][ T4792] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1469.626535][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1469.626618][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1469.659162][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1469.659265][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1469.664862][ T4792] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1469.710067][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1469.710170][ T4792] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1469.734233][ T4792] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1469.820015][ T1921] usb 2-1: USB disconnect, device number 89 [ 1469.852075][ T1921] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1469.941537][ T1921] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1469.967723][ T1921] keyspan 2-1:1.0: device disconnected [ 1470.961767][T19182] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1471.445789][T12612] smbdirect: ib_dev[syz2] removed [ 1471.463179][T19182] ªªªªª»: renamed from bond_slave_1 (while UP) [ 1471.845599][T19187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.687766][ T5790] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1473.718561][ T1846] mac80211_hwsim hwsim12 wlan0 (unregistering): left promiscuous mode [ 1473.750781][ T1846] team0: Port device wlan0 removed [ 1473.849016][ T5790] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1473.852221][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.852294][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.966594][ T5790] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1473.966906][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1473.966994][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1473.996199][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1473.996303][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1474.016792][ T5790] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1474.029855][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1474.029956][ T5790] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1474.033291][ T5790] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1474.169708][ T5790] usb 2-1: USB disconnect, device number 90 [ 1474.192647][ T5790] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1474.215905][ T5790] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1474.217085][ T5790] keyspan 2-1:1.0: device disconnected [ 1474.418549][T19005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.418669][T19005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.441660][T19005] bridge_slave_0: entered allmulticast mode [ 1474.447740][T19005] bridge_slave_0: entered promiscuous mode [ 1474.631674][ T5717] net_ratelimit: 49 callbacks suppressed [ 1474.650538][T19005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.650678][T19005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.650915][T19005] bridge_slave_1: entered allmulticast mode [ 1474.661471][T19005] bridge_slave_1: entered promiscuous mode [ 1476.387031][T19005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.496894][T19005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.794647][T18694] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1476.937920][T17021] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1477.123019][T17021] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1477.124342][T17021] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.124383][T17021] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.153223][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1477.284720][T17021] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1477.285012][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1477.285101][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1477.305625][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1477.305724][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1477.359978][T17021] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1477.446022][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1477.446124][T17021] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1477.494510][T17021] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1477.621733][T17021] usb 2-1: USB disconnect, device number 91 [ 1477.722594][T17021] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1477.772704][T18694] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1477.834473][T17021] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1477.836070][T17021] keyspan 2-1:1.0: device disconnected [ 1477.838853][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1477.872820][T19005] team0: Port device team_slave_0 added [ 1477.880325][T18694] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1478.076015][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1478.109324][T19005] team0: Port device team_slave_1 added [ 1478.126326][T18600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.134205][T18694] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1478.223398][T18694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1478.504983][ T1846] hsr_slave_0: left promiscuous mode [ 1478.538815][ T1846] hsr_slave_1: left promiscuous mode [ 1478.540216][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.540263][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.026673][ C1] net_ratelimit: 37 callbacks suppressed [ 1480.070310][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.070332][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.180434][ T1846] team0: left promiscuous mode [ 1480.180456][ T1846] team_slave_0: left promiscuous mode [ 1480.180702][ T1846] team_slave_1: left promiscuous mode [ 1480.546860][ T1846] hsr_slave_0: left promiscuous mode [ 1480.610907][ T1846] hsr_slave_1: left promiscuous mode [ 1480.642949][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1480.642983][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.698245][ T1846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.698268][ T1846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.310237][ T1846] veth1_macvtap: left promiscuous mode [ 1482.310346][ T1846] veth0_macvtap: left promiscuous mode [ 1482.310671][ T1846] veth1_vlan: left promiscuous mode [ 1482.310857][ T1846] veth0_vlan: left promiscuous mode [ 1482.477122][ T1846] veth1_macvtap: left promiscuous mode [ 1482.477232][ T1846] veth0_macvtap: left promiscuous mode [ 1482.477909][ T1846] veth1_vlan: left promiscuous mode [ 1482.478100][ T1846] veth0_vlan: left promiscuous mode [ 1482.996809][ T1236] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1483.229681][ T1236] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 1483.232918][ T1236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.232939][ T1236] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1483.240708][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1483.240734][ T1236] usb 2-1: Product: syz [ 1483.240748][ T1236] usb 2-1: Manufacturer: syz [ 1483.472054][ T1236] usb 2-1: USB disconnect, device number 92 [ 1483.689486][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1483.737621][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1483.761215][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1483.774466][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1483.775940][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1484.307498][ T1846] team0 (unregistering): Port device team_slave_1 removed [ 1484.504977][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.505042][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.740720][ T1846] team0 (unregistering): Port device team_slave_0 removed [ 1485.696550][ C1] net_ratelimit: 49 callbacks suppressed [ 1485.936616][ T60] Bluetooth: hci2: command tx timeout [ 1486.096956][ T1846] team0 (unregistering): Port device team_slave_1 removed [ 1486.137093][ T1846] team0 (unregistering): Port device team_slave_0 removed [ 1487.918506][T19005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.918517][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.918543][T19005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.953626][T19005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.953637][T19005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.953663][T19005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1488.016239][ T60] Bluetooth: hci2: command tx timeout [ 1488.336183][ T5747] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1488.528056][T19005] hsr_slave_0: entered promiscuous mode [ 1488.530589][T19005] hsr_slave_1: entered promiscuous mode [ 1488.532468][T19005] debugfs: 'hsr0' already exists in 'hsr' [ 1488.532490][T19005] Cannot create hsr debugfs directory [ 1488.617879][ T5747] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1488.620841][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.620911][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.670378][ T5747] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1488.672487][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1488.672560][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1488.760385][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1488.760489][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1488.784437][ T5747] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1488.803646][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1488.803745][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1488.951999][ T5747] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1488.975138][ T5747] usb 2-1: USB disconnect, device number 93 [ 1489.102503][ T5747] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1489.125517][ T5747] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1489.138675][ T5747] keyspan 2-1:1.0: device disconnected [ 1489.966035][ T5734] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1490.055244][T19305] rxe_eth0 speed is unknown, defaulting to 1000 [ 1490.095962][ T60] Bluetooth: hci2: command tx timeout [ 1490.115878][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 1490.116804][ T5734] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1490.118179][ T5734] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.120993][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.121013][ T5734] usb 2-1: Product: syz [ 1490.121027][ T5734] usb 2-1: Manufacturer: syz [ 1490.121041][ T5734] usb 2-1: SerialNumber: syz [ 1490.200597][ T5734] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1490.200693][ T5734] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1490.200708][ T5734] imon:imon_probe: failed to initialize context! [ 1490.200719][ T5734] imon 2-1:155.0: unable to register, err -19 [ 1490.745784][ C0] net_ratelimit: 62 callbacks suppressed [ 1491.121460][T11126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1491.251336][T11126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1491.269853][T11126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1491.273209][T11126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1491.309880][T11126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1492.183929][ T60] Bluetooth: hci2: command tx timeout [ 1492.761562][ T1236] usb 2-1: USB disconnect, device number 94 [ 1492.789379][T19358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.622023][ T60] Bluetooth: hci1: command tx timeout [ 1495.695596][ T60] Bluetooth: hci1: command tx timeout [ 1495.925258][ T1236] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1495.935406][ C1] net_ratelimit: 30 callbacks suppressed [ 1496.080414][ T1236] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1496.082429][ T1236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.082511][ T1236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.154615][ T1236] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 1496.154893][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 1496.155006][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 1496.288829][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 1496.288928][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 1496.312730][ T1236] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1496.327823][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 1496.327928][ T1236] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 1496.391678][ T1236] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1496.438957][ T1236] usb 2-1: USB disconnect, device number 95 [ 1496.487784][ T1236] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1496.944668][ T1236] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1496.952217][ T1236] keyspan 2-1:1.0: device disconnected [ 1497.263867][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1497.291800][T19353] rxe_eth0 speed is unknown, defaulting to 1000 [ 1497.435123][ T1236] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1497.585412][ T1236] usb 2-1: Using ep0 maxpacket: 32 [ 1497.601506][ T1236] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1497.604633][ T1236] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.630382][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.630400][ T1236] usb 2-1: Product: syz [ 1497.630415][ T1236] usb 2-1: Manufacturer: syz [ 1497.630427][ T1236] usb 2-1: SerialNumber: syz [ 1497.722705][ T1236] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1497.722781][ T1236] imon 2-1:155.0: unable to initialize intf0, err -19 [ 1497.722795][ T1236] imon:imon_probe: failed to initialize context! [ 1497.722807][ T1236] imon 2-1:155.0: unable to register, err -19 [ 1497.775202][ T60] Bluetooth: hci1: command tx timeout [ 1498.297845][T19415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1499.069809][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1499.855022][ T60] Bluetooth: hci1: command tx timeout [ 1500.965302][ T5717] net_ratelimit: 65 callbacks suppressed [ 1501.012523][ T5747] usb 2-1: USB disconnect, device number 96 [ 1501.502617][T19305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.502735][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.502974][T19305] bridge_slave_0: entered allmulticast mode [ 1501.508834][T19305] bridge_slave_0: entered promiscuous mode [ 1501.670269][T19305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.670400][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.670636][T19305] bridge_slave_1: entered allmulticast mode [ 1501.678558][T19305] bridge_slave_1: entered promiscuous mode [ 1502.288609][T19305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.318113][T19305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.844932][ T1236] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1502.869721][T19005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1502.916595][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1502.921736][T19305] team0: Port device team_slave_0 added [ 1503.074129][ T1236] usb 2-1: not running at top speed; connect to a high speed hub [ 1503.074166][ T1236] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1503.077101][ T1236] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.077121][ T1236] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1503.077224][ T1236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.105555][T19005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1503.359945][ T1236] usb 2-1: string descriptor 0 read error: -71 [ 1503.370211][ T1236] uvcvideo 2-1:1.0: Found UVC 0.00 device (046d:0825) [ 1503.370237][ T1236] uvcvideo 2-1:1.0: No valid video chain found. [ 1503.393060][ T1236] usb 2-1: USB disconnect, device number 97 [ 1503.562579][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1503.577347][T19305] team0: Port device team_slave_1 added [ 1503.626087][T19005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1503.703318][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1503.986982][T19005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1504.066163][T19005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1504.315118][T19305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.315125][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.315139][T19305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.368887][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1504.401514][T19305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.401525][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.401550][T19305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.790797][T19353] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.790925][T19353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.791228][T19353] bridge_slave_0: entered allmulticast mode [ 1504.797544][T19353] bridge_slave_0: entered promiscuous mode [ 1504.829461][T19353] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.829588][T19353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.829825][T19353] bridge_slave_1: entered allmulticast mode [ 1504.842930][T19353] bridge_slave_1: entered promiscuous mode [ 1506.156170][ C1] net_ratelimit: 24 callbacks suppressed [ 1506.268672][T19305] hsr_slave_0: entered promiscuous mode [ 1506.270136][T19305] hsr_slave_1: entered promiscuous mode [ 1506.271166][T19305] debugfs: 'hsr0' already exists in 'hsr' [ 1506.271188][T19305] Cannot create hsr debugfs directory [ 1506.361704][T19353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.425060][T19353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1507.306579][T19353] team0: Port device team_slave_0 added [ 1507.540073][T19353] team0: Port device team_slave_1 added [ 1509.366291][T19353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.366303][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.366329][T19353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.468314][T19353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.468325][T19353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.468354][T19353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.580842][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1510.342665][T11126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.454860][T11126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1510.458215][T11126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.462035][T11126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1510.463289][T11126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1510.928001][T19353] hsr_slave_0: entered promiscuous mode [ 1510.938084][T19353] hsr_slave_1: entered promiscuous mode [ 1510.945143][T19353] debugfs: 'hsr0' already exists in 'hsr' [ 1510.945165][T19353] Cannot create hsr debugfs directory [ 1511.213565][ C1] net_ratelimit: 32 callbacks suppressed [ 1511.622222][T19005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.016586][ T60] Bluetooth: hci0: command tx timeout [ 1513.416851][T19005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1513.475564][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.475705][T12611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.611534][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.611683][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.308135][T19510] rxe_eth0 speed is unknown, defaulting to 1000 [ 1515.053351][ T60] Bluetooth: hci0: command tx timeout [ 1515.402892][T19549] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1516.413008][ C1] net_ratelimit: 66 callbacks suppressed [ 1517.133691][ T60] Bluetooth: hci0: command tx timeout [ 1517.501250][T11126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1517.596261][T11126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1517.616311][T11126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1517.644023][T11126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1517.651188][T11126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1519.213357][ T60] Bluetooth: hci0: command tx timeout [ 1519.412509][T19005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.853250][ T60] Bluetooth: hci3: command tx timeout [ 1520.594057][T19510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.594275][T19510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.594512][T19510] bridge_slave_0: entered allmulticast mode [ 1520.603515][T19510] bridge_slave_0: entered promiscuous mode [ 1520.610299][T19510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.612072][T19510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.612316][T19510] bridge_slave_1: entered allmulticast mode [ 1520.623533][T19510] bridge_slave_1: entered promiscuous mode [ 1521.720610][T12611] net_ratelimit: 22 callbacks suppressed [ 1521.932473][ T60] Bluetooth: hci3: command tx timeout [ 1523.901594][T19510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1523.947893][T19510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.012330][ T60] Bluetooth: hci3: command tx timeout [ 1524.785013][T19510] team0: Port device team_slave_0 added [ 1524.787022][T19579] rxe_eth0 speed is unknown, defaulting to 1000 [ 1524.814884][T19510] team0: Port device team_slave_1 added [ 1525.109059][T19510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.109071][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.109095][T19510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.157791][T19510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.157802][T19510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1525.157828][T19510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.807179][T19510] hsr_slave_0: entered promiscuous mode [ 1525.821069][T19510] hsr_slave_1: entered promiscuous mode [ 1525.840810][T19510] debugfs: 'hsr0' already exists in 'hsr' [ 1525.840831][T19510] Cannot create hsr debugfs directory [ 1526.092738][ T60] Bluetooth: hci3: command tx timeout [ 1527.293585][ C1] net_ratelimit: 65 callbacks suppressed [ 1527.964371][T19305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1528.110093][T19305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1528.215411][T19305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1528.309802][T19305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1528.415597][T19305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1528.474255][T19305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1528.588616][T19305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1528.629731][T19305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1531.634972][T19353] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1531.734241][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1531.917689][T19353] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1531.963809][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1532.246167][T19353] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1532.339389][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1532.577285][ T5257] net_ratelimit: 45 callbacks suppressed [ 1532.580822][T19353] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1532.660246][T19353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1534.475747][T19510] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1534.522086][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1534.538978][T19579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.540653][T19579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.540894][T19579] bridge_slave_0: entered allmulticast mode [ 1534.595881][T19579] bridge_slave_0: entered promiscuous mode [ 1534.609569][T19510] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1534.692971][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1534.713655][T19579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.713779][T19579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1534.714036][T19579] bridge_slave_1: entered allmulticast mode [ 1534.745261][T19579] bridge_slave_1: entered promiscuous mode [ 1534.775338][T19510] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1534.813256][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1534.943390][T19510] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1535.193636][T19510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1535.343387][T19579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.389655][T19579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.634218][T19579] team0: Port device team_slave_0 added [ 1535.733927][T19579] team0: Port device team_slave_1 added [ 1536.046504][T19579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.046515][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.046542][T19579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.161767][T19579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.161778][T19579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.161805][T19579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1536.345202][T19305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.697681][T19579] hsr_slave_0: entered promiscuous mode [ 1536.718923][T19579] hsr_slave_1: entered promiscuous mode [ 1536.720081][T19579] debugfs: 'hsr0' already exists in 'hsr' [ 1536.720103][T19579] Cannot create hsr debugfs directory [ 1536.853468][T19305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1538.058699][ C1] net_ratelimit: 40 callbacks suppressed [ 1538.099437][T12611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.099785][T12611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.507212][ T1851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.507347][ T1851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.833929][T19353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.335371][T19353] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.350635][T19510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.139883][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.140081][T12606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.180169][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.199483][T12599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.257709][T19510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.319461][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.319801][T12639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.394756][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.395013][T12639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.157854][ C1] net_ratelimit: 48 callbacks suppressed [ 1543.969785][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1544.047897][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1544.056050][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1544.060024][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1544.062224][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1544.550090][T19829] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1545.932518][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.932580][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.333487][T11126] Bluetooth: hci5: command tx timeout [ 1547.432183][T19845] fuse: Bad value for 'fd' [ 1547.825461][T19819] rxe_eth0 speed is unknown, defaulting to 1000 [ 1548.249341][T19353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.420074][T11126] Bluetooth: hci5: command tx timeout [ 1548.489893][ C1] net_ratelimit: 63 callbacks suppressed [ 1548.608262][T19510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.077794][T19579] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1549.117698][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1549.138889][T19579] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1549.254400][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1549.297390][T19579] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1549.363228][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1549.446109][T19579] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1549.488895][T19579] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1549.502000][T19353] veth0_vlan: entered promiscuous mode [ 1549.810062][T19353] veth1_vlan: entered promiscuous mode [ 1550.490659][T11126] Bluetooth: hci5: command tx timeout [ 1550.694679][T19510] veth0_vlan: entered promiscuous mode [ 1550.726218][T19353] veth0_macvtap: entered promiscuous mode [ 1550.792676][T19353] veth1_macvtap: entered promiscuous mode [ 1550.831747][T19510] veth1_vlan: entered promiscuous mode [ 1550.971377][T19353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.657903][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1551.744364][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1551.747382][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1551.777023][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1551.787808][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1552.096609][T19579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.242439][T19819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.242556][T19819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.242831][T19819] bridge_slave_0: entered allmulticast mode [ 1552.258468][T19819] bridge_slave_0: entered promiscuous mode [ 1552.298497][T19510] veth0_macvtap: entered promiscuous mode [ 1552.310518][T19819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.310660][T19819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.310949][T19819] bridge_slave_1: entered allmulticast mode [ 1552.323489][T19819] bridge_slave_1: entered promiscuous mode [ 1552.570059][T11126] Bluetooth: hci5: command tx timeout [ 1552.663761][T19510] veth1_macvtap: entered promiscuous mode [ 1552.722621][T19819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.055362][T19819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.136672][T19579] 8021q: adding VLAN 0 to HW filter on device team0 [ 1553.331359][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.331609][T12599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.364507][T19819] team0: Port device team_slave_0 added [ 1553.431971][T19819] team0: Port device team_slave_1 added [ 1553.445403][T19510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.528270][T19886] net_ratelimit: 61 callbacks suppressed [ 1553.614669][T12611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.614933][T12611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.745651][ T1846] ------------[ cut here ]------------ [ 1553.745663][ T1846] conntrack cleanup blocked for 60s [ 1553.745673][ T1846] WARNING: net/netfilter/nf_conntrack_core.c:2505 at nf_conntrack_cleanup_net_list+0x21f/0x360, CPU#1: kworker/u8:13/1846 [ 1553.771781][ T1846] Modules linked in: [ 1553.775712][ T1846] CPU: 1 UID: 0 PID: 1846 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1553.787381][ T1846] Tainted: [L]=SOFTLOCKUP [ 1553.791726][ T1846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1553.801828][ T1846] Workqueue: netns cleanup_net [ 1553.806593][ T1846] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1553.813383][ T1846] Code: 4c 89 ef e8 b3 0b bb f8 4d 8b 7d 00 4d 39 ef 74 69 e8 85 46 4e f8 45 31 e4 e9 a5 fe ff ff e8 78 46 4e f8 48 8d 3d a1 3c 48 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 1553.833087][ T1846] RSP: 0000:ffffc9000797f8b0 EFLAGS: 00010293 [ 1553.839273][ T1846] RAX: ffffffff897892e8 RBX: dffffc0000000000 RCX: ffff88802c668000 [ 1553.847429][ T1846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90c0cf90 [ 1553.855759][ T1846] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1553.863847][ T1846] R10: dffffc0000000000 R11: ffffed1006bf8201 R12: 000000010001e90c [ 1553.871887][ T1846] R13: ffffc9000797fa50 R14: ffffc9000797fa50 R15: 000000010001e90d [ 1553.879979][ T1846] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 1553.889218][ T1846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.895977][ T1846] CR2: 00007f2e052c7e9c CR3: 0000000012f2c000 CR4: 00000000003526f0 [ 1553.904061][ T1846] Call Trace: [ 1553.907360][ T1846] [ 1553.910371][ T1846] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1553.916503][ T1846] ops_undo_list+0x4b4/0x8d0 [ 1553.921184][ T1846] ? __pfx_ops_undo_list+0x10/0x10 [ 1553.926431][ T1846] ? rt_spin_unlock+0x159/0x200 [ 1553.931365][ T1846] ? idr_destroy+0x21b/0x2a0 [ 1553.935991][ T1846] ? rt_spin_unlock+0x165/0x200 [ 1553.940933][ T1846] cleanup_net+0x575/0x810 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1553.945374][ T1846] ? __pfx_cleanup_net+0x10/0x10 [ 1553.950449][ T1846] ? rcu_is_watching+0x16/0xb0 [ 1553.951719][T19886] rxe_eth0 speed is unknown, defaulting to 1000 [ 1553.961577][ T1846] ? process_scheduled_works+0x97a/0x1630 [ 1553.967339][ T1846] process_scheduled_works+0xc3d/0x1630 [ 1553.973009][ T1846] ? __pfx_process_scheduled_works+0x10/0x10 [ 1553.979272][ T1846] ? assign_work+0x3cf/0x5d0 [ 1553.983903][ T1846] worker_thread+0xa47/0xfb0 [ 1553.988593][ T1846] kthread+0x38b/0x470 [ 1553.992763][ T1846] ? __pfx_worker_thread+0x10/0x10 [ 1553.996949][T19510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.003712][T19819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.003723][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.003748][T19819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.036752][T19819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.036763][T19819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.036795][T19819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.092268][ T1846] ? __pfx_kthread+0x10/0x10 [ 1554.096884][ T1846] ret_from_fork+0x514/0xb70 [ 1554.101556][ T1846] ? __pfx_ret_from_fork+0x10/0x10 [ 1554.106689][ T1846] ? __switch_to+0xc89/0x1420 [ 1554.111454][ T1846] ? __pfx_kthread+0x10/0x10 [ 1554.116090][ T1846] ret_from_fork_asm+0x1a/0x30 [ 1554.120961][ T1846] [ 1554.123995][ T1846] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1554.131289][ T1846] CPU: 1 UID: 0 PID: 1846 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1554.142938][ T1846] Tainted: [L]=SOFTLOCKUP [ 1554.147274][ T1846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.157342][ T1846] Workqueue: netns cleanup_net [ 1554.162192][ T1846] Call Trace: [ 1554.165483][ T1846] [ 1554.168426][ T1846] vpanic+0x56d/0xa60 [ 1554.172426][ T1846] ? __pfx__printk+0x10/0x10 [ 1554.177034][ T1846] ? __pfx_vpanic+0x10/0x10 [ 1554.181558][ T1846] ? is_bpf_text_address+0x292/0x2b0 [ 1554.186950][ T1846] ? is_bpf_text_address+0x26/0x2b0 [ 1554.192172][ T1846] panic+0xc5/0xd0 [ 1554.195916][ T1846] ? __pfx_panic+0x10/0x10 [ 1554.200361][ T1846] ? ret_from_fork_asm+0x1a/0x30 [ 1554.205319][ T1846] __warn+0x315/0x4c0 [ 1554.209314][ T1846] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1554.215481][ T1846] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1554.221657][ T1846] __report_bug+0x276/0x570 [ 1554.226187][ T1846] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1554.232370][ T1846] ? __pfx___report_bug+0x10/0x10 [ 1554.237428][ T1846] report_bug_entry+0x19b/0x290 [ 1554.242297][ T1846] ? nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1554.248474][ T1846] ? nf_conntrack_cleanup_net_list+0x224/0x360 [ 1554.254655][ T1846] handle_bug+0xce/0x200 [ 1554.258923][ T1846] exc_invalid_op+0x1a/0x50 [ 1554.263441][ T1846] asm_exc_invalid_op+0x1a/0x20 [ 1554.268309][ T1846] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x360 [ 1554.275089][ T1846] Code: 4c 89 ef e8 b3 0b bb f8 4d 8b 7d 00 4d 39 ef 74 69 e8 85 46 4e f8 45 31 e4 e9 a5 fe ff ff e8 78 46 4e f8 48 8d 3d a1 3c 48 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 1554.294716][ T1846] RSP: 0000:ffffc9000797f8b0 EFLAGS: 00010293 [ 1554.300801][ T1846] RAX: ffffffff897892e8 RBX: dffffc0000000000 RCX: ffff88802c668000 [ 1554.308797][ T1846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90c0cf90 [ 1554.316791][ T1846] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1554.324784][ T1846] R10: dffffc0000000000 R11: ffffed1006bf8201 R12: 000000010001e90c [ 1554.332775][ T1846] R13: ffffc9000797fa50 R14: ffffc9000797fa50 R15: 000000010001e90d [ 1554.340790][ T1846] ? nf_conntrack_cleanup_net_list+0x218/0x360 [ 1554.346991][ T1846] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1554.353103][ T1846] ops_undo_list+0x4b4/0x8d0 [ 1554.357725][ T1846] ? __pfx_ops_undo_list+0x10/0x10 [ 1554.362857][ T1846] ? rt_spin_unlock+0x159/0x200 [ 1554.367760][ T1846] ? idr_destroy+0x21b/0x2a0 [ 1554.372380][ T1846] ? rt_spin_unlock+0x165/0x200 [ 1554.377252][ T1846] cleanup_net+0x575/0x810 [ 1554.381686][ T1846] ? __pfx_cleanup_net+0x10/0x10 [ 1554.386647][ T1846] ? rcu_is_watching+0x16/0xb0 [ 1554.391429][ T1846] ? process_scheduled_works+0x97a/0x1630 [ 1554.397172][ T1846] process_scheduled_works+0xc3d/0x1630 [ 1554.402779][ T1846] ? __pfx_process_scheduled_works+0x10/0x10 [ 1554.408793][ T1846] ? assign_work+0x3cf/0x5d0 [ 1554.413415][ T1846] worker_thread+0xa47/0xfb0 [ 1554.418054][ T1846] kthread+0x38b/0x470 [ 1554.422174][ T1846] ? __pfx_worker_thread+0x10/0x10 [ 1554.427311][ T1846] ? __pfx_kthread+0x10/0x10 [ 1554.431960][ T1846] ret_from_fork+0x514/0xb70 [ 1554.436566][ T1846] ? __pfx_ret_from_fork+0x10/0x10 [ 1554.441685][ T1846] ? __switch_to+0xc89/0x1420 [ 1554.446423][ T1846] ? __pfx_kthread+0x10/0x10 [ 1554.451035][ T1846] ret_from_fork_asm+0x1a/0x30 [ 1554.455875][ T1846] [ 1554.459196][ T1846] Kernel Offset: disabled [ 1554.463589][ T1846] Rebooting in 86400 seconds..