last executing test programs: 6m8.963849828s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace(0x10, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x51) sendto$inet6(0xffffffffffffffff, &(0x7f0000001a00)="50053e93fb669c9b6e0c498276ec14cc50f4b8f92b1d70636197def495a3ff45c7950871b1b1db344791b5c2414305c0d01e27d1598c1fee9043c5574ba6b1faf7c3759f97388a351f1b5478e7ccd8dd61847abeecfbfc69e4095974ded92880760b7569233ce0f35dbddd46c9cc673d8f0e3160aa1b1c9777ca7a0d982aa95ab12c7d3568346fb3f65afd679e508fadd19a6932fe924c02a2aae4bb691c5bbd76e21a09c8fafddba218148acb75e02610bf32f1f707b8046b9e9cd8e0e62e14578085814a4c6732cb92459c939000673d9d4085892460d9049e9dd7d892681f4897d0806ae61d30bcd0817832edea4fc52ae9a9bf1c55481d99df4c4ef3489dec45c64b31b82d0cb610d7ab32c61a9fdfdeb88b63452a4d2b4cdd89c74aaaffd662887b8da2a63acfef48694cc63d012aa312ed1a73fef45c6cfc2def603a38b5a2f8b8d4e5abbc5500fc429dd42349533ead1b874fea4fea8779c6c2fbeeda047e9395197cf09638e75cf6e10705409853a6b4131229d4eeb656457b62892e6bd6f5d9507b86fc188c8d18f27d805fb365d4b8b7de4881e5989625c539872a15e3ca2a26cf365577ea463957b06d9fb3cff031f6301aa94e48b0fb28209dc380762b9816e72d67911bbd429e205d20809292a1cf1696404cd6d0407228ebbdfaa4a8add3570acd747e548d3165284760797d2c6697a655b4f22a13067b339073f49d8ee604b59a2e4cb073b8a9b7856d1ef7349a47d1130adc64084a9e4650f0908e849a8f059eff61cfa8c5cdb3822b87bbe3706dd042f6e2a7791fb5c9dc40db489a5abd4fd4becaafb7cbba23af1e8f156b6ef6dfcc55bad2db89e56e744f91d1a98123eb585c340aefb3d6c73ecfbd78beb28adf522d16dbf29ae04ccdd6a1c55865ef467066a478978981235a4c93a74f6670691640dde3d8bfa378772329046cf14213689d3a107df19e16e8af8fa1b72623391a5fd05e25128030e4aa2839136dd72478662c8e7ac78f5e2cd2b2d6d6b3337fa4310b29556c477a0e4dfec7fbd53fc98d9b4a3e6e9002d5bd5764d7a7401f59ac78593abdaa8d229e2a7b8245266373496ec97df588e6a14450a6e694969e092039cb24905ae7be0f06f39f4281017a9ca54f79f7984b0684ee311617a8fb68093d9d38a73a2eecfc19fb0826c98d9e8c12785bda6609058f072a8408b6b0066c6d9e17feab14580ff5e5db46239b0395dd2d6604a2a4844e52071d35efac7116a53abdd13a5dd69ea15739066158c4af41758027b9d7e27770e88edfcb64e3a2dc63d268f8c3b9d9fd454b7c34122cbf173c1f81ade3edcbb6d1448cbbdb92fef01600d378e0781b674224bb3316b97101bbc63f2c18c0c93851dc4d2696ac122ebd720add51bdca03c78b27513a2f9730be231bd3eda72e7421b67fd91ec1ae26316f03a8182deba0228ffd777675d097bf92916e182cd56e1aac7975410dc2911ec5a51626aa22ba7c3efc7cc3059a3bf70ec2b1b8073ea199946f581742c673758feb208308002897dee96eb3c8dc88922a6a0c62764d7597286ebe70e3537f3c8b61559a9a7883a4b96b0d6b4a34b81e11d0a76399c62eed19758ef5ae0d724135b0a3e9f475dee08cb7c4f44a707774e2839eeee001255d3aa974319bbb92e8ef9fdd82b42352b983e99d1a38a26d8c1a9d231c73d86912b0b97214df827ae918a8661b573c5c877bc6b0a733ee32fa06b3a9401f48d9", 0x4d1, 0x40084, 0x0, 0x0) 6m7.378507393s ago: executing program 2 (id=51): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x8a42) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 6m5.376755249s ago: executing program 2 (id=54): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df93", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="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", 0x445}], 0x1}}], 0x2, 0x0) 6m3.765319403s ago: executing program 2 (id=56): sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) 6m2.032740644s ago: executing program 2 (id=60): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 5m57.911127138s ago: executing program 2 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5m41.868045169s ago: executing program 32 (id=66): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13.642387672s ago: executing program 3 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cifs\x00', 0x20486, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) write$binfmt_format(r2, &(0x7f00000000c0)='-1\x00', 0x3) write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r5, &(0x7f0000000140)='off\n', 0x4) write(r5, &(0x7f0000000180)='on', 0x2) 13.248106914s ago: executing program 1 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0, 0x7f, 0x6, 0xffffffc2}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xf8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00'], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r4, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) 11.617248037s ago: executing program 1 (id=777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32111800000100112233445500112233445500ff", 0x24) 11.028792294s ago: executing program 3 (id=780): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 10.67326598s ago: executing program 3 (id=781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cifs\x00', 0x20486, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) stat(&(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) write$binfmt_format(0xffffffffffffffff, &(0x7f00000000c0)='-1\x00', 0x3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001914"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008014) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r4, &(0x7f0000000180)='on', 0x2) 10.023849176s ago: executing program 1 (id=782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x2004000}, 0x4000000) openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 10.01615809s ago: executing program 3 (id=783): r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.origin\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000090a010400000000000000000a0000040900010073797a31000000000800054000000002090002007379fe850000000008000a40fffffffc3c0000000e0a010200000000000000000a0000020900010073797a31000000000900020073797a31"], 0xa0}, 0x1, 0x0, 0x0, 0x240000d0}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) dup(r1) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6131000000522f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010081000006000b003e000086dd0009080088a3"], 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 8.240640699s ago: executing program 3 (id=785): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x2, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 5.944762762s ago: executing program 0 (id=787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) 5.608753876s ago: executing program 1 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cifs\x00', 0x20486, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') stat(&(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) write$binfmt_format(r2, &(0x7f00000000c0)='-1\x00', 0x3) write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r5, &(0x7f0000000140)='off\n', 0x4) write(r5, &(0x7f0000000180)='on', 0x2) 5.51336575s ago: executing program 0 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4044084) 5.051562552s ago: executing program 0 (id=791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4.575943499s ago: executing program 0 (id=792): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cifs\x00', 0x20486, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) stat(&(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) write$binfmt_format(0xffffffffffffffff, &(0x7f00000000c0)='-1\x00', 0x3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="100000001914"], 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20008014) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r4, &(0x7f0000000180)='on', 0x2) 4.283529053s ago: executing program 1 (id=793): r0 = socket$igmp6(0xa, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000080)={&(0x7f0000000280), 0x8}) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000680)="229fe804c429ec73f7bf41bd5754858151e58680ae813a15d6ba7989d46f7d2cae0bb73817a3e1a0b44383e1d85a599764db88c3e8b8ad09512ac7d550758dd7cc74097c69f6cb3b28d00f73a057ec99a2fdaede8fdc8871433308d3347af6c5dd8dfc0ea908d1b2513689d21b026b8c013eb0925f6835be4932693e03a08ceedd6628de9db5f68dc9102548cad277c0264deaa67edbcd943f3e56b737d1c16aeb1beeb0c1a18937185936a80c8fa773fbb9bc1cc3cb6eec4786f9defeae43b52f823cc711e69c2a5110fef84228f9f7b0c5f2bc177c9177914108da3b92ca3cda88510baaa41c2e", &(0x7f0000000640)="9a6c4b9e50864547cc9dcd364e358eea7e3dd59923d4034ec2ee5d0c00018df2eb787a87f70ee59032966b1552ec24b74fc6"}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)='\xff\xff') sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="280000000000000029000000040000003c01020000004402000204"], 0x28}, 0xc0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401589d30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'veth1_macvtap\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000280)=0x4, 0x4) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_usb_control_io$uac1(r1, &(0x7f0000000800)={0x14, &(0x7f0000000540)={0x40, 0x5, 0xe0, {0xe0, 0x4, "0e8d87969577f14c0a8ff324f66e8807f380291f041ad0cd5fb1782f192fce78ea0c1206ad63873f8fb3e99e183edac15c7e76b5ce6e10665b83360dfc39aaf6c7fa8f035f81ebf8705d844841889a1c88bca176630f76dff722ee8b944ecb320732d62e751d4503dd36ad9a1b9fd6454253e5bcbadc42e48b7c81d3daa43fc2c719c1e45ca9c2b394c8ce1d01eea6557b85d248befba0b686434f740e83a8515a807bbf19a4d1ca062be1610199cea8d7fa6e7ae7d95effb96266080867fd1ecfc4f91f5fe1bbd4b7840446184619ccfae1ab5a431d1dd401388f6034fd"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x25, "9f2ed31a7d7c55d19d2932161097421d2413760973945aca434737e2333c4a02b99c608c11"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000008c0)={0x0, 0x8, 0x1}, &(0x7f0000000900)={0x20, 0x81, 0x1, "eb"}, &(0x7f0000000940)={0x20, 0x82, 0x2, "df57"}, &(0x7f0000000980)={0x20, 0x83, 0x3, "197627"}, &(0x7f00000009c0)={0x20, 0x84, 0x3, "eac7be"}, &(0x7f0000000a00)={0x20, 0x85, 0x3, "b2fba9"}}) 4.222495014s ago: executing program 4 (id=794): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x80000000}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.912824331s ago: executing program 0 (id=795): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x2, 0x812, @dev={0xfe, 0x80, '\x00', 0x41}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000"], 0x18}, 0x0) 3.568308198s ago: executing program 0 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x2004000}, 0x4000000) openat$ttyS3(0xffffff9c, 0x0, 0x105200, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.425160072s ago: executing program 4 (id=797): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1fe7, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.081800303s ago: executing program 4 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) 1.668544491s ago: executing program 4 (id=799): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0xe042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setns(0xc9, 0x0) socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.291463779s ago: executing program 1 (id=800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0x80000000, 0x4000004, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xd, 0x5}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x2, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 994.312118ms ago: executing program 4 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa105000000000000000000f8ffffffb702000008000000b7030000000000008500000006000000850000000500000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 423.293054ms ago: executing program 4 (id=802): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cifs\x00', 0x20486, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') stat(&(0x7f00000001c0)='./sys/devices/system/cpu/smt/control\x00', &(0x7f0000000200)) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x5}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xa2}, @TCA_PIE_LIMIT={0x8, 0x2, 0xf}]}}]}, 0x48}}, 0x4000010) write$binfmt_format(r2, &(0x7f00000000c0)='-1\x00', 0x3) write$binfmt_format(r2, &(0x7f0000000180)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/devices/system/cpu/smt/control\x00', 0x801, 0x0) write(r5, &(0x7f0000000140)='off\n', 0x4) write(r5, &(0x7f0000000180)='on', 0x2) 0s ago: executing program 3 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0', 0x3) kernel console output (not intermixed with test programs): 00 device (046d:0825) [ 248.340466][ T36] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 248.368427][ T36] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 248.370738][ T36] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 248.401897][ T5840] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 248.405658][ T36] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:dc:79:52:20:31 [ 248.412564][ T5597] process 6820 (syz.3.272) no longer affine to cpu1 [ 248.420502][ T36] usb 2-1: USB disconnect, device number 6 [ 248.487810][ T36] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 248.698053][ T6838] smpboot: CPU 1 is now offline [ 248.766243][ T5605] usb 4-1: USB disconnect, device number 16 [ 248.794082][ T6840] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 248.907631][ T6845] fuse: Bad value for 'fd' [ 249.139976][ T36] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 249.180246][ T36] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 249.180433][ T36] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 250.470613][ C0] net_ratelimit: 16 callbacks suppressed [ 251.273169][ T5840] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 251.498038][ T5840] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 251.513116][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 251.513145][ T5840] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 251.540394][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.540417][ T5840] usb 1-1: Product: syz [ 251.540433][ T5840] usb 1-1: Manufacturer: syz [ 251.540449][ T5840] usb 1-1: SerialNumber: syz [ 251.580608][ T6865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.580741][ T6865] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.627099][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 251.627257][ C1] port100 1-1:1.0: NFC: Urb failure (status -71) [ 251.628768][ T5840] port100 1-1:1.0: NFC: Could not get supported command types [ 251.699587][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.699811][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.700056][ T6596] bridge_slave_0: entered allmulticast mode [ 251.714429][ T6596] bridge_slave_0: entered promiscuous mode [ 252.957489][ T5610] usb 1-1: USB disconnect, device number 10 [ 253.027451][ T6882] tmpfs: Invalid gid '0x00000000ffffffff' [ 253.824864][ T950] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 253.933928][ T5840] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 254.023507][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 254.285501][ T5840] usb 2-1: device descriptor read/64, error -32 [ 254.346592][ T950] usb 4-1: not running at top speed; connect to a high speed hub [ 254.346630][ T950] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 254.348331][ T950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.348480][ T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.401772][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.401977][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.402223][ T6596] bridge_slave_1: entered allmulticast mode [ 254.410438][ T6596] bridge_slave_1: entered promiscuous mode [ 254.514149][ T950] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 254.514249][ T950] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 254.650266][ T5840] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 254.791385][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.800283][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 254.801626][ T5840] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 254.805248][ T5840] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 254.805274][ T5840] usb 2-1: config 1 has no interface number 0 [ 254.805342][ T5840] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 254.805370][ T5840] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 254.805396][ T5840] usb 2-1: config 1 interface 105 has no altsetting 0 [ 254.811001][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 254.811023][ T5840] usb 2-1: Product: syz [ 254.811039][ T5840] usb 2-1: Manufacturer: syz [ 254.811073][ T5840] usb 2-1: SerialNumber: syz [ 254.819851][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.908210][ T6885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.908325][ T6885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.110624][ T6596] team0: Port device team_slave_0 added [ 255.129692][ T6596] team0: Port device team_slave_1 added [ 255.441227][ T6885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.441348][ T6885] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.968857][ C0] net_ratelimit: 28 callbacks suppressed [ 256.100984][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102775][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.338694][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.339702][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.340430][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 256.499431][ T5610] usb 4-1: USB disconnect, device number 17 [ 256.847664][ T5840] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:31:d5:ff:c8:5c [ 256.855827][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.855840][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.855864][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.863167][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.863179][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.863205][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.962728][ T5840] usb 2-1: USB disconnect, device number 8 [ 257.193965][ T5840] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 260.113948][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 260.114050][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 260.114138][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 260.245250][ T6923] fuse: Bad value for 'user_id' [ 260.245268][ T6923] fuse: Bad value for 'user_id' [ 260.479447][ T6929] Bluetooth: ISO socket layer initialized [ 260.564765][ T6596] hsr_slave_0: entered promiscuous mode [ 260.574694][ T6596] hsr_slave_1: entered promiscuous mode [ 260.587026][ T6596] debugfs: 'hsr0' already exists in 'hsr' [ 260.587049][ T6596] Cannot create hsr debugfs directory [ 260.716998][ T5607] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 260.724729][ T6938] Bluetooth: MGMT ver 1.23 [ 261.030261][ C0] net_ratelimit: 60 callbacks suppressed [ 261.250029][ T6940] smpboot: CPU 1 is now offline [ 262.291216][ T6517] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 262.326521][ T6942] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 262.462191][ T6517] usb 5-1: Using ep0 maxpacket: 16 [ 262.463268][ T6517] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 262.466261][ T6517] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 262.466286][ T6517] usb 5-1: config 1 has no interface number 0 [ 262.466335][ T6517] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.466381][ T6517] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.466408][ T6517] usb 5-1: config 1 interface 105 has no altsetting 0 [ 262.553957][ T6517] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 262.553991][ T6517] usb 5-1: Product: syz [ 262.554008][ T6517] usb 5-1: Manufacturer: syz [ 262.554025][ T6517] usb 5-1: SerialNumber: syz [ 262.602177][ T6945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 262.602391][ T6945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.018262][ T6945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.018790][ T6945] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 263.022299][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 263.279922][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.295906][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.297713][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.297802][ T9] usb 4-1: SerialNumber: syz [ 263.476725][ T6517] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 263.478175][ T6517] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 263.489502][ T6517] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 263.754797][ T6517] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f2:4e:9a:d0:80:35 [ 263.949462][ T6517] usb 5-1: USB disconnect, device number 10 [ 264.017894][ T6517] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 264.279768][ T6967] fuse: Bad value for 'fd' [ 264.591052][ T6517] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.591273][ T6517] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.591585][ T6517] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 264.946300][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 265.109971][ T9] usb 4-1: USB disconnect, device number 18 [ 266.933595][ C0] net_ratelimit: 32 callbacks suppressed [ 268.322288][ T6596] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 268.453313][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.457216][ T6596] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 268.540317][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 268.584801][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.586678][ T7009] FAULT_INJECTION: forcing a failure. [ 268.586678][ T7009] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.586714][ T7009] CPU: 0 UID: 0 PID: 7009 Comm: syz.4.327 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.586741][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.586755][ T7009] Call Trace: [ 268.586765][ T7009] [ 268.586776][ T7009] dump_stack_lvl+0xe8/0x150 [ 268.586816][ T7009] should_fail_ex+0x46b/0x600 [ 268.586854][ T7009] prepare_alloc_pages+0x223/0x650 [ 268.586896][ T7009] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 268.586936][ T7009] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 268.586986][ T7009] ? __pfx_policy_nodemask+0x10/0x10 [ 268.587014][ T7009] ? __lock_acquire+0x747/0x2de0 [ 268.587053][ T7009] alloc_pages_mpol+0xd4/0x280 [ 268.587082][ T7009] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 268.587112][ T7009] vma_alloc_folio_noprof+0xe1/0x1e0 [ 268.587141][ T7009] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 268.587166][ T7009] ? lock_acquire+0x115/0x350 [ 268.587208][ T7009] do_pte_missing+0x835/0x28f0 [ 268.587254][ T7009] ? handle_mm_fault+0xeb/0x28c0 [ 268.587290][ T7009] handle_mm_fault+0xf64/0x28c0 [ 268.587327][ T7009] ? handle_mm_fault+0xeb/0x28c0 [ 268.587369][ T7009] ? __pfx_handle_mm_fault+0x10/0x10 [ 268.587397][ T7009] ? lock_vma_under_rcu+0x45a/0x500 [ 268.587431][ T7009] ? __pfx_do_futex+0x10/0x10 [ 268.587480][ T7009] do_user_addr_fault+0xa4f/0x1340 [ 268.587518][ T7009] ? trace_page_fault_user+0x84/0x1e0 [ 268.587546][ T7009] exc_page_fault+0x6a/0xc0 [ 268.587574][ T7009] asm_exc_page_fault+0x26/0x30 [ 268.587600][ T7009] RIP: 0033:0x7f377e7bf6cb [ 268.587623][ T7009] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 268.587643][ T7009] RSP: 002b:00007f377cb54fa0 EFLAGS: 00010206 [ 268.587665][ T7009] RAX: 0000000000000000 RBX: 00007f377eb85fa0 RCX: 0000000000000000 [ 268.587681][ T7009] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0 [ 268.587697][ T7009] RBP: 00007f377e99506b R08: 0000000000000000 R09: 0000000000000000 [ 268.587712][ T7009] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000000 [ 268.587727][ T7009] R13: 00007f377eb86038 R14: 00007f377eb85fa0 R15: 00007ffd9e639398 [ 268.587765][ T7009] [ 268.590233][ T7009] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 268.681395][ T6596] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 268.856638][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 268.870232][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 268.876889][ T5840] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 268.878306][ T5840] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 268.878323][ T5840] usb 2-1: config 1 has no interface number 0 [ 268.878351][ T5840] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 268.878366][ T5840] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 268.878380][ T5840] usb 2-1: config 1 interface 105 has no altsetting 0 [ 268.932587][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 268.932610][ T5840] usb 2-1: Product: syz [ 268.932626][ T5840] usb 2-1: Manufacturer: syz [ 268.932642][ T5840] usb 2-1: SerialNumber: syz [ 268.983511][ T7004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.983591][ T7004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.033045][ T6596] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.316131][ T6596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.429425][ T7004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.429570][ T7004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.856260][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.857121][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.858081][ T5840] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 269.946406][ T5840] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:98:a7:5e:93:55 [ 270.024900][ T5840] usb 2-1: USB disconnect, device number 9 [ 270.031233][ T5840] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 270.052318][ T7034] smpboot: CPU 1 is now offline [ 270.128417][ T7025] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 270.369776][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 270.369943][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 270.394575][ T5840] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 270.475398][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 270.651269][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 270.657225][ T9] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 270.657251][ T9] usb 4-1: config 1 has no interface number 0 [ 270.668703][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.668725][ T9] usb 4-1: Product: syz [ 270.668739][ T9] usb 4-1: Manufacturer: syz [ 270.668754][ T9] usb 4-1: SerialNumber: syz [ 270.798308][ T9] usb 4-1: 3:0 : does not exist [ 270.798346][ T9] usb 4-1: 3:0 : does not exist [ 272.377912][ C0] net_ratelimit: 30 callbacks suppressed [ 272.655300][ T7074] FAULT_INJECTION: forcing a failure. [ 272.655300][ T7074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 272.655344][ T7074] CPU: 0 UID: 0 PID: 7074 Comm: syz.4.340 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 272.655371][ T7074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 272.655385][ T7074] Call Trace: [ 272.655395][ T7074] [ 272.655407][ T7074] dump_stack_lvl+0xe8/0x150 [ 272.655448][ T7074] should_fail_ex+0x46b/0x600 [ 272.655497][ T7074] prepare_alloc_pages+0x223/0x650 [ 272.655538][ T7074] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 272.655580][ T7074] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.655619][ T7074] ? __pfx_policy_nodemask+0x10/0x10 [ 272.655636][ T7074] ? __lock_acquire+0x747/0x2de0 [ 272.655656][ T7074] alloc_pages_mpol+0xd4/0x280 [ 272.655673][ T7074] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 272.655688][ T7074] vma_alloc_folio_noprof+0xe1/0x1e0 [ 272.655703][ T7074] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 272.655716][ T7074] ? lock_acquire+0x115/0x350 [ 272.655737][ T7074] do_pte_missing+0x835/0x28f0 [ 272.655760][ T7074] ? handle_mm_fault+0xeb/0x28c0 [ 272.655778][ T7074] handle_mm_fault+0xf64/0x28c0 [ 272.655796][ T7074] ? handle_mm_fault+0xeb/0x28c0 [ 272.655817][ T7074] ? __pfx_handle_mm_fault+0x10/0x10 [ 272.655831][ T7074] ? lock_vma_under_rcu+0x45a/0x500 [ 272.655848][ T7074] ? __pfx_do_futex+0x10/0x10 [ 272.655874][ T7074] do_user_addr_fault+0xa4f/0x1340 [ 272.655894][ T7074] ? trace_page_fault_user+0x84/0x1e0 [ 272.655909][ T7074] exc_page_fault+0x6a/0xc0 [ 272.655924][ T7074] asm_exc_page_fault+0x26/0x30 [ 272.655937][ T7074] RIP: 0033:0x7f377e7bf6cb [ 272.655950][ T7074] Code: 00 00 00 48 8d 3d 5d b1 1a 00 48 89 c1 31 c0 e8 0b 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 91 b1 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 272.655962][ T7074] RSP: 002b:00007f377cb54fa0 EFLAGS: 00010206 [ 272.655976][ T7074] RAX: 0000000000000000 RBX: 00007f377eb85fa0 RCX: 0000000000000000 [ 272.655987][ T7074] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00002000000000c0 [ 272.655996][ T7074] RBP: 00007f377e99506b R08: 0000000000000000 R09: 0000000000000000 [ 272.656004][ T7074] R10: 00002000000000c0 R11: 0000000000000000 R12: 0000000000000000 [ 272.656012][ T7074] R13: 00007f377eb86038 R14: 00007f377eb85fa0 R15: 00007ffd9e639398 [ 272.656031][ T7074] [ 272.656041][ T7074] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 273.097688][ T9] usb 4-1: USB disconnect, device number 19 [ 273.835866][ T5607] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 273.982930][ T5607] Bluetooth: hci2: Injecting HCI hardware error event [ 274.012838][ T5608] Bluetooth: hci2: hardware error 0x00 [ 274.713342][ T5607] Bluetooth: hci4: Received unexpected HCI Event 0x00 ** 61003 printk messages dropped ** [ 316.474214][ T5611] aqc111 5-1:1.105 eth7 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 316.474324][ T5611] aqc111 5-1:1.105 eth7 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 316.474414][ T5611] aqc111 5-1:1.105 eth7 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 316.635796][ T5605] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 316.660329][ T7292] tmpfs: Invalid gid '0x00000000ffffffff' [ 323.610147][ T1145] bridge_slave_1: left allmulticast mode [ 323.610176][ T1145] bridge_slave_1: left promiscuous mode [ 323.610361][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.632939][ T1145] bridge_slave_0: left allmulticast mode [ 323.632958][ T1145] bridge_slave_0: left promiscuous mode [ 323.633132][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.661105][ C0] net_ratelimit: 16 callbacks suppressed [ 323.790065][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.793878][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.057967][ T5605] usb 1-1: device descriptor read/all, error -71 [ 324.394249][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 324.679426][ T7322] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 325.951309][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.029040][ T7336] FAULT_INJECTION: forcing a failure. [ 326.029040][ T7336] name failslab, interval 1, probability 0, space 0, times 0 [ 326.029066][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.029081][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.029089][ T7336] Call Trace: [ 326.029094][ T7336] [ 326.029100][ T7336] dump_stack_lvl+0xe8/0x150 [ 326.029124][ T7336] should_fail_ex+0x46b/0x600 [ 326.029145][ T7336] should_failslab+0xa8/0x100 [ 326.029161][ T7336] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 326.029183][ T7336] ? kasprintf+0xe2/0x140 [ 326.029195][ T7336] ? kasprintf+0xe2/0x140 [ 326.029210][ T7336] kvasprintf+0xeb/0x1a0 [ 326.029224][ T7336] ? __pfx_kvasprintf+0x10/0x10 [ 326.029239][ T7336] ? do_raw_spin_lock+0x12b/0x2f0 [ 326.029260][ T7336] kasprintf+0xe2/0x140 [ 326.029275][ T7336] ? __pfx_kasprintf+0x10/0x10 [ 326.029296][ T7336] ieee80211_alloc_led_names+0x27a/0x2b0 [ 326.029313][ T7336] ieee80211_alloc_hw_nm+0x1a18/0x2260 [ 326.029332][ T7336] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 326.029353][ T7336] mac80211_hwsim_new_radio+0x215/0x5810 [ 326.029374][ T7336] ? mac80211_hwsim_new_radio+0xf6/0x5810 [ 326.029396][ T7336] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 326.029408][ T7336] ? rcu_is_watching+0x16/0xb0 [ 326.029426][ T7336] ? trace_kmalloc+0x2a/0xf0 [ 326.029447][ T7336] hwsim_new_radio_nl+0xd8b/0xf90 [ 326.029475][ T7336] genl_family_rcv_msg_doit+0x233/0x340 [ 326.029499][ T7336] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 326.029520][ T7336] ? bpf_lsm_capable+0x9/0x20 [ 326.029536][ T7336] ? security_capable+0x7e/0x2c0 [ 326.029552][ T7336] genl_rcv_msg+0x614/0x7a0 [ 326.029569][ T7336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.029581][ T7336] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.029608][ T7336] netlink_rcv_skb+0x226/0x4a0 [ 326.029626][ T7336] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.029639][ T7336] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.029671][ T7336] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.029688][ T7336] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.029718][ T7336] genl_rcv+0x28/0x40 [ 326.029739][ T7336] netlink_unicast+0x7f5/0x990 [ 326.029779][ T7336] netlink_sendmsg+0x813/0xb40 [ 326.029808][ T7336] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 326.029838][ T7336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.029856][ T7336] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 326.029875][ T7336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.029890][ T7336] sock_sendmsg_nosec+0x13a/0x180 [ 326.029910][ T7336] ____sys_sendmsg+0x565/0x870 [ 326.029931][ T7336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.029951][ T7336] ? import_iovec+0x73/0xa0 [ 326.029972][ T7336] ___sys_sendmsg+0x2a5/0x360 [ 326.029986][ T7336] ? __lock_acquire+0x747/0x2de0 [ 326.030005][ T7336] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.030022][ T7336] ? futex_wait+0x2a2/0x390 [ 326.030056][ T7336] ? __fget_files+0x2a/0x420 [ 326.030069][ T7336] ? __fget_files+0x3a8/0x420 [ 326.030098][ T7336] __x64_sys_sendmsg+0x1b7/0x290 [ 326.030126][ T7336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.030175][ T7336] do_syscall_64+0x166/0x520 [ 326.030199][ T7336] ? trace_irq_disable+0x3b/0x140 [ 326.030227][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.030251][ T7336] ? clear_bhb_loop+0x70/0xc0 [ 326.030276][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.030297][ T7336] RIP: 0033:0x7f2065f3e159 [ 326.030319][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.030338][ T7336] RSP: 002b:00007f2064196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.030365][ T7336] RAX: ffffffffffffffda RBX: 00007f20661c5fa0 RCX: 00007f2065f3e159 [ 326.030382][ T7336] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 326.030398][ T7336] RBP: 00007f2065fd506b R08: 0000000000000000 R09: 0000000000000000 [ 326.030414][ T7336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.030429][ T7336] R13: 00007f20661c6038 R14: 00007f20661c5fa0 R15: 00007ffc94d980a8 [ 326.030466][ T7336] [ 326.256618][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.316738][ T1145] bond0 (unregistering): Released all slaves [ 326.672805][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 327.065793][ T7346] tmpfs: Invalid gid '0x00000000ffffffff' [ 329.296201][ C0] net_ratelimit: 20 callbacks suppressed [ 330.353593][ T1145] hsr_slave_0: left promiscuous mode [ 330.430338][ T950] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 330.434809][ T1145] hsr_slave_1: left promiscuous mode [ 330.438920][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.499760][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.601740][ T950] usb 5-1: not running at top speed; connect to a high speed hub [ 330.601779][ T950] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 330.603242][ T950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.603398][ T950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.661310][ T950] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 330.661379][ T950] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 330.711628][ T5598] process 7346 (syz.4.405) no longer affine to cpu1 [ 330.819835][ T950] usb 5-1: USB disconnect, device number 15 [ 330.954956][ T7363] smpboot: CPU 1 is now offline [ 331.097907][ T7369] fuse: Bad value for 'fd' [ 331.158426][ T7366] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 331.356246][ T7372] netlink: 'syz.4.410': attribute type 29 has an invalid length. [ 331.821220][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 331.891065][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 332.644620][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 332.738884][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.738967][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.739113][ T7090] bridge_slave_0: entered allmulticast mode [ 332.741617][ T7090] bridge_slave_0: entered promiscuous mode [ 332.854536][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.854686][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.854950][ T7090] bridge_slave_1: entered allmulticast mode [ 332.872466][ T7090] bridge_slave_1: entered promiscuous mode ** 3328 printk messages dropped ** [ 333.838065][ T7392] UDC core: g1: couldn't find an available UDC or it's busy [ 334.330786][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.361915][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.366646][ T5705] net_ratelimit: 16 callbacks suppressed [ 335.572159][ T7415] FAULT_INJECTION: forcing a failure. [ 335.572159][ T7415] name failslab, interval 1, probability 0, space 0, times 0 [ 335.572198][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.572226][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 335.572241][ T7415] Call Trace: [ 335.572251][ T7415] [ 335.572262][ T7415] dump_stack_lvl+0xe8/0x150 [ 335.572302][ T7415] should_fail_ex+0x46b/0x600 [ 335.572342][ T7415] should_failslab+0xa8/0x100 [ 335.572370][ T7415] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 335.572408][ T7415] ? kasprintf+0xe2/0x140 [ 335.572428][ T7415] ? kasprintf+0xe2/0x140 [ 335.572457][ T7415] kvasprintf+0xeb/0x1a0 [ 335.572481][ T7415] ? __pfx_kvasprintf+0x10/0x10 [ 335.572509][ T7415] ? do_raw_spin_lock+0x12b/0x2f0 [ 335.572544][ T7415] kasprintf+0xe2/0x140 [ 335.572574][ T7415] ? __pfx_kasprintf+0x10/0x10 [ 335.572615][ T7415] ieee80211_alloc_led_names+0x27a/0x2b0 [ 335.572654][ T7415] ieee80211_alloc_hw_nm+0x1a18/0x2260 [ 335.572690][ T7415] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 335.572728][ T7415] mac80211_hwsim_new_radio+0x215/0x5810 [ 335.572753][ T7415] ? ktime_get+0x45/0x220 [ 335.572782][ T7415] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 335.572830][ T7415] ? ktime_get+0x1f5/0x220 [ 335.572861][ T7415] ? lapic_next_event+0x11/0x20 [ 335.572889][ T7415] ? mac80211_hwsim_new_radio+0xf6/0x5810 [ 335.572915][ T7415] ? __pfx_clockevents_program_event+0x10/0x10 [ 335.572956][ T7415] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 335.572979][ T7415] ? irqentry_exit+0x218/0x910 [ 335.573006][ T7415] ? lockdep_hardirqs_on+0x7b/0x110 [ 335.573031][ T7415] ? irqentry_exit+0x218/0x910 [ 335.573063][ T7415] hwsim_new_radio_nl+0xd8b/0xf90 [ 335.573124][ T7415] genl_family_rcv_msg_doit+0x233/0x340 [ 335.573159][ T7415] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 335.573198][ T7415] ? bpf_lsm_capable+0x9/0x20 [ 335.573227][ T7415] ? security_capable+0x7e/0x2c0 [ 335.573258][ T7415] genl_rcv_msg+0x614/0x7a0 [ 335.573291][ T7415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.573313][ T7415] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 335.573364][ T7415] netlink_rcv_skb+0x226/0x4a0 [ 335.573397][ T7415] ? __pfx_genl_rcv_msg+0x10/0x10 [ 335.573423][ T7415] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.573469][ T7415] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.573500][ T7415] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.573536][ T7415] genl_rcv+0x28/0x40 [ 335.573558][ T7415] netlink_unicast+0x7f5/0x990 [ 335.573599][ T7415] netlink_sendmsg+0x813/0xb40 [ 335.573629][ T7415] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 335.573672][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.573705][ T7415] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.573745][ T7415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.573775][ T7415] sock_sendmsg_nosec+0x13a/0x180 [ 335.573820][ T7415] ____sys_sendmsg+0x565/0x870 [ 335.573859][ T7415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.573897][ T7415] ? import_iovec+0x73/0xa0 [ 335.573933][ T7415] ___sys_sendmsg+0x2a5/0x360 [ 335.573959][ T7415] ? __lock_acquire+0x747/0x2de0 [ 335.573995][ T7415] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.574028][ T7415] ? futex_wait+0x2a2/0x390 [ 335.574088][ T7415] ? __fget_files+0x2a/0x420 [ 335.574112][ T7415] ? __fget_files+0x3a8/0x420 [ 335.574156][ T7415] __x64_sys_sendmsg+0x1b7/0x290 [ 335.574187][ T7415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.574240][ T7415] do_syscall_64+0x166/0x520 [ 335.574265][ T7415] ? trace_irq_disable+0x3b/0x140 [ 335.574295][ T7415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.574318][ T7415] ? clear_bhb_loop+0x70/0xc0 [ 335.574347][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.574370][ T7415] RIP: 0033:0x7f2065f3e159 [ 335.574393][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.574414][ T7415] RSP: 002b:00007f2064196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.574439][ T7415] RAX: ffffffffffffffda RBX: 00007f20661c5fa0 RCX: 00007f2065f3e159 [ 335.574457][ T7415] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 335.574473][ T7415] RBP: 00007f2065fd506b R08: 0000000000000000 R09: 0000000000000000 [ 335.574487][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.574501][ T7415] R13: 00007f20661c6038 R14: 00007f20661c5fa0 R15: 00007ffc94d980a8 [ 335.574538][ T7415] [ 336.093449][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.204965][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.225542][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.249985][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.269254][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.519721][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 338.391227][ T5612] Bluetooth: hci1: command tx timeout [ 338.709344][ T7442] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ ** 462 printk messages dropped ** [ 340.497422][ T5612] Bluetooth: hci1: command tx timeout [ 341.456400][ T1012] bridge_slave_1: left allmulticast mode [ 341.456432][ T1012] bridge_slave_1: left promiscuous mode [ 341.456753][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.699869][ T1012] bridge_slave_0: left allmulticast mode [ 341.699900][ T1012] bridge_slave_0: left promiscuous mode [ 341.739751][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.930279][ T5840] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 342.048027][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 342.092929][ T5840] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 342.096767][ T5840] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.096829][ T5840] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 342.096857][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.130767][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 342.130789][ T5840] usb 2-1: Product: syz [ 342.130805][ T5840] usb 2-1: Manufacturer: syz [ 342.232826][ T7484] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 342.256606][ T5840] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 343.397008][ T5612] Bluetooth: hci1: command tx timeout [ 343.478908][ T5840] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 343.578852][ T5840] usb 2-1: USB disconnect, device number 11 [ 343.814832][ T5840] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 343.816225][ T5840] garmin_gps 2-1:1.0: device disconnected [ 344.061320][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.160323][ T202] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 344.183491][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.266604][ T1012] bond0 (unregistering): Released all slaves [ 344.312781][ T202] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 344.315703][ T202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.560198][ C0] net_ratelimit: 14 callbacks suppressed [ 345.564675][ T5608] Bluetooth: hci1: command tx timeout [ 345.826360][ T202] usb 5-1: Firmware version (0.0) predates our first public release. [ 345.826383][ T202] usb 5-1: Please update to version 0.2 or newer [ 348.743576][ T5605] usb 5-1: USB disconnect, device number 16 [ 349.502038][ T7537] smpboot: CPU 1 is now offline [ 349.626500][ T7540] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 350.605546][ C0] net_ratelimit: 56 callbacks suppressed [ 351.520239][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 351.672556][ T31] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 351.675724][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.675783][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 351.675809][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.730648][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 351.730669][ T31] usb 2-1: Product: syz [ 351.730684][ T31] usb 2-1: Manufacturer: syz [ 351.745503][ T7569] smpboot: CPU 1 is now offline [ 351.772749][ T7565] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.796709][ T31] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 352.017901][ T7570] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 352.066813][ T31] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 352.242643][ T7231] usb 2-1: USB disconnect, device number 12 [ 352.266630][ T202] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 352.377193][ T7231] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 352.378279][ T7231] garmin_gps 2-1:1.0: device disconnected [ 352.432325][ T202] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 352.458280][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.986900][ T202] usb 4-1: Firmware version (0.0) predates our first public release. [ 352.986924][ T202] usb 4-1: Please update to version 0.2 or newer [ 353.300320][ T31] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 353.485027][ T31] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 353.486934][ T31] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 353.486959][ T31] usb 2-1: config 1 has no interface number 0 [ 353.515061][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.515084][ T31] usb 2-1: Product: syz [ 353.515100][ T31] usb 2-1: Manufacturer: syz [ 353.515116][ T31] usb 2-1: SerialNumber: syz [ 353.601671][ T31] usb 2-1: 3:0 : does not exist [ 353.601688][ T31] usb 2-1: 3:0 : does not exist [ 353.721788][ T7590] smpboot: CPU 1 is now offline [ 353.785609][ T7591] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 356.020963][ T5705] net_ratelimit: 18 callbacks suppressed [ 356.256611][ T5605] usb 4-1: USB disconnect, device number 23 [ 356.764045][ T202] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 356.911129][ T202] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 356.913017][ T202] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.913072][ T202] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 356.913099][ T202] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.917062][ T202] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 356.917084][ T202] usb 1-1: Product: syz [ 356.917101][ T202] usb 1-1: Manufacturer: syz [ 357.044009][ T7615] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 357.048508][ T202] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 357.108906][ T202] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 357.525018][ T202] usb 1-1: USB disconnect, device number 16 [ 357.808547][ T7625] smpboot: CPU 1 is now offline [ 357.963556][ T5605] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 358.069909][ T202] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 358.099203][ T7622] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 358.112373][ T5605] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 358.147057][ T5605] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.147144][ T5605] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 358.147160][ T5605] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.193533][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 358.193545][ T5605] usb 4-1: Product: syz [ 358.193554][ T5605] usb 4-1: Manufacturer: syz [ 358.254297][ T202] garmin_gps 1-1:1.0: device disconnected [ 358.338221][ T7619] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 358.452698][ T5605] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 358.623695][ T5605] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 358.854397][ T5605] usb 4-1: USB disconnect, device number 24 [ 359.073701][ T31] usb 2-1: USB disconnect, device number 13 [ 359.426725][ T5605] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 359.428553][ T5605] garmin_gps 4-1:1.0: device disconnected [ 360.398295][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 360.767383][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.768559][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.768718][ T7420] bridge_slave_0: entered allmulticast mode [ 361.322857][ C0] net_ratelimit: 17 callbacks suppressed [ 361.819839][ T7420] bridge_slave_0: entered promiscuous mode [ 361.956048][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.956216][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.956456][ T7420] bridge_slave_1: entered allmulticast mode [ 361.992257][ T7420] bridge_slave_1: entered promiscuous mode [ 362.251406][ T7660] smpboot: CPU 1 is now offline [ 362.270984][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 362.340962][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.429359][ T7662] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 362.431988][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.761535][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 362.999115][ T7420] team0: Port device team_slave_0 added [ 363.019536][ T7420] team0: Port device team_slave_1 added [ 363.451431][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.451446][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.451473][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.470590][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.470602][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.470628][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.666161][ T5259] 8021q: adding VLAN 0 to HW filter on device eth7 [ 364.024670][ T7420] hsr_slave_0: entered promiscuous mode [ 364.039841][ T7420] hsr_slave_1: entered promiscuous mode [ 364.082934][ T7420] debugfs: 'hsr0' already exists in 'hsr' [ 364.082954][ T7420] Cannot create hsr debugfs directory [ 364.164574][ T31] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 365.241182][ T31] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 365.244223][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.244283][ T31] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 365.244308][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.252834][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 365.252857][ T31] usb 5-1: Product: syz [ 365.252874][ T31] usb 5-1: Manufacturer: syz [ 365.354776][ T7698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 365.379054][ T31] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 365.604927][ T31] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 365.826071][ T31] usb 5-1: USB disconnect, device number 17 [ 365.886285][ T5605] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 366.006319][ T31] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 366.022489][ T31] garmin_gps 5-1:1.0: device disconnected [ 366.046623][ T5605] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 366.060727][ T5605] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.060788][ T5605] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 366.060815][ T5605] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.105601][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 366.105624][ T5605] usb 2-1: Product: syz [ 366.105640][ T5605] usb 2-1: Manufacturer: syz [ 366.244863][ T7711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 366.291113][ T5605] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 366.338810][ T5605] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 366.400218][ T5840] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 366.564543][ T5840] usb 1-1: Using ep0 maxpacket: 16 [ 366.567002][ T5840] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 366.571078][ T5840] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 366.571102][ T5840] usb 1-1: config 1 has no interface number 0 [ 366.571160][ T5840] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 366.571186][ T5840] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 366.571209][ T5840] usb 1-1: config 1 interface 105 has no altsetting 0 [ 366.592196][ T31] usb 2-1: USB disconnect, device number 15 [ 366.653763][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 366.653786][ T5840] usb 1-1: Product: syz [ 366.653802][ T5840] usb 1-1: Manufacturer: syz [ 366.653817][ T5840] usb 1-1: SerialNumber: syz [ 366.762593][ T31] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 366.769427][ T7722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.769626][ T7722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 366.774984][ T31] garmin_gps 2-1:1.0: device disconnected [ 366.807236][ T7727] FAULT_INJECTION: forcing a failure. [ 366.807236][ T7727] name failslab, interval 1, probability 0, space 0, times 0 [ 366.807272][ T7727] CPU: 1 UID: 0 PID: 7727 Comm: syz.3.501 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.807298][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 366.807312][ T7727] Call Trace: [ 366.807322][ T7727] [ 366.807332][ T7727] dump_stack_lvl+0xe8/0x150 [ 366.807371][ T7727] should_fail_ex+0x46b/0x600 [ 366.807407][ T7727] should_failslab+0xa8/0x100 [ 366.807433][ T7727] __kmalloc_noprof+0xfb/0x790 [ 366.807465][ T7727] ? offload_action_alloc+0x2b/0x160 [ 366.807492][ T7727] ? offload_action_alloc+0x2b/0x160 [ 366.807529][ T7727] offload_action_alloc+0x2b/0x160 [ 366.807569][ T7727] tcf_action_offload_add_ex+0x2de/0x870 [ 366.807604][ T7727] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 366.807655][ T7727] ? tunnel_key_get_fill_size+0x23/0x4b0 [ 366.807692][ T7727] ? tunnel_key_get_fill_size+0x42e/0x4b0 [ 366.807724][ T7727] ? tcf_action_fill_size+0x25a/0x2e0 [ 366.807749][ T7727] ? __pfx_tunnel_key_get_fill_size+0x10/0x10 [ 366.807788][ T7727] tcf_action_init+0x381/0xa60 [ 366.807822][ T7727] ? __pfx_tcf_action_init+0x10/0x10 [ 366.807874][ T7727] ? __lock_acquire+0x747/0x2de0 [ 366.807905][ T7727] ? __pfx___nla_validate_parse+0x10/0x10 [ 366.808041][ T7727] tc_ctl_action+0x43b/0xc70 [ 366.808079][ T7727] ? __pfx_tc_ctl_action+0x10/0x10 [ 366.808109][ T7727] ? rt_mutex_slowlock+0x424/0x780 [ 366.808182][ T7727] ? __pfx_tc_ctl_action+0x10/0x10 [ 366.808204][ T7727] rtnetlink_rcv_msg+0x7b9/0xc00 [ 366.808227][ T7727] ? kmem_cache_alloc_node_noprof+0x3fc/0x660 [ 366.808259][ T7727] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 366.808280][ T7727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.808304][ T7727] ? __lock_acquire+0x747/0x2de0 [ 366.808346][ T7727] netlink_rcv_skb+0x226/0x4a0 [ 366.808375][ T7727] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.808401][ T7727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.808444][ T7727] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.808482][ T7727] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.808515][ T7727] netlink_unicast+0x7f5/0x990 [ 366.808556][ T7727] netlink_sendmsg+0x813/0xb40 [ 366.808585][ T7727] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 366.808623][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.808655][ T7727] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 366.808690][ T7727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.808718][ T7727] sock_sendmsg_nosec+0x13a/0x180 [ 366.808754][ T7727] ____sys_sendmsg+0x565/0x870 [ 366.808791][ T7727] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.808832][ T7727] ? import_iovec+0x73/0xa0 [ 366.808870][ T7727] ___sys_sendmsg+0x2a5/0x360 [ 366.808897][ T7727] ? __lock_acquire+0x747/0x2de0 [ 366.808942][ T7727] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.808974][ T7727] ? futex_wait+0x2a2/0x390 [ 366.809034][ T7727] ? __fget_files+0x2a/0x420 [ 366.809059][ T7727] ? __fget_files+0x3a8/0x420 [ 366.809101][ T7727] __x64_sys_sendmsg+0x1b7/0x290 [ 366.809131][ T7727] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.809182][ T7727] do_syscall_64+0x166/0x520 [ 366.809207][ T7727] ? trace_irq_disable+0x3b/0x140 [ 366.809233][ T7727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.809255][ T7727] ? clear_bhb_loop+0x70/0xc0 [ 366.809283][ T7727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.809305][ T7727] RIP: 0033:0x7f2065f3e159 [ 366.809327][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.809346][ T7727] RSP: 002b:00007f2064196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.809372][ T7727] RAX: ffffffffffffffda RBX: 00007f20661c5fa0 RCX: 00007f2065f3e159 [ 366.809390][ T7727] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 366.809406][ T7727] RBP: 00007f2065fd506b R08: 0000000000000000 R09: 0000000000000000 [ 366.809419][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.809433][ T7727] R13: 00007f20661c6038 R14: 00007f20661c5fa0 R15: 00007ffc94d980a8 [ 366.809470][ T7727] [ 366.870199][ C0] net_ratelimit: 21 callbacks suppressed [ 367.349724][ T7722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.349924][ T7722] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 367.798047][ T5840] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.798799][ T5840] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.799500][ T5840] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 367.811542][ T5840] aqc111 1-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 72:0b:7e:5d:d7:bc [ 367.815171][ T5840] usb 1-1: USB disconnect, device number 17 [ 367.874686][ T5840] aqc111 1-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 367.975856][ T7731] smpboot: CPU 1 is now offline [ 368.055925][ T7732] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 368.289793][ T5840] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 368.289975][ T5840] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 368.290304][ T5840] aqc111 1-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 368.370336][ T5605] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 368.520344][ T5605] usb 4-1: Using ep0 maxpacket: 8 [ 368.521525][ T5605] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.524935][ T5605] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 368.525018][ T5605] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.525042][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.525069][ T5605] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.525095][ T5605] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.525161][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.172812][ T5605] usb 4-1: usb_control_msg returned -32 [ 370.172869][ T5605] usbtmc 4-1:16.0: can't read capabilities [ 370.762271][ T7742] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 370.962665][ T5840] usb 4-1: USB disconnect, device number 25 [ 371.003923][ T5605] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 371.013085][ T5259] 8021q: adding VLAN 0 to HW filter on device eth8 [ 371.151223][ T5605] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 371.153008][ T5605] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.153067][ T5605] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 371.153095][ T5605] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.158131][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 371.158154][ T5605] usb 1-1: Product: syz [ 371.158170][ T5605] usb 1-1: Manufacturer: syz [ 371.197592][ T7754] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 371.217018][ T5605] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 371.279629][ T5605] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 371.487383][ T5840] usb 1-1: USB disconnect, device number 18 [ 371.564958][ T5840] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 371.566152][ T5840] garmin_gps 1-1:1.0: device disconnected [ 371.886548][ T7762] smpboot: CPU 1 is now offline [ 371.911115][ C0] net_ratelimit: 28 callbacks suppressed [ 372.338364][ T7768] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 377.157475][ C0] net_ratelimit: 14 callbacks suppressed [ 377.183652][ T7795] smpboot: CPU 1 is now offline [ 377.310397][ T7803] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 377.610284][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 377.761237][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 377.767705][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.767765][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 377.767791][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.817000][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 377.817023][ T9] usb 2-1: Product: syz [ 377.817038][ T9] usb 2-1: Manufacturer: syz [ 377.855180][ T7809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 377.871125][ T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 377.945583][ T9] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 379.117543][ T31] usb 2-1: USB disconnect, device number 16 [ 379.331292][ T31] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 379.332434][ T31] garmin_gps 2-1:1.0: device disconnected [ 379.839279][ T7827] vlan2: entered promiscuous mode [ 379.839302][ T7827] hsr0: entered promiscuous mode [ 379.840521][ T7827] vlan2: entered allmulticast mode [ 379.840549][ T7827] hsr0: entered allmulticast mode [ 379.840564][ T7827] hsr_slave_0: entered allmulticast mode [ 379.840590][ T7827] hsr_slave_1: entered allmulticast mode [ 380.170345][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 380.321144][ T31] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 380.322899][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.550263][ T950] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 380.737484][ T950] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 380.739577][ T950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.739696][ T950] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 380.739725][ T950] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.808382][ T7856] smpboot: CPU 1 is now offline [ 380.813021][ T950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 380.813034][ T950] usb 1-1: Product: syz [ 380.813044][ T950] usb 1-1: Manufacturer: syz [ 380.912244][ T31] usb 2-1: Firmware version (0.0) predates our first public release. [ 380.912259][ T31] usb 2-1: Please update to version 0.2 or newer [ 380.962775][ T7857] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 381.024121][ T7853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 381.093404][ T950] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 381.133780][ T950] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 381.355033][ T5605] usb 1-1: USB disconnect, device number 19 [ 381.454415][ T5605] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 381.455609][ T5605] garmin_gps 1-1:1.0: device disconnected [ 381.500230][ T950] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 381.667357][ T950] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.672675][ T950] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.675451][ T950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.675472][ T950] usb 5-1: SerialNumber: syz [ 382.199873][ T7420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.230361][ C0] net_ratelimit: 16 callbacks suppressed [ 382.294562][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.296859][ T7420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 382.374628][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.376022][ T7420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.141628][ T31] usb 2-1: USB disconnect, device number 17 [ 383.233740][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.460718][ T950] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 383.674179][ T7420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.738478][ T7420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.753741][ T7862] cdc_ether 5-1:1.0 usb0: entered promiscuous mode [ 383.753761][ T7862] cdc_ether 5-1:1.0 usb0: entered allmulticast mode [ 383.803154][ T5840] usb 5-1: USB disconnect, device number 18 [ 383.825254][ T5840] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 383.846321][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.846393][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.909411][ T950] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 384.073192][ T950] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 384.079353][ T950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.079412][ T950] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 384.079438][ T950] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.082445][ T950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 384.082464][ T950] usb 1-1: Product: syz [ 384.082478][ T950] usb 1-1: Manufacturer: syz [ 384.136684][ T7894] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 384.149101][ T950] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 384.177309][ T950] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 384.210286][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 384.372649][ T31] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 384.391711][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.391773][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.391867][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 384.423405][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 384.423427][ T31] usb 2-1: Product: syz [ 384.423441][ T31] usb 2-1: Manufacturer: syz [ 384.674242][ T950] usb 1-1: USB disconnect, device number 20 [ 384.799954][ T31] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 384.851736][ T31] garmin_gps ttyUSB1: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 384.943415][ T31] garmin_gps ttyUSB1: probe with driver garmin_gps failed with error -8 [ 384.978021][ T950] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 384.997095][ T950] garmin_gps 1-1:1.0: device disconnected [ 385.058475][ T31] usb 2-1: USB disconnect, device number 18 [ 385.162260][ T31] garmin_gps 2-1:1.0: device disconnected [ 385.432609][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.654765][ T7420] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.813193][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.851758][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.871047][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.549'. [ 385.948563][ T2163] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.948640][ T2163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.960204][ T950] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 386.007872][ T7933] smpboot: CPU 1 is now offline [ 386.077301][ T7929] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 386.151284][ T950] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 386.154607][ T950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.154702][ T950] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 386.154729][ T950] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.218335][ T950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 386.218358][ T950] usb 1-1: Product: syz [ 386.218374][ T950] usb 1-1: Manufacturer: syz [ 386.260473][ T7937] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 386.398955][ T950] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 386.478347][ T950] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 386.576281][ T950] usb 1-1: USB disconnect, device number 21 [ 386.735409][ T950] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 386.736604][ T950] garmin_gps 1-1:1.0: device disconnected [ 387.141885][ T7231] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 387.512402][ C0] net_ratelimit: 23 callbacks suppressed [ 387.966334][ T7231] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 387.981202][ T7231] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 387.981229][ T7231] usb 4-1: config 1 has no interface number 0 [ 388.003431][ T7231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.003453][ T7231] usb 4-1: Product: syz [ 388.003468][ T7231] usb 4-1: Manufacturer: syz [ 388.003484][ T7231] usb 4-1: SerialNumber: syz [ 388.221868][ T7231] usb 4-1: 3:0 : does not exist [ 388.221886][ T7231] usb 4-1: 3:0 : does not exist [ 389.613698][ T7231] usb 4-1: USB disconnect, device number 26 [ 389.984175][ T7420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.104060][ T7991] tmpfs: Invalid gid '0x00000000ffffffff' [ 390.104779][ T7488] udevd[7488]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.248671][ T5840] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 391.485091][ T5840] usb 5-1: not running at top speed; connect to a high speed hub [ 391.485809][ T5840] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 391.493233][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.493385][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.582005][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 391.671134][ T5840] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 391.671370][ T5840] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770. [ 391.780244][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 391.931137][ T31] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 391.933029][ T31] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 391.933054][ T31] usb 2-1: config 1 has no interface number 0 [ 391.936488][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.936510][ T31] usb 2-1: Product: syz [ 391.936525][ T31] usb 2-1: Manufacturer: syz [ 391.936540][ T31] usb 2-1: SerialNumber: syz [ 392.050685][ T31] usb 2-1: 3:0 : does not exist [ 392.050702][ T31] usb 2-1: 3:0 : does not exist [ 392.498140][ T7420] veth0_vlan: entered promiscuous mode [ 392.550484][ C0] net_ratelimit: 23 callbacks suppressed [ 392.568231][ T7420] veth1_vlan: entered promiscuous mode [ 393.244111][ T31] usb 5-1: USB disconnect, device number 19 [ 393.313600][ T7420] veth0_macvtap: entered promiscuous mode [ 393.400940][ T7420] veth1_macvtap: entered promiscuous mode [ 393.523673][ T8021] netlink: 228 bytes leftover after parsing attributes in process `syz.4.568'. [ 393.609712][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.651567][ T7420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.730407][ T1147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.730490][ T1147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.730531][ T1147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.730571][ T1147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.890735][ T8025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 394.500493][ T8031] FAULT_INJECTION: forcing a failure. [ 394.500493][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 394.500533][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.4.572 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 394.500560][ T8031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 394.500575][ T8031] Call Trace: [ 394.500583][ T8031] [ 394.500594][ T8031] dump_stack_lvl+0xe8/0x150 [ 394.500631][ T8031] should_fail_ex+0x46b/0x600 [ 394.500670][ T8031] should_failslab+0xa8/0x100 [ 394.500697][ T8031] __kmalloc_cache_noprof+0xa1/0x680 [ 394.500732][ T8031] ? tunnel_key_init+0xd77/0x1720 [ 394.500765][ T8031] ? tunnel_key_init+0xd77/0x1720 [ 394.500817][ T8031] tunnel_key_init+0xd77/0x1720 [ 394.500848][ T8031] ? ___sys_sendmsg+0x2a5/0x360 [ 394.500874][ T8031] ? __x64_sys_sendmsg+0x1b7/0x290 [ 394.500922][ T8031] ? __pfx_tunnel_key_init+0x10/0x10 [ 394.500980][ T8031] ? __kasan_kmalloc+0x93/0xb0 [ 394.501004][ T8031] ? nla_memcpy+0x5b/0xc0 [ 394.501039][ T8031] tcf_action_init_1+0x4ba/0x740 [ 394.501072][ T8031] ? __pfx_tcf_action_init_1+0x10/0x10 [ 394.501097][ T8031] ? tc_action_load_ops+0x247/0x540 [ 394.501142][ T8031] ? __nla_parse+0x40/0x60 [ 394.501168][ T8031] tcf_action_init+0x31b/0xa60 [ 394.501203][ T8031] ? __pfx_tcf_action_init+0x10/0x10 [ 394.501254][ T8031] ? __lock_acquire+0x747/0x2de0 [ 394.501281][ T8031] ? __pfx___nla_validate_parse+0x10/0x10 [ 394.501337][ T8031] tc_ctl_action+0x43b/0xc70 [ 394.501375][ T8031] ? __pfx_tc_ctl_action+0x10/0x10 [ 394.501407][ T8031] ? rt_mutex_slowlock+0x424/0x780 [ 394.501478][ T8031] ? __pfx_tc_ctl_action+0x10/0x10 [ 394.501499][ T8031] rtnetlink_rcv_msg+0x7b9/0xc00 [ 394.501525][ T8031] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 394.501548][ T8031] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.501570][ T8031] ? ref_tracker_free+0x668/0x820 [ 394.501601][ T8031] ? __pfx_ref_tracker_free+0x10/0x10 [ 394.501629][ T8031] ? __asan_memcpy+0x40/0x70 [ 394.501653][ T8031] ? __skb_clone+0x5c/0x6c0 [ 394.501684][ T8031] netlink_rcv_skb+0x226/0x4a0 [ 394.501715][ T8031] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.501741][ T8031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.501785][ T8031] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.501818][ T8031] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.501852][ T8031] netlink_unicast+0x7f5/0x990 [ 394.501892][ T8031] netlink_sendmsg+0x813/0xb40 [ 394.501920][ T8031] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 394.501955][ T8031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.501984][ T8031] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 394.502016][ T8031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.502046][ T8031] sock_sendmsg_nosec+0x13a/0x180 [ 394.502080][ T8031] ____sys_sendmsg+0x565/0x870 [ 394.502113][ T8031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.502147][ T8031] ? import_iovec+0x73/0xa0 [ 394.502181][ T8031] ___sys_sendmsg+0x2a5/0x360 [ 394.502207][ T8031] ? __lock_acquire+0x747/0x2de0 [ 394.502240][ T8031] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.502269][ T8031] ? futex_wait+0x2a2/0x390 [ 394.502323][ T8031] ? __fget_files+0x2a/0x420 [ 394.502347][ T8031] ? __fget_files+0x3a8/0x420 [ 394.502384][ T8031] __x64_sys_sendmsg+0x1b7/0x290 [ 394.502412][ T8031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.502459][ T8031] do_syscall_64+0x166/0x520 [ 394.502480][ T8031] ? trace_irq_disable+0x3b/0x140 [ 394.502508][ T8031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.502532][ T8031] ? clear_bhb_loop+0x70/0xc0 [ 394.502559][ T8031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.502579][ T8031] RIP: 0033:0x7f377e8fe159 [ 394.502600][ T8031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.502617][ T8031] RSP: 002b:00007f377cb56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.502640][ T8031] RAX: ffffffffffffffda RBX: 00007f377eb85fa0 RCX: 00007f377e8fe159 [ 394.502656][ T8031] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 394.502670][ T8031] RBP: 00007f377e99506b R08: 0000000000000000 R09: 0000000000000000 [ 394.502685][ T8031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.502699][ T8031] R13: 00007f377eb86038 R14: 00007f377eb85fa0 R15: 00007ffd9e639398 [ 394.502735][ T8031] [ 395.980898][ T8042] fuse: Unknown parameter 'group_id00000000000000000000' [ 396.308805][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.346484][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.349951][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.393924][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.402851][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.028182][ T8052] smpboot: CPU 1 is now offline [ 397.299253][ T8055] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 397.398673][ T5605] usb 2-1: USB disconnect, device number 19 [ 397.911181][ C0] net_ratelimit: 250 callbacks suppressed [ 399.516041][ T8082] fuse: Unknown parameter 'group_id00000000000000000000' [ 401.410859][ T5608] Bluetooth: hci5: command tx timeout [ 401.741045][ T5840] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 401.951192][ T5840] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 401.952938][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.014131][ T1012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.429586][ T8108] fuse: Bad value for 'user_id' [ 402.429611][ T8108] fuse: Bad value for 'user_id' [ 402.463262][ T5840] usb 4-1: Firmware version (0.0) predates our first public release. [ 402.463286][ T5840] usb 4-1: Please update to version 0.2 or newer [ 402.980968][ T8118] evm: overlay not supported [ 403.125466][ T1012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.431181][ T5608] Bluetooth: hci5: command tx timeout [ 403.510193][ C0] net_ratelimit: 99 callbacks suppressed [ 404.725247][ T5611] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 404.943240][ T5611] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 404.945595][ T5611] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.945662][ T5611] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 404.945688][ T5611] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.949466][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 404.949489][ T5611] usb 2-1: Product: syz [ 404.949505][ T5611] usb 2-1: Manufacturer: syz [ 405.068529][ T8133] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 405.090650][ T5611] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 405.194834][ T5611] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 405.226728][ T1012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.511186][ T5608] Bluetooth: hci5: command tx timeout [ 405.818077][ T8137] fuse: Bad value for 'user_id' [ 405.818101][ T8137] fuse: Bad value for 'user_id' [ 407.320289][ T5605] usb 4-1: USB disconnect, device number 27 [ 407.490848][ T5611] usb 2-1: USB disconnect, device number 20 [ 407.591262][ T5608] Bluetooth: hci5: command tx timeout [ 407.652721][ T5611] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 407.658689][ T5611] garmin_gps 2-1:1.0: device disconnected [ 408.535629][ T5701] net_ratelimit: 34 callbacks suppressed [ 410.454135][ T8156] smpboot: CPU 1 is now offline [ 410.512326][ T8159] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 410.632010][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 411.064511][ T1012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.249284][ T8170] smpboot: CPU 1 is now offline [ 411.313768][ T8173] smpboot: Booting Node 0 Processor 1 APIC 0x1 ** 3483 printk messages dropped ** [ 419.064698][ C0] port100 5-1:1.0: NFC: Urb failure (status -71) [ 419.064836][ T7231] port100 5-1:1.0: NFC: Could not get supported command types [ 419.274144][ T7231] usb 2-1: USB disconnect, device number 21 [ 419.645058][ C0] net_ratelimit: 31 callbacks suppressed [ 419.656426][ T9] usb 5-1: USB disconnect, device number 20 [ 426.034501][ C0] net_ratelimit: 5 callbacks suppressed [ 426.210145][ T7231] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 426.816565][ T8261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 428.186146][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 428.205393][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.193073][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.195240][ T1012] bond0 (unregistering): Released all slaves [ 430.129244][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.129327][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.129492][ T8046] bridge_slave_0: entered allmulticast mode [ 430.131236][ T8046] bridge_slave_0: entered promiscuous mode [ 430.162846][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.162927][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.163080][ T8046] bridge_slave_1: entered allmulticast mode [ 430.172682][ T8046] bridge_slave_1: entered promiscuous mode [ 430.195722][ T8271] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 430.530244][ T7231] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 430.701160][ T7231] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 430.704579][ T7231] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 430.704605][ T7231] usb 1-1: config 1 has no interface number 0 [ 430.732645][ T7231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.732667][ T7231] usb 1-1: Product: syz [ 430.732684][ T7231] usb 1-1: Manufacturer: syz [ 430.732700][ T7231] usb 1-1: SerialNumber: syz [ 430.838969][ T7231] usb 1-1: 3:0 : does not exist [ 430.838987][ T7231] usb 1-1: 3:0 : does not exist [ 431.099787][ T5699] net_ratelimit: 27 callbacks suppressed [ 431.149771][ T7231] usb 1-1: USB disconnect, device number 22 [ 431.363604][ T31] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 431.443703][ T8290] udevd[8290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.550192][ T31] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 431.563517][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.577074][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.597428][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.116159][ T1012] hsr_slave_0: left promiscuous mode [ 432.128898][ T31] usb 4-1: Firmware version (0.0) predates our first public release. [ 432.128923][ T31] usb 4-1: Please update to version 0.2 or newer [ 432.152801][ T1012] hsr_slave_1: left promiscuous mode [ 432.158974][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.159001][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.202889][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.202913][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.304438][ T5840] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 432.471335][ T5840] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 432.473649][ T5840] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 432.473685][ T5840] usb 5-1: config 1 has no interface number 0 [ 432.477890][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.477913][ T5840] usb 5-1: Product: syz [ 432.477929][ T5840] usb 5-1: Manufacturer: syz [ 432.477945][ T5840] usb 5-1: SerialNumber: syz [ 432.569650][ T5840] usb 5-1: 3:0 : does not exist [ 432.569687][ T5840] usb 5-1: 3:0 : does not exist [ 432.581444][ T1012] veth1_macvtap: left promiscuous mode [ 432.581566][ T1012] veth0_macvtap: left promiscuous mode [ 433.569705][ T1012] veth1_vlan: left promiscuous mode [ 433.569927][ T1012] veth0_vlan: left promiscuous mode [ 433.579976][ T5840] usb 5-1: USB disconnect, device number 21 [ 435.573333][ T8306] udevd[8306]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.098571][ T8329] smpboot: CPU 1 is now offline [ 436.100556][ T5702] net_ratelimit: 10 callbacks suppressed [ 436.194436][ T8332] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 436.630233][ T5840] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 436.796889][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 436.796949][ T5840] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 436.798654][ T5840] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 436.798679][ T5840] usb 1-1: config 189 has no interface number 0 [ 436.798723][ T5840] usb 1-1: config 189 interface 127 has no altsetting 0 [ 436.842890][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.842911][ T5840] usb 1-1: Product: syz [ 436.842926][ T5840] usb 1-1: Manufacturer: syz [ 436.842941][ T5840] usb 1-1: SerialNumber: syz [ 437.210418][ T950] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 437.382658][ T950] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 437.385396][ T950] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 437.385422][ T950] usb 5-1: config 1 has no interface number 0 [ 437.416878][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.416902][ T950] usb 5-1: Product: syz [ 437.416918][ T950] usb 5-1: Manufacturer: syz [ 437.416936][ T950] usb 5-1: SerialNumber: syz [ 437.554556][ T950] usb 5-1: 3:0 : does not exist [ 437.554817][ T950] usb 5-1: 3:0 : does not exist [ 437.976614][ T950] usb 5-1: USB disconnect, device number 22 [ 438.672792][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 438.831956][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 439.415570][ T8355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 440.791460][ T8365] overlayfs: missing 'workdir' [ 441.081113][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 441.138393][ T8046] team0: Port device team_slave_0 added [ 441.188130][ T5840] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 441.188149][ T5840] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 441.188200][ T5840] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 441.221580][ T5840] safe_serial 1-1:189.127: safe_serial converter detected [ 441.221948][ T5840] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 441.286185][ T5840] usb 1-1: USB disconnect, device number 23 [ 441.304687][ T31] usb 4-1: USB disconnect, device number 29 [ 441.309616][ T8046] team0: Port device team_slave_1 added [ 441.406443][ T8373] fuse: Invalid rootmode [ 441.449075][ T8367] smpboot: CPU 1 is now offline [ 441.592577][ T8371] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 441.680089][ C0] net_ratelimit: 24 callbacks suppressed [ 441.836405][ T8377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 442.078486][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 442.078514][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.684'. [ 442.078561][ T8377] netlink: 'syz.0.684': attribute type 6 has an invalid length. [ 442.186287][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.186300][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.186329][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.199021][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.199033][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.199059][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.610173][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 442.811841][ T31] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 442.814883][ T31] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 442.814908][ T31] usb 4-1: config 1 has no interface number 0 [ 442.831719][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.831742][ T31] usb 4-1: Product: syz [ 442.831758][ T31] usb 4-1: Manufacturer: syz [ 442.831774][ T31] usb 4-1: SerialNumber: syz [ 442.903767][ T31] usb 4-1: skipping empty audio interface (v1) [ 442.966994][ T8046] hsr_slave_0: entered promiscuous mode [ 442.980499][ T8046] hsr_slave_1: entered promiscuous mode [ 442.987216][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 442.987249][ T8046] Cannot create hsr debugfs directory [ 443.031722][ T31] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 443.318289][ T8306] udevd[8306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.246064][ T5840] usb 4-1: USB disconnect, device number 30 [ 444.825926][ T8395] smpboot: CPU 1 is now offline [ 444.987960][ T8397] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 445.274894][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.274956][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.832162][ T7231] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 445.981677][ T7231] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 445.984312][ T7231] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 445.984337][ T7231] usb 4-1: config 1 has no interface number 0 [ 446.022459][ T7231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.022481][ T7231] usb 4-1: Product: syz [ 446.022497][ T7231] usb 4-1: Manufacturer: syz [ 446.022513][ T7231] usb 4-1: SerialNumber: syz [ 446.092403][ T7231] usb 4-1: 3:0 : does not exist [ 446.092420][ T7231] usb 4-1: 3:0 : does not exist [ 446.229457][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6 [ 446.342938][ T7231] usb 4-1: USB disconnect, device number 31 [ 446.818816][ T37] audit: type=1326 audit(1791147720.854:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.818873][ T37] audit: type=1326 audit(1791147720.854:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.818919][ T37] audit: type=1326 audit(1791147720.854:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.818966][ T37] audit: type=1326 audit(1791147720.854:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.819015][ T37] audit: type=1326 audit(1791147720.854:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.973850][ T37] audit: type=1326 audit(1791147720.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.973910][ T37] audit: type=1326 audit(1791147720.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.973957][ T37] audit: type=1326 audit(1791147721.004:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.974005][ T37] audit: type=1326 audit(1791147721.004:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.974051][ T37] audit: type=1326 audit(1791147721.004:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8439 comm="syz.0.696" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d1e07e159 code=0x7ffc0000 [ 446.978314][ T8441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.696'. [ 447.536198][ C0] net_ratelimit: 22 callbacks suppressed [ 448.408972][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 448.409003][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.696'. [ 448.409020][ T8444] netlink: 'syz.0.696': attribute type 6 has an invalid length. [ 448.581523][ T8459] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 449.293745][ T8480] smpboot: CPU 1 is now offline [ 449.349810][ T8476] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 449.570385][ T7231] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 449.728677][ T7231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 449.728735][ T7231] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 449.752379][ T7231] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 449.752406][ T7231] usb 4-1: config 189 has no interface number 0 [ 449.752443][ T7231] usb 4-1: config 189 interface 127 has no altsetting 0 [ 449.789489][ T7231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.789510][ T7231] usb 4-1: Product: syz [ 449.789525][ T7231] usb 4-1: Manufacturer: syz [ 449.789539][ T7231] usb 4-1: SerialNumber: syz [ 450.280162][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 451.101209][ T5840] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 451.163706][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.163779][ T31] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 451.165465][ T31] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 451.165500][ T31] usb 1-1: config 189 has no interface number 0 [ 451.165531][ T31] usb 1-1: config 189 interface 127 has no altsetting 0 [ 451.174666][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.174686][ T31] usb 1-1: Product: syz [ 451.174700][ T31] usb 1-1: Manufacturer: syz [ 451.174715][ T31] usb 1-1: SerialNumber: syz [ 451.265072][ T5840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.265215][ T5840] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 451.267683][ T5840] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 451.267710][ T5840] usb 5-1: config 189 has no interface number 0 [ 451.267823][ T5840] usb 5-1: config 189 interface 127 has no altsetting 0 [ 451.275326][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.275429][ T5840] usb 5-1: Product: syz [ 451.275445][ T5840] usb 5-1: Manufacturer: syz [ 451.275461][ T5840] usb 5-1: SerialNumber: syz [ 452.711323][ T31] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 452.711344][ T31] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 452.711395][ T31] usbserial_generic 1-1:189.127: device has no bulk endpoints [ 452.773381][ T7231] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 452.773399][ T7231] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 452.773446][ T7231] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 452.789485][ T7231] safe_serial 4-1:189.127: safe_serial converter detected [ 452.789779][ T7231] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 452.836944][ T31] safe_serial 1-1:189.127: safe_serial converter detected [ 452.837309][ T31] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22 [ 452.919797][ T31] usb 1-1: USB disconnect, device number 24 [ 452.938195][ T7231] usb 4-1: USB disconnect, device number 32 [ 452.950189][ C0] net_ratelimit: 20 callbacks suppressed [ 453.206936][ T5840] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 453.206955][ T5840] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 453.207004][ T5840] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 453.208347][ T5840] safe_serial 5-1:189.127: safe_serial converter detected [ 453.208617][ T5840] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 453.263539][ T5840] usb 5-1: USB disconnect, device number 23 [ 453.301060][ T8294] udevd[8294]: setting mode of /dev/bus/usb/005/023 to 020664 failed: No such file or directory [ 453.301280][ T8294] udevd[8294]: setting owner of /dev/bus/usb/005/023 to uid=0, gid=0 failed: No such file or directory [ 453.658054][ T8519] smpboot: CPU 1 is now offline [ 453.717669][ T8520] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 453.741761][ T5611] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 453.899668][ T5611] usb 4-1: unable to get BOS descriptor or descriptor too short [ 453.899728][ T5611] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 453.907934][ T5611] usb 4-1: config 189 has an invalid interface number: 127 but max is 0 [ 453.907962][ T5611] usb 4-1: config 189 has no interface number 0 [ 453.907999][ T5611] usb 4-1: config 189 interface 127 has no altsetting 0 [ 453.953021][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.953042][ T5611] usb 4-1: Product: syz [ 453.953058][ T5611] usb 4-1: Manufacturer: syz [ 453.953074][ T5611] usb 4-1: SerialNumber: syz [ 455.257660][ T8046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 456.436706][ T8046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.000190][ T5840] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 457.174248][ T5840] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 457.179842][ T5840] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 457.179888][ T5840] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 457.218932][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.218954][ T5840] usb 5-1: Product: syz [ 457.218970][ T5840] usb 5-1: Manufacturer: syz [ 457.218985][ T5840] usb 5-1: SerialNumber: syz [ 457.280735][ T8554] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 457.281085][ T8554] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 457.311751][ C1] port100 5-1:1.0: NFC: Urb failure (status -71) [ 457.311901][ C1] port100 5-1:1.0: NFC: Urb failure (status -71) [ 457.312672][ T5840] port100 5-1:1.0: NFC: Could not get supported command types [ 457.567979][ T5611] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 457.567996][ T5611] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 457.568039][ T5611] usbserial_generic 4-1:189.127: device has no bulk endpoints [ 457.576965][ T5611] safe_serial 4-1:189.127: safe_serial converter detected [ 457.577202][ T5611] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22 [ 457.658662][ T5611] usb 4-1: USB disconnect, device number 33 [ 457.797164][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.816119][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.839841][ T5612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.877943][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.887890][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.522883][ T5719] usb 5-1: USB disconnect, device number 24 [ 458.636204][ C0] net_ratelimit: 22 callbacks suppressed [ 459.454055][ T8592] batman_adv: batadv0: Adding interface: syzkaller0 [ 459.454070][ T8592] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.454106][ T8592] batman_adv: batadv0: Interface activated: syzkaller0 [ 459.610619][ T8585] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 459.963359][ T8585] batman_adv: batadv0: Removing interface: syzkaller0 [ 459.990290][ T5608] Bluetooth: hci1: command tx timeout [ 460.617869][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 460.617897][ T8619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 460.793106][ T8625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 461.775310][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 461.775338][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 461.775358][ T8630] netlink: 'syz.3.732': attribute type 6 has an invalid length. [ 462.071958][ T5608] Bluetooth: hci1: command tx timeout [ 462.531535][ T8637] smpboot: CPU 1 is now offline [ 462.685508][ T8640] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 462.980238][ T202] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 463.131127][ T202] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 463.136839][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.464965][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 463.604271][ T202] usb 2-1: Firmware version (0.0) predates our first public release. [ 463.604296][ T202] usb 2-1: Please update to version 0.2 or newer [ 463.651069][ T31] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 463.653644][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.670967][ C0] net_ratelimit: 44 callbacks suppressed [ 463.752468][ T8653] batman_adv: batadv0: Adding interface: syzkaller0 [ 463.752480][ T8653] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.752513][ T8653] batman_adv: batadv0: Interface activated: syzkaller0 [ 463.849742][ T8659] batman_adv: batadv0: Adding interface: syzkaller0 [ 463.849756][ T8659] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.849792][ T8659] batman_adv: batadv0: Interface activated: syzkaller0 [ 463.906121][ T8652] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 464.057275][ T8652] batman_adv: batadv0: Removing interface: syzkaller0 [ 464.101847][ T31] usb 1-1: Firmware version (0.0) predates our first public release. [ 464.101872][ T31] usb 1-1: Please update to version 0.2 or newer [ 464.150216][ T5608] Bluetooth: hci1: command tx timeout [ 464.290642][ T8656] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 464.443244][ T8656] batman_adv: batadv0: Removing interface: syzkaller0 [ 466.136189][ T8689] smpboot: CPU 1 is now offline [ 466.144341][ T5719] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 466.160253][ T5608] Bluetooth: hci1: command tx timeout [ 466.165698][ T8693] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 466.320610][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 466.321571][ T5719] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 466.342596][ T5719] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 466.342678][ T5719] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 466.342702][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 466.342729][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 466.342756][ T5719] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.342921][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.609398][ T5719] usb 4-1: usb_control_msg returned -32 [ 466.609449][ T5719] usbtmc 4-1:16.0: can't read capabilities [ 466.661734][ T202] usb 2-1: USB disconnect, device number 22 [ 466.848231][ T8699] smpboot: CPU 1 is now offline [ 467.043557][ T5611] usb 1-1: USB disconnect, device number 25 [ 467.239189][ T1145] bridge_slave_1: left allmulticast mode [ 467.239209][ T1145] bridge_slave_1: left promiscuous mode [ 467.239389][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.242608][ T1145] bridge_slave_0: left allmulticast mode [ 467.242625][ T1145] bridge_slave_0: left promiscuous mode [ 467.242862][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.688860][ T8719] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 470.513460][ C0] net_ratelimit: 18 callbacks suppressed [ 470.816950][ T5605] usb 4-1: USB disconnect, device number 34 [ 472.190896][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.271878][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.353140][ T1145] bond0 (unregistering): Released all slaves [ 472.536293][ T8752] smpboot: CPU 1 is now offline [ 472.612349][ T8753] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 472.871686][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5 [ 473.062433][ T8756] FAULT_INJECTION: forcing a failure. [ 473.062433][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 473.062469][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 473.062494][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 473.062509][ T8756] Call Trace: [ 473.062518][ T8756] [ 473.062529][ T8756] dump_stack_lvl+0xe8/0x150 [ 473.062569][ T8756] should_fail_ex+0x46b/0x600 [ 473.062608][ T8756] _copy_from_user+0x2d/0xb0 [ 473.062642][ T8756] ___sys_sendmsg+0x1c6/0x360 [ 473.062670][ T8756] ? __lock_acquire+0x747/0x2de0 [ 473.062704][ T8756] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.062736][ T8756] ? futex_wait+0x2a2/0x390 [ 473.062795][ T8756] ? __fget_files+0x2a/0x420 [ 473.062821][ T8756] ? __fget_files+0x3a8/0x420 [ 473.062857][ T8756] __x64_sys_sendmsg+0x1b7/0x290 [ 473.062887][ T8756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.062936][ T8756] do_syscall_64+0x166/0x520 [ 473.062961][ T8756] ? trace_irq_disable+0x3b/0x140 [ 473.062991][ T8756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.063013][ T8756] ? clear_bhb_loop+0x70/0xc0 [ 473.063041][ T8756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.063064][ T8756] RIP: 0033:0x7f3d1e07e159 [ 473.063086][ T8756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.063106][ T8756] RSP: 002b:00007f3d1c2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.063130][ T8756] RAX: ffffffffffffffda RBX: 00007f3d1e305fa0 RCX: 00007f3d1e07e159 [ 473.063147][ T8756] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 473.063164][ T8756] RBP: 00007f3d1e11506b R08: 0000000000000000 R09: 0000000000000000 [ 473.063178][ T8756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.063193][ T8756] R13: 00007f3d1e306038 R14: 00007f3d1e305fa0 R15: 00007ffea5169378 [ 473.063229][ T8756] [ 473.646062][ T1145] hsr_slave_0: left promiscuous mode [ 473.661523][ T31] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 474.307371][ T1145] hsr_slave_1: left promiscuous mode [ 474.403718][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.470591][ T202] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 474.516888][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.540400][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 474.542015][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.620817][ T202] usb 4-1: Using ep0 maxpacket: 16 [ 474.621928][ T202] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.623856][ T202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.623883][ T202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.623897][ T202] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.623946][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.703017][ T202] usb 4-1: config 0 descriptor?? [ 475.055567][ T31] usb 5-1: Firmware version (0.0) predates our first public release. [ 475.055590][ T31] usb 5-1: Please update to version 0.2 or newer [ 475.633326][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633355][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633371][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633387][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633402][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633417][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633433][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633449][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633464][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.633479][ T202] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 475.752466][ C0] net_ratelimit: 22 callbacks suppressed [ 475.788496][ T202] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input6 [ 476.132921][ T5610] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 476.291353][ T5610] usb 1-1: Using ep0 maxpacket: 16 [ 476.292578][ T5610] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 476.294094][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.294111][ T5610] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.294124][ T5610] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 476.294160][ T5610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.627485][ T5610] usb 1-1: config 0 descriptor?? [ 477.461659][ T202] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 477.510783][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 477.874179][ T5610] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input7 [ 477.925186][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 478.003555][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 478.003575][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 478.283990][ T5611] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 478.294885][ T5610] microsoft 0003:045E:07DA.0003: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 479.317967][ T6517] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 479.654689][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.656831][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.657119][ T8559] bridge_slave_0: entered allmulticast mode [ 479.659698][ T8559] bridge_slave_0: entered promiscuous mode [ 480.238598][ T8777] ovs-dp0: entered promiscuous mode [ 480.261195][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.261467][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.261820][ T8559] bridge_slave_1: entered allmulticast mode [ 480.272364][ T8559] bridge_slave_1: entered promiscuous mode [ 480.448959][ T31] usb 5-1: USB disconnect, device number 25 [ 480.662507][ T8788] ovs-dp0: entered promiscuous mode [ 481.082711][ C0] net_ratelimit: 14 callbacks suppressed [ 482.900553][ T8809] smpboot: CPU 1 is now offline [ 483.063511][ T8810] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 483.122231][ T202] usb 4-1: USB disconnect, device number 35 [ 483.170384][ T2265] usb 1-1: USB disconnect, device number 26 [ 483.566242][ T8822] batman_adv: batadv0: Adding interface: syzkaller0 [ 483.566255][ T8822] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.566286][ T8822] batman_adv: batadv0: Interface activated: syzkaller0 [ 483.591683][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.813224][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.863272][ T8820] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 484.084421][ T8820] batman_adv: batadv0: Removing interface: syzkaller0 [ 484.130216][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 484.220196][ T2265] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 484.318849][ T31] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 484.346953][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.346978][ T31] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 484.359086][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 484.359109][ T31] usb 5-1: Product: syz [ 484.359123][ T31] usb 5-1: Manufacturer: syz [ 484.370125][ T2265] usb 1-1: Using ep0 maxpacket: 16 [ 484.371416][ T2265] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 484.373174][ T2265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.373218][ T2265] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.373242][ T2265] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 484.373304][ T2265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.506792][ T2265] usb 1-1: config 0 descriptor?? [ 484.509953][ T8559] team0: Port device team_slave_0 added [ 484.571230][ T8559] team0: Port device team_slave_1 added [ 484.574020][ T37] kauditd_printk_skb: 203 callbacks suppressed [ 484.574038][ T37] audit: type=1326 audit(1791147758.614:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.574159][ T37] audit: type=1326 audit(1791147758.614:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596585][ T37] audit: type=1326 audit(1791147758.624:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596638][ T37] audit: type=1326 audit(1791147758.624:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596680][ T37] audit: type=1326 audit(1791147758.624:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596734][ T37] audit: type=1326 audit(1791147758.624:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596782][ T37] audit: type=1326 audit(1791147758.624:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596825][ T37] audit: type=1326 audit(1791147758.634:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596868][ T37] audit: type=1326 audit(1791147758.634:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.596921][ T37] audit: type=1326 audit(1791147758.634:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8834 comm="syz.3.783" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f2065f3e159 code=0x7ffc0000 [ 484.640307][ T31] usb 5-1: USB disconnect, device number 26 [ 484.756254][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.3.783'. [ 484.831369][ T8827] ovs-dp0: left promiscuous mode [ 485.070553][ T5840] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 485.194126][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 485.194153][ T8839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 485.194171][ T8839] netlink: 'syz.3.783': attribute type 6 has an invalid length. [ 485.251826][ T5840] usb 2-1: unable to get BOS descriptor or descriptor too short [ 485.251897][ T5840] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 485.253640][ T5840] usb 2-1: config 189 has an invalid interface number: 127 but max is 0 [ 485.253664][ T5840] usb 2-1: config 189 has no interface number 0 [ 485.253699][ T5840] usb 2-1: config 189 interface 127 has no altsetting 0 [ 485.259906][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.259928][ T5840] usb 2-1: Product: syz [ 485.259944][ T5840] usb 2-1: Manufacturer: syz [ 485.259960][ T5840] usb 2-1: SerialNumber: syz [ 485.360854][ T2265] hid_parser_main: 10 callbacks suppressed [ 485.360879][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.360908][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.360935][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.360962][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.360988][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.361015][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.361043][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.361069][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.361096][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.361121][ T2265] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 485.457714][ T2265] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input8 [ 485.590974][ T2265] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 485.710232][ T7231] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 485.791662][ T8844] ovs-dp0: entered promiscuous mode [ 485.840894][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.840909][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.840944][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.904105][ T7231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 485.904164][ T7231] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 485.914552][ T7231] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 485.914580][ T7231] usb 5-1: config 189 has no interface number 0 [ 485.914615][ T7231] usb 5-1: config 189 interface 127 has no altsetting 0 [ 485.965393][ T7231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.965414][ T7231] usb 5-1: Product: syz [ 485.965430][ T7231] usb 5-1: Manufacturer: syz [ 485.965445][ T7231] usb 5-1: SerialNumber: syz [ 486.230244][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.230266][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.230294][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.740887][ T10] usb 1-1: reset high-speed USB device number 27 using dummy_hcd [ 486.902788][ T7231] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 486.902806][ T7231] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 486.902864][ T7231] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 486.954214][ T7231] safe_serial 5-1:189.127: safe_serial converter detected [ 486.954447][ T7231] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 486.955515][ T5840] usbserial_generic 2-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 486.955533][ T5840] usbserial_generic 2-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 486.969847][ T5840] usbserial_generic 2-1:189.127: device has no bulk endpoints [ 487.005609][ T5840] safe_serial 2-1:189.127: safe_serial converter detected [ 487.005840][ T5840] safe_serial 2-1:189.127: probe with driver safe_serial failed with error -22 [ 487.030123][ C0] net_ratelimit: 22 callbacks suppressed [ 487.106982][ T7231] usb 5-1: USB disconnect, device number 27 [ 487.122088][ T5840] usb 2-1: USB disconnect, device number 23 [ 487.646181][ T5611] usb 1-1: USB disconnect, device number 27 [ 488.900222][ T5719] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 489.001468][ T8872] FAULT_INJECTION: forcing a failure. [ 489.001468][ T8872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.001504][ T8872] CPU: 0 UID: 0 PID: 8872 Comm: syz.0.790 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 489.001521][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 489.001529][ T8872] Call Trace: [ 489.001535][ T8872] [ 489.001541][ T8872] dump_stack_lvl+0xe8/0x150 [ 489.001564][ T8872] should_fail_ex+0x46b/0x600 [ 489.001586][ T8872] _copy_from_user+0x2d/0xb0 [ 489.001606][ T8872] ___sys_sendmsg+0x1c6/0x360 [ 489.001621][ T8872] ? __lock_acquire+0x747/0x2de0 [ 489.001655][ T8872] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.001682][ T8872] ? futex_wait+0x2a2/0x390 [ 489.001733][ T8872] ? __fget_files+0x2a/0x420 [ 489.001756][ T8872] ? __fget_files+0x3a8/0x420 [ 489.001775][ T8872] __x64_sys_sendmsg+0x1b7/0x290 [ 489.001792][ T8872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.001818][ T8872] do_syscall_64+0x166/0x520 [ 489.001832][ T8872] ? trace_irq_disable+0x3b/0x140 [ 489.001848][ T8872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.001860][ T8872] ? clear_bhb_loop+0x70/0xc0 [ 489.001878][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.001891][ T8872] RIP: 0033:0x7f3d1e07e159 [ 489.001904][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.001915][ T8872] RSP: 002b:00007f3d1c2d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.001930][ T8872] RAX: ffffffffffffffda RBX: 00007f3d1e305fa0 RCX: 00007f3d1e07e159 [ 489.001940][ T8872] RDX: 0000000004044084 RSI: 0000200000000100 RDI: 0000000000000003 [ 489.001948][ T8872] RBP: 00007f3d1e11506b R08: 0000000000000000 R09: 0000000000000000 [ 489.001956][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.001964][ T8872] R13: 00007f3d1e306038 R14: 00007f3d1e305fa0 R15: 00007ffea5169378 [ 489.001987][ T8872] [ 489.060160][ T5719] usb 5-1: Using ep0 maxpacket: 16 [ 489.061090][ T5719] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 489.103585][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.103601][ T5719] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.103614][ T5719] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 489.103652][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.126679][ T5719] usb 5-1: config 0 descriptor?? [ 489.375714][ T5719] usbhid 5-1:0.0: can't add hid device: -71 [ 489.375899][ T5719] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 489.424266][ T5719] usb 5-1: USB disconnect, device number 28 [ 489.601487][ T8559] hsr_slave_0: entered promiscuous mode [ 489.609602][ T8559] hsr_slave_1: entered promiscuous mode [ 489.629122][ T8559] debugfs: 'hsr0' already exists in 'hsr' [ 489.629136][ T8559] Cannot create hsr debugfs directory [ 489.649137][ T8873] smpboot: CPU 1 is now offline [ 489.840461][ T8871] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 490.820236][ T5719] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 490.982280][ T5719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 491.032117][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.032130][ T5719] usb 2-1: Product: syz [ 491.032139][ T5719] usb 2-1: Manufacturer: syz [ 491.032148][ T5719] usb 2-1: SerialNumber: syz [ 491.073430][ T5719] usb 2-1: config 0 descriptor?? [ 491.576402][ T5719] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 491.963741][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 492.296154][ T5719] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 492.319457][ T5719] usb 2-1: USB disconnect, device number 24 [ 492.372043][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 492.372099][ T10] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 492.375429][ T10] usb 1-1: config 189 has an invalid interface number: 127 but max is 0 [ 492.375459][ T10] usb 1-1: config 189 has no interface number 0 [ 492.375496][ T10] usb 1-1: config 189 interface 127 has no altsetting 0 [ 492.425856][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.425879][ T10] usb 1-1: Product: syz [ 492.425894][ T10] usb 1-1: Manufacturer: syz [ 492.425911][ T10] usb 1-1: SerialNumber: syz [ 492.580581][ T5705] net_ratelimit: 20 callbacks suppressed [ 494.692255][ T8923] smpboot: CPU 1 is now offline [ 494.825739][ T8927] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 494.827336][ T16] ------------[ cut here ]------------ [ 494.827344][ T16] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 494.827352][ T16] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x34d/0x560, CPU#0: ktimers/0/16 [ 494.861487][ T16] Modules linked in: [ 494.865437][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 494.875004][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 494.885153][ T16] RIP: 0010:update_rq_clock+0x34d/0x560 [ 494.890700][ T16] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 9b ea 9d 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 494.910297][ T16] RSP: 0018:ffffc90000157af8 EFLAGS: 00010046 [ 494.916372][ T16] RAX: 0000000000000000 RBX: ffff8880b873c2c0 RCX: 8000000000000002 [ 494.924346][ T16] RDX: ffffffffffffffff RSI: ffffffff8dae0f54 RDI: ffffffff8bcc4c80 [ 494.932310][ T16] RBP: dffffc0000000000 R08: ffffc90000157cc8 R09: 1ffff1100c3b5000 [ 494.940271][ T16] R10: dffffc0000000000 R11: ffffffff81979e10 R12: ffff88801ef2ddc0 [ 494.948242][ T16] R13: dffffc0000000001 R14: ffff8880b873d188 R15: ffff8880b873c2c0 [ 494.956823][ T16] FS: 0000000000000000(0000) GS:ffff888125bc2000(0000) knlGS:0000000000000000 [ 494.965830][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.972425][ T16] CR2: 0000200000102030 CR3: 0000000034afe000 CR4: 00000000003526f0 [ 494.980401][ T16] Call Trace: [ 494.983675][ T16] [ 494.986599][ T16] __schedule+0x3887/0x5700 [ 494.991112][ T16] ? __pfx___schedule+0x10/0x10 [ 494.995959][ T16] ? schedule+0x90/0x2b0 [ 495.000208][ T16] schedule+0x164/0x2b0 [ 495.004354][ T16] smpboot_thread_fn+0x5e2/0xa70 [ 495.009487][ T16] ? smpboot_thread_fn+0x4e/0xa70 [ 495.014529][ T16] kthread+0x38b/0x470 [ 495.018591][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 495.024047][ T16] ? __pfx_kthread+0x10/0x10 [ 495.028647][ T16] ret_from_fork+0x514/0xb70 [ 495.033230][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 495.038331][ T16] ? __switch_to+0xc89/0x1420 [ 495.043006][ T16] ? __pfx_kthread+0x10/0x10 [ 495.047610][ T16] ret_from_fork_asm+0x1a/0x30 [ 495.052386][ T16] [ 495.055401][ T16] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 495.062677][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 495.072209][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 495.082276][ T16] Call Trace: [ 495.085568][ T16] [ 495.088503][ T16] vpanic+0x56d/0xa60 [ 495.092489][ T16] ? __pfx__printk+0x10/0x10 [ 495.097081][ T16] ? __pfx_vpanic+0x10/0x10 [ 495.101595][ T16] ? is_bpf_text_address+0x292/0x2b0 [ 495.106874][ T16] ? is_bpf_text_address+0x26/0x2b0 [ 495.112085][ T16] panic+0xc5/0xd0 [ 495.115803][ T16] ? __pfx_panic+0x10/0x10 [ 495.120227][ T16] ? ret_from_fork_asm+0x1a/0x30 [ 495.125158][ T16] __warn+0x315/0x4c0 [ 495.129132][ T16] ? update_rq_clock+0x34d/0x560 [ 495.134078][ T16] ? update_rq_clock+0x34d/0x560 [ 495.139010][ T16] __report_bug+0x276/0x570 [ 495.143512][ T16] ? rt_spin_unlock+0x165/0x200 [ 495.148363][ T16] ? update_rq_clock+0x34d/0x560 [ 495.153299][ T16] ? __pfx___report_bug+0x10/0x10 [ 495.158315][ T16] ? __lock_acquire+0x747/0x2de0 [ 495.163260][ T16] ? update_rq_clock+0x34d/0x560 [ 495.168210][ T16] report_bug+0x16b/0x220 [ 495.172533][ T16] ? update_rq_clock+0x34d/0x560 [ 495.177464][ T16] ? update_rq_clock+0x34f/0x560 [ 495.182427][ T16] handle_bug+0x9c/0x200 [ 495.186667][ T16] exc_invalid_op+0x1a/0x50 [ 495.191176][ T16] asm_exc_invalid_op+0x1a/0x20 [ 495.196019][ T16] RIP: 0010:update_rq_clock+0x34d/0x560 [ 495.201560][ T16] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 9b ea 9d 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 495.221161][ T16] RSP: 0018:ffffc90000157af8 EFLAGS: 00010046 [ 495.227221][ T16] RAX: 0000000000000000 RBX: ffff8880b873c2c0 RCX: 8000000000000002 [ 495.235189][ T16] RDX: ffffffffffffffff RSI: ffffffff8dae0f54 RDI: ffffffff8bcc4c80 [ 495.243164][ T16] RBP: dffffc0000000000 R08: ffffc90000157cc8 R09: 1ffff1100c3b5000 [ 495.251139][ T16] R10: dffffc0000000000 R11: ffffffff81979e10 R12: ffff88801ef2ddc0 [ 495.259111][ T16] R13: dffffc0000000001 R14: ffff8880b873d188 R15: ffff8880b873c2c0 [ 495.267078][ T16] ? __pfx_pick_task_fair+0x10/0x10 [ 495.272280][ T16] ? update_rq_clock+0x8f/0x560 [ 495.277129][ T16] __schedule+0x3887/0x5700 [ 495.281655][ T16] ? __pfx___schedule+0x10/0x10 [ 495.286521][ T16] ? schedule+0x90/0x2b0 [ 495.290760][ T16] schedule+0x164/0x2b0 [ 495.294924][ T16] smpboot_thread_fn+0x5e2/0xa70 [ 495.299874][ T16] ? smpboot_thread_fn+0x4e/0xa70 [ 495.304911][ T16] kthread+0x38b/0x470 [ 495.308973][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 495.314442][ T16] ? __pfx_kthread+0x10/0x10 [ 495.319024][ T16] ret_from_fork+0x514/0xb70 [ 495.323624][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 495.328738][ T16] ? __switch_to+0xc89/0x1420 [ 495.333416][ T16] ? __pfx_kthread+0x10/0x10 [ 495.338009][ T16] ret_from_fork_asm+0x1a/0x30 [ 495.342776][ T16] [ 495.345851][ T16] Kernel Offset: disabled [ 495.350172][ T16] Rebooting in 86400 seconds..