last executing test programs: 10m29.019873354s ago: executing program 1 (id=761): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 10m26.865755387s ago: executing program 1 (id=771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000002000000000000010200416c806c00010800000001000004090000000400000001000000010000000061615f5f000030"], 0x0, 0x4a, 0x0, 0x1}, 0x28) 10m25.731388035s ago: executing program 1 (id=766): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000540)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8eef9757a601bee936390009c5bbd0000000036", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) 10m25.111005015s ago: executing program 1 (id=768): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80a00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x10, r1}) 10m24.774175007s ago: executing program 1 (id=770): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x209, 0x70bd28, 0x25dfdbfe, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0x1}}]}, 0x1c}}, 0x8800) 10m24.549576804s ago: executing program 1 (id=774): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000", @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 10m9.393839974s ago: executing program 32 (id=774): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="01000000420000000600000008000000000000", @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) 8m29.450573324s ago: executing program 4 (id=1086): socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r4, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 8m28.95544158s ago: executing program 4 (id=1088): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xe, 0xfffffffffffffffe, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 8m28.732689928s ago: executing program 4 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fanotify_init(0x20, 0x0) fanotify_mark(r5, 0x201, 0x20, 0xffffffffffffffff, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 8m27.47517177s ago: executing program 4 (id=1093): capset(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 8m22.971457202s ago: executing program 4 (id=1107): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = open$dir(0x0, 0x40000, 0x4) renameat(0xffffffffffffffff, 0x0, r1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 8m21.808815381s ago: executing program 4 (id=1110): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 8m6.330199741s ago: executing program 33 (id=1110): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x28000001}, 0x20008800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x3, 0x0, @pic={0x8, 0x7, 0x8, 0x2, 0x2, 0x7, 0xc5, 0x19, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) 13.681298092s ago: executing program 5 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) fallocate(0xffffffffffffffff, 0x10, 0x100, 0x5) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x606, 0x0, 0x0, 0xff5}}, {@llc_tr={0x11, {@snap={0xab, 0xab, '\t', "5d60bf", 0x805}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x4000) 13.625047693s ago: executing program 3 (id=2706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 11.787075388s ago: executing program 5 (id=2707): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x40, 0x3, 0x6, 0x4a7c}, {0x1, 0x7, 0xba, 0x5}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.706658129s ago: executing program 3 (id=2708): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x3026, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r3, 0x705, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x6, 0x7, 0x603, 0xffff, 0x1a, '\x00\b\x00'}) 11.017465686s ago: executing program 2 (id=2709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 9.426707864s ago: executing program 3 (id=2710): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 8.33317639s ago: executing program 2 (id=2711): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) socket(0x10, 0x5, 0x4) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.048122147s ago: executing program 0 (id=2712): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf0}}, 0x0) 7.137945709s ago: executing program 0 (id=2713): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) syz_open_dev$vcsa(&(0x7f0000000280), 0x4, 0x0) 7.107268929s ago: executing program 2 (id=2714): syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e010000062406"], 0x0) 6.708866199s ago: executing program 5 (id=2715): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000300)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.708636249s ago: executing program 3 (id=2716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 6.609884472s ago: executing program 3 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) fallocate(0xffffffffffffffff, 0x10, 0x100, 0x5) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x606, 0x0, 0x0, 0xff5}}, {@llc_tr={0x11, {@snap={0xab, 0xab, '\t', "5d60bf", 0x805}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x4000) 6.107413493s ago: executing program 5 (id=2718): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 4.721197777s ago: executing program 0 (id=2719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0x9c, 0x0, 0x0, 0x40000000}, {}, {}, {0x0, 0x5a}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 4.59531001s ago: executing program 3 (id=2720): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.918598696s ago: executing program 2 (id=2721): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf0}}, 0x0) 3.885586297s ago: executing program 5 (id=2722): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x3026, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x1c, r3, 0x705, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x6, 0x7, 0x603, 0xffff, 0x1a, '\x00\b\x00'}) 3.565466495s ago: executing program 2 (id=2723): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) socket(0x10, 0x5, 0x4) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.34084854s ago: executing program 0 (id=2724): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x4, &(0x7f0000000100)=[{0x4, 0xff, 0x2}, {0x40, 0x3, 0x6, 0x4a7c}, {0x1, 0x7, 0xba, 0x5}, {0xb353, 0x0, 0x1, 0x93f}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.727663589s ago: executing program 5 (id=2725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xc5, 0x1, 0x5}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.278723869s ago: executing program 0 (id=2726): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e6", 0x9e}, {&(0x7f0000001000)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6ad", 0xa7}], 0x2}}], 0x1, 0x4000900) sendto$inet(r0, &(0x7f0000000580)="17", 0xfffffffffffffe3d, 0x10008095, 0x0, 0x0) 426.649349ms ago: executing program 2 (id=2727): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b0000000500000001000100090000"], 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xbd) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) syz_open_dev$vcsa(&(0x7f0000000280), 0x4, 0x0) 0s ago: executing program 0 (id=2728): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='./my_dbroot', 0xb) close(r0) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_dbroot/alua/usb_gadget/naa.1234567890abcdef+1\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='rd_pages=8', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='1', 0x1) close(r2) mkdir(&(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000001400)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000001500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') openat(0xffffffffffffff9c, &(0x7f0000001600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_offline\x00', 0x1, 0x0) write(r3, &(0x7f0000001900)='1', 0x1) close(r3) kernel console output (not intermixed with test programs): se convert it to SG_IO [ 568.170760][ T9833] program syz.2.1132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.015680][ T9858] program syz.2.1142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.266334][ T9881] program syz.3.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.344767][ T9256] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 574.376182][ T9906] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1161'. [ 574.440056][ T9906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 574.547152][ T9256] usb 4-1: Using ep0 maxpacket: 8 [ 574.554726][ T9256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 574.570384][ T9256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 574.614852][ T9256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.646291][ T9256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.695971][ T9256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 574.727157][ T9256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.922066][ T9913] program syz.0.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.974261][ T9256] usb 4-1: GET_CAPABILITIES returned 0 [ 574.979845][ T9256] usbtmc 4-1:16.0: can't read capabilities [ 575.007461][ T9915] usbip-vudc usbip-vudc.0: gadget not bound [ 575.204407][ T9919] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 575.218274][ T9919] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 575.233265][ T9919] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 575.241290][ T8] usb 4-1: USB disconnect, device number 34 [ 575.260929][ T9919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 575.272365][ T9919] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 575.280638][ T9919] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 575.383193][ T9918] wlan0 speed is unknown, defaulting to 1000 [ 575.496209][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 575.645601][ T9918] chnl_net:caif_netlink_parms(): no params data found [ 575.801617][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.809060][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.816472][ T9918] bridge_slave_0: entered allmulticast mode [ 575.824182][ T9918] bridge_slave_0: entered promiscuous mode [ 575.834897][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.842422][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.850521][ T9918] bridge_slave_1: entered allmulticast mode [ 575.859545][ T9918] bridge_slave_1: entered promiscuous mode [ 575.970451][ T9918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.009465][ T9918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.104616][ T9918] team0: Port device team_slave_0 added [ 576.115576][ T9918] team0: Port device team_slave_1 added [ 576.195925][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.202950][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.229463][ T9918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.247459][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.257014][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.303888][ T9918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.407215][ T9918] hsr_slave_0: entered promiscuous mode [ 576.419231][ T9918] hsr_slave_1: entered promiscuous mode [ 576.434990][ T9918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 576.446877][ T9918] Cannot create hsr debugfs directory [ 576.668523][ T9918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.679609][ T9918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.691591][ T9918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 576.710005][ T9918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.748473][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.826484][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.896277][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.922708][ T9918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.945009][ T9918] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.961939][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.969177][ T8127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.996735][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.028374][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.035605][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.346681][ T5785] Bluetooth: hci0: command tx timeout [ 577.464536][ T9918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.095404][ T9918] veth0_vlan: entered promiscuous mode [ 578.112922][ T9918] veth1_vlan: entered promiscuous mode [ 578.197599][ T9918] veth0_macvtap: entered promiscuous mode [ 578.267735][ T9918] veth1_macvtap: entered promiscuous mode [ 578.409600][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.420910][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.446311][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.463913][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.478455][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.489147][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.503862][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.520790][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.533173][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.579651][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.593139][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.604770][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.627398][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.643003][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.656574][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.673896][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.703949][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.736037][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.759026][ T59] hsr_slave_0: left promiscuous mode [ 578.775895][ T59] hsr_slave_1: left promiscuous mode [ 578.796031][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.803514][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.835145][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.842647][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.878012][ T59] bridge_slave_1: left allmulticast mode [ 578.893844][ T59] bridge_slave_1: left promiscuous mode [ 578.899662][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.950266][ T59] bridge_slave_0: left allmulticast mode [ 578.959954][ T59] bridge_slave_0: left promiscuous mode [ 578.971509][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.027284][ T59] veth1_macvtap: left promiscuous mode [ 579.032894][ T59] veth0_macvtap: left promiscuous mode [ 579.040075][ T59] veth1_vlan: left promiscuous mode [ 579.047472][ T59] veth0_vlan: left promiscuous mode [ 579.413996][ T5785] Bluetooth: hci0: command tx timeout [ 579.802406][ T59] team0 (unregistering): Port device team_slave_1 removed [ 579.851185][ T59] team0 (unregistering): Port device team_slave_0 removed [ 579.901461][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.953267][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.369555][ T59] bond0 (unregistering): Released all slaves [ 580.509248][ T9918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.529527][ T9918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.540376][ T9918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.549567][ T9918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.719500][ T8126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.729209][ T8126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.825543][ T8126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.833445][ T8126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.044366][ T9974] usbip-vudc usbip-vudc.0: gadget not bound [ 581.494328][ T5785] Bluetooth: hci0: command tx timeout [ 583.573866][ T5785] Bluetooth: hci0: command tx timeout [ 583.814059][ T7047] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 583.924164][ T9256] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 584.035721][ T7047] usb 4-1: Using ep0 maxpacket: 16 [ 584.041442][ T7047] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 584.041475][ T7047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.041500][ T7047] usb 4-1: Product: syz [ 584.041511][ T7047] usb 4-1: Manufacturer: syz [ 584.041522][ T7047] usb 4-1: SerialNumber: syz [ 584.123786][ T9256] usb 6-1: Using ep0 maxpacket: 8 [ 584.133588][ T9256] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.158432][ T9256] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.185014][ T9256] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.204835][ T9256] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.229480][ T9256] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.257856][ T9256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.459113][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 584.487600][ T7047] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 584.509460][ T9256] usb 6-1: GET_CAPABILITIES returned 0 [ 584.519804][ T7047] usb 4-1: USB disconnect, device number 35 [ 584.532999][ T9256] usbtmc 6-1:16.0: can't read capabilities [ 585.587992][ T9256] usb 6-1: USB disconnect, device number 2 [ 585.614316][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 587.634267][T10091] program syz.3.1206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 588.104031][ T27] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 588.305947][ T27] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 588.335298][ T27] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 588.355322][ T27] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 588.371771][ T27] usb 6-1: string descriptor 0 read error: -22 [ 588.380114][ T27] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 588.391641][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.418885][ T27] adutux 6-1:168.0: interrupt endpoints not found [ 588.693908][ T9256] usb 6-1: USB disconnect, device number 3 [ 589.621585][T10124] program syz.5.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.305195][T10158] program syz.5.1227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.172738][ T8] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 593.503979][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 593.555432][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 593.567514][ T8] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 593.587113][ T8] usb 4-1: can't read configurations, error -71 [ 594.438552][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 595.503872][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 595.645400][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 595.689758][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 595.717141][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.763823][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.802376][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.833776][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.894122][ T28] audit: type=1800 audit(1785032240.292:2): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1252" name="idVendor" dev="configfs" ino=19451 res=0 errno=0 [ 595.908622][T10243] file system registered [ 595.914708][ C1] vkms_vblank_simulate: vblank timer overrun [ 595.948929][ T28] audit: type=1800 audit(1785032240.302:3): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1252" name="idProduct" dev="configfs" ino=19456 res=0 errno=0 [ 596.076159][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 596.123809][ T27] usbtmc 3-1:16.0: can't read capabilities [ 596.286816][ T27] usb 3-1: USB disconnect, device number 27 [ 597.586430][T10282] hub 1-0:1.0: USB hub found [ 597.597200][T10282] hub 1-0:1.0: 1 port detected [ 598.543890][ T28] audit: type=1800 audit(1785032242.902:4): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1265" name="idVendor" dev="configfs" ino=20543 res=0 errno=0 [ 598.588872][ T28] audit: type=1800 audit(1785032242.912:5): pid=10296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1265" name="idProduct" dev="configfs" ino=20544 res=0 errno=0 [ 599.503885][ T5613] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 599.724144][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 599.732008][ T5613] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 599.756543][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 599.785635][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.826669][ T5613] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.855076][ T5613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.878424][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.736751][ T5613] usb 3-1: GET_CAPABILITIES returned 0 [ 600.742367][ T5613] usbtmc 3-1:16.0: can't read capabilities [ 600.763221][ T5613] usb 3-1: USB disconnect, device number 28 [ 601.652874][T10334] hub 1-0:1.0: USB hub found [ 601.660828][T10334] hub 1-0:1.0: 1 port detected [ 602.629487][ T28] audit: type=1800 audit(1785032247.032:6): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1276" name="idVendor" dev="configfs" ino=20361 res=0 errno=0 [ 602.695158][ T28] audit: type=1800 audit(1785032247.062:7): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1276" name="idProduct" dev="configfs" ino=20362 res=0 errno=0 [ 603.874147][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 604.087668][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 604.153381][ T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 604.236788][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 604.302919][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.658077][ T27] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.671532][ T27] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 604.681018][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.932330][ T27] usb 6-1: GET_CAPABILITIES returned 0 [ 604.958298][ T27] usbtmc 6-1:16.0: can't read capabilities [ 605.149235][ T5837] usb 6-1: USB disconnect, device number 4 [ 605.990198][ T28] audit: type=1800 audit(1785032250.392:8): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1292" name="idVendor" dev="configfs" ino=20681 res=0 errno=0 [ 606.033236][ T28] audit: type=1800 audit(1785032250.422:9): pid=10392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1292" name="idProduct" dev="configfs" ino=20682 res=0 errno=0 [ 606.219723][T10401] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 606.272321][T10401] team0: Port device netdevsim0 added [ 606.430133][T10402] hub 1-0:1.0: USB hub found [ 606.436459][T10402] hub 1-0:1.0: 1 port detected [ 607.813972][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 608.023876][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 608.052785][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 608.073390][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 608.091419][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.109104][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.128805][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.146117][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.430764][ T8] usb 4-1: usb_control_msg returned -71 [ 608.449016][ T8] usbtmc 4-1:16.0: can't read capabilities [ 608.486091][ T8] usb 4-1: USB disconnect, device number 38 [ 608.993754][T10439] syz.0.1306 uses obsolete (PF_INET,SOCK_PACKET) [ 609.751466][T10454] hub 1-0:1.0: USB hub found [ 609.757700][T10454] hub 1-0:1.0: 1 port detected [ 611.793818][ T5818] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 612.013961][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 612.025923][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 612.048452][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 612.069556][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 612.089030][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.121797][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.153957][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.452328][ T5818] usb 3-1: usb_control_msg returned -71 [ 612.483808][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 612.534069][ T5818] usb 3-1: USB disconnect, device number 29 [ 614.295165][T10535] hub 1-0:1.0: USB hub found [ 614.301270][T10535] hub 1-0:1.0: 1 port detected [ 617.204586][ T5613] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 617.256951][T10580] fuse: Bad value for 'fd' [ 617.414293][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 617.548484][ T5613] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 617.974108][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 618.006942][ T5613] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.017462][ T5613] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 618.030862][ T5613] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 618.060630][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.401890][ T5613] usb 3-1: usb_control_msg returned -71 [ 618.413847][ T5613] usbtmc 3-1:16.0: can't read capabilities [ 618.517011][ T5613] usb 3-1: USB disconnect, device number 30 [ 618.801502][T10598] hub 1-0:1.0: USB hub found [ 618.807409][T10598] hub 1-0:1.0: 1 port detected [ 623.502267][T10654] hub 1-0:1.0: USB hub found [ 623.507474][T10654] hub 1-0:1.0: 1 port detected [ 624.625487][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.637011][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.767373][T10709] hub 1-0:1.0: USB hub found [ 626.772387][T10709] hub 1-0:1.0: 1 port detected [ 629.142333][T10740] hub 1-0:1.0: USB hub found [ 629.150829][T10740] hub 1-0:1.0: 1 port detected [ 630.835955][T10764] hub 1-0:1.0: USB hub found [ 630.840885][T10764] hub 1-0:1.0: 1 port detected [ 631.005259][T10768] hub 1-0:1.0: USB hub found [ 631.033280][T10768] hub 1-0:1.0: 1 port detected [ 631.344074][ T5837] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 631.533871][ T5837] usb 3-1: Using ep0 maxpacket: 8 [ 632.530491][ T5837] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 632.542002][ T5837] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 632.552304][ T5837] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 632.562360][ T5837] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.576534][ T5837] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 632.585695][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.607235][T10789] hub 1-0:1.0: USB hub found [ 632.651461][T10789] hub 1-0:1.0: 1 port detected [ 632.813934][ T5837] usb 3-1: GET_CAPABILITIES returned 0 [ 632.832897][ T5837] usbtmc 3-1:16.0: can't read capabilities [ 633.035619][ T8] usb 3-1: USB disconnect, device number 31 [ 633.216254][T10807] hub 1-0:1.0: USB hub found [ 633.227249][T10807] hub 1-0:1.0: 1 port detected [ 633.452128][T10813] hub 1-0:1.0: USB hub found [ 633.477195][T10813] hub 1-0:1.0: 1 port detected [ 634.854954][T10839] hub 1-0:1.0: USB hub found [ 634.861059][T10839] hub 1-0:1.0: 1 port detected [ 635.459811][T10842] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 635.584768][T10843] hub 1-0:1.0: USB hub found [ 635.589851][T10843] hub 1-0:1.0: 1 port detected [ 637.723232][T10882] hub 1-0:1.0: USB hub found [ 637.728526][T10882] hub 1-0:1.0: 1 port detected [ 639.268901][T10905] hub 1-0:1.0: USB hub found [ 639.275148][T10905] hub 1-0:1.0: 1 port detected [ 641.359012][T10937] hub 1-0:1.0: USB hub found [ 641.365202][T10937] hub 1-0:1.0: 1 port detected [ 642.213657][T10938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 642.401734][T10952] hub 1-0:1.0: USB hub found [ 642.408595][T10952] hub 1-0:1.0: 1 port detected [ 643.674014][ T7047] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 643.824013][ T7047] usb 3-1: device descriptor read/64, error -71 [ 644.045941][ T5837] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 644.243968][ T7047] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 644.494884][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 644.535454][ T5837] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 644.572340][ T5837] usb 1-1: config 0 has no interface number 0 [ 644.621858][ T5837] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 644.681307][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.738096][ T5837] usb 1-1: Product: syz [ 644.771108][ T5837] usb 1-1: Manufacturer: syz [ 644.792507][ T5837] usb 1-1: SerialNumber: syz [ 644.898393][ T5837] usb 1-1: config 0 descriptor?? [ 644.935136][ T5837] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 645.103892][ T7047] usb 3-1: device descriptor read/64, error -71 [ 645.149944][ T5837] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 645.167786][ T5837] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 645.465036][ T7047] usb usb3-port1: attempt power cycle [ 645.595573][T10987] usb 1-1: USB disconnect, device number 22 [ 645.625819][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 645.725618][T10987] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 645.809083][T10987] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 645.827731][T10987] quatech2 1-1:0.51: device disconnected [ 645.953195][T10990] hub 1-0:1.0: USB hub found [ 646.016432][T10990] hub 1-0:1.0: 1 port detected [ 646.323907][ T7047] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 646.354583][ T7047] usb 3-1: device descriptor read/8, error -71 [ 647.045273][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.052470][T10993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.403898][ T8114] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 648.239503][ T8114] usb 1-1: device descriptor read/64, error -71 [ 649.048953][ T8114] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 649.773872][ T8114] usb 1-1: device descriptor read/64, error -71 [ 649.894616][ T8114] usb usb1-port1: attempt power cycle [ 650.333849][ T8114] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 650.343605][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.350793][T11030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.573819][ T8114] usb 1-1: device not accepting address 26, error -71 [ 651.523929][ T8114] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 651.564406][ T8114] usb 1-1: device descriptor read/8, error -71 [ 651.633851][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.641025][T11052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.687677][ T8114] usb usb1-port1: unable to enumerate USB device [ 654.004145][ T973] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 654.338623][ T973] usb 1-1: device descriptor read/64, error -71 [ 656.134241][T11105] overlayfs: failed to resolve './file0': -2 [ 656.970685][T11083] hub 1-0:1.0: USB hub found [ 656.975958][T11083] hub 1-0:1.0: 1 port detected [ 657.583888][ T5837] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 657.763065][ T5837] usb 1-1: device descriptor read/64, error -71 [ 658.063914][ T5837] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 658.751302][ T5837] usb 1-1: device descriptor read/64, error -71 [ 658.968557][ T5837] usb usb1-port1: attempt power cycle [ 659.453931][ T5837] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 659.514764][ T5837] usb 1-1: device descriptor read/8, error -71 [ 659.794044][ T5837] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 659.984521][ T5837] usb 1-1: device descriptor read/8, error -71 [ 660.104673][ T5837] usb usb1-port1: unable to enumerate USB device [ 663.904020][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 664.063802][ T27] usb 3-1: device descriptor read/64, error -71 [ 664.469684][ T27] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 664.593954][T11184] hub 1-0:1.0: USB hub found [ 664.598926][T11184] hub 1-0:1.0: 1 port detected [ 664.743904][ T27] usb 3-1: device descriptor read/64, error -71 [ 665.363866][ T27] usb usb3-port1: attempt power cycle [ 665.804010][ T27] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 665.836045][ T27] usb 3-1: device descriptor read/8, error -71 [ 666.123966][ T27] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 666.544333][ T27] usb 3-1: device descriptor read/8, error -71 [ 666.694676][ T27] usb usb3-port1: unable to enumerate USB device [ 667.140321][T11206] kvm: kvm [11204]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 667.393519][T11213] hub 1-0:1.0: USB hub found [ 667.399684][T11213] hub 1-0:1.0: 1 port detected [ 668.238400][T11219] hub 1-0:1.0: USB hub found [ 668.243418][T11219] hub 1-0:1.0: 1 port detected [ 669.064042][ T27] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 669.383839][ T27] usb 4-1: device descriptor read/64, error -71 [ 670.564222][ T27] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 671.587000][T11252] hub 1-0:1.0: USB hub found [ 671.593143][T11252] hub 1-0:1.0: 1 port detected [ 674.535849][T11280] hub 1-0:1.0: USB hub found [ 674.585191][T11280] hub 1-0:1.0: 1 port detected [ 675.472906][T11294] kvm: kvm [11293]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 675.547669][ T9256] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 675.793727][ T9256] usb 4-1: Using ep0 maxpacket: 8 [ 676.458191][ T9256] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 676.468570][ T9256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 676.477911][ T9256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.284078][ T9256] usb 4-1: USB disconnect, device number 41 [ 680.928655][T11338] hub 1-0:1.0: USB hub found [ 680.933953][T11338] hub 1-0:1.0: 1 port detected [ 681.694878][ T5820] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 681.883861][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 681.891450][ T5820] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 681.902473][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 681.911989][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.881528][ T5817] usb 4-1: USB disconnect, device number 42 [ 684.688070][T11358] hub 1-0:1.0: USB hub found [ 684.694604][T11358] hub 1-0:1.0: 1 port detected [ 685.692414][T11362] kvm: kvm [11361]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 686.033964][ T5817] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 686.057962][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.064985][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.938135][ T5817] usb 1-1: Using ep0 maxpacket: 8 [ 686.951907][ T5817] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 686.972810][ T5817] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 687.021418][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.476837][T11394] usb 1-1: USB disconnect, device number 35 [ 687.553952][T11394] hub 1-0:1.0: USB hub found [ 687.560451][T11394] hub 1-0:1.0: 1 port detected [ 687.864323][ T5820] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 689.465584][T11422] hub 1-0:1.0: USB hub found [ 689.471763][T11422] hub 1-0:1.0: 1 port detected [ 692.544564][T11445] hub 1-0:1.0: USB hub found [ 692.553861][T11445] hub 1-0:1.0: 1 port detected [ 693.839090][ T5818] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 698.974401][T11472] hub 1-0:1.0: USB hub found [ 699.093848][T11472] hub 1-0:1.0: 1 port detected [ 699.440110][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 699.988607][T11485] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1641' sets config #0 [ 700.001200][T11485] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1641' sets config #1 [ 700.863778][ T9256] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 702.867341][ T5837] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 703.038910][ T9256] usb 6-1: Using ep0 maxpacket: 8 [ 705.427974][ T9256] usb 6-1: device descriptor read/all, error -71 [ 707.805987][ T5820] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 707.894006][ T9256] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 707.993781][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 708.163894][ T9256] usb 6-1: Using ep0 maxpacket: 32 [ 708.197072][ T9256] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 708.265328][ T9256] usb 6-1: config 0 has no interface number 0 [ 708.401329][ T9256] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 708.476481][ T9256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.540653][ T9256] usb 6-1: Product: syz [ 708.564410][ T9256] usb 6-1: Manufacturer: syz [ 708.604329][ T9256] usb 6-1: SerialNumber: syz [ 708.730054][ T9256] usb 6-1: config 0 descriptor?? [ 708.873490][ T9256] smsc95xx v2.0.0 [ 709.329841][ T5820] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 709.537236][ T9256] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 709.548553][ T9256] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 711.914725][ T5820] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.927897][ T5820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 711.937845][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.968365][ T5820] usb 4-1: can't set config #16, error -71 [ 711.976179][ T5820] usb 4-1: USB disconnect, device number 44 [ 712.004025][ T9256] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 712.060122][ T9256] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 712.102341][ T9256] usb 6-1: USB disconnect, device number 7 [ 712.222611][T11567] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.466444][T11573] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1667' sets config #0 [ 712.476227][T11573] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1667' sets config #1 [ 712.767846][T11577] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1669' sets config #0 [ 712.777826][T11577] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1669' sets config #1 [ 713.817328][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 713.828816][ T5785] CPU: 0 PID: 5785 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 713.836439][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 713.846552][ T5785] Workqueue: hci1 hci_rx_work [ 713.851440][ T5785] Call Trace: [ 713.854804][ T5785] [ 713.857812][ T5785] dump_stack_lvl+0x18c/0x250 [ 713.862622][ T5785] ? show_regs_print_info+0x20/0x20 [ 713.867894][ T5785] ? load_image+0x420/0x420 [ 713.872532][ T5785] sysfs_create_dir_ns+0x26e/0x2a0 [ 713.877720][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 713.882791][ T5785] ? sysfs_warn_dup+0xa0/0xa0 [ 713.887490][ T5785] ? do_raw_spin_unlock+0x121/0x230 [ 713.892710][ T5785] kobject_add_internal+0x617/0xc90 [ 713.898004][ T5785] kobject_add+0x164/0x240 [ 713.902451][ T5785] ? kobject_init+0x1d0/0x1d0 [ 713.907154][ T5785] ? get_device_parent+0x366/0x390 [ 713.912324][ T5785] device_add+0x3fa/0xc40 [ 713.916674][ T5785] hci_conn_add_sysfs+0xd5/0x1e0 [ 713.921690][ T5785] le_conn_complete_evt+0xe9f/0x1480 [ 713.927033][ T5785] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 713.933290][ T5785] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 713.939013][ T5785] ? mutex_unlock+0x10/0x10 [ 713.943533][ T5785] ? skb_pull_data+0xf0/0x1f0 [ 713.948286][ T5785] hci_le_conn_complete_evt+0x187/0x440 [ 713.953898][ T5785] ? hci_remote_host_features_evt+0x150/0x150 [ 713.960043][ T5785] hci_event_packet+0x7b4/0x1280 [ 713.965050][ T5785] ? __lock_acquire+0x7d80/0x7d80 [ 713.970136][ T5785] ? lock_chain_count+0x20/0x20 [ 713.975047][ T5785] ? bis_list+0x290/0x290 [ 713.979444][ T5785] ? lockdep_hardirqs_on+0x98/0x150 [ 713.984707][ T5785] ? hci_send_to_monitor+0xd7/0x4f0 [ 713.989963][ T5785] hci_rx_work+0x43a/0xd60 [ 713.994422][ T5785] ? process_scheduled_works+0x975/0x1600 [ 714.000229][ T5785] process_scheduled_works+0xa60/0x1600 [ 714.005856][ T5785] ? worker_attach_to_pool+0x370/0x370 [ 714.011388][ T5785] ? assign_work+0x3cc/0x5d0 [ 714.016016][ T5785] worker_thread+0xa5e/0xfe0 [ 714.020662][ T5785] kthread+0x2fa/0x390 [ 714.024757][ T5785] ? pr_cont_work+0x550/0x550 [ 714.029464][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 714.034083][ T5785] ret_from_fork+0x48/0x80 [ 714.038587][ T5785] ? kthread_blkcg+0xd0/0xd0 [ 714.043206][ T5785] ret_from_fork_asm+0x11/0x20 [ 714.048056][ T5785] [ 714.058114][ T5785] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 714.074806][ T5785] Bluetooth: hci1: failed to register connection device [ 714.310814][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.423812][ T7047] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 714.603956][ T7047] usb 3-1: Using ep0 maxpacket: 8 [ 716.191493][T11607] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1681' sets config #0 [ 716.201218][T11607] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1681' sets config #1 [ 716.973788][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 717.282882][ T7047] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 717.394624][T11611] hub 1-0:1.0: USB hub found [ 717.403936][T11611] hub 1-0:1.0: 1 port detected [ 720.596127][ T7047] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 720.607398][ T7047] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 720.623501][ T7047] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 720.636563][ T7047] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 720.646355][ T7047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.734564][ T7047] usb 3-1: can't set config #16, error -71 [ 720.755955][ T7047] usb 3-1: USB disconnect, device number 40 [ 720.819758][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.367749][T11635] hub 1-0:1.0: USB hub found [ 721.373986][T11635] hub 1-0:1.0: 1 port detected [ 722.324786][T11643] hub 1-0:1.0: USB hub found [ 722.330937][T11643] hub 1-0:1.0: 1 port detected [ 722.365151][ T8114] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 722.584057][ T8114] usb 6-1: Using ep0 maxpacket: 8 [ 722.723378][ T8114] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 722.922555][ T8114] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 722.984194][ T8114] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 723.075891][ T8114] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 723.110000][ T8114] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.139287][ T8114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.162358][ T8114] usbtmc 6-1:16.0: bulk endpoints not found [ 723.880026][T11648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1697'. [ 724.279592][T11666] hub 1-0:1.0: USB hub found [ 724.285745][T11666] hub 1-0:1.0: 1 port detected [ 724.898754][ T8114] usb 6-1: USB disconnect, device number 8 [ 725.503085][ T27] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 725.884297][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 725.891877][ T27] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 725.902698][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 725.920528][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 725.930754][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 726.700811][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.834725][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.875935][ T27] usbtmc 1-1:16.0: bulk endpoints not found [ 727.493939][ T5817] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 727.838164][T11711] usb 1-1: USB disconnect, device number 38 [ 727.915327][T11711] hub 1-0:1.0: USB hub found [ 727.921474][T11711] hub 1-0:1.0: 1 port detected [ 728.143958][ T5820] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 728.603803][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 728.611241][ T5817] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 728.643055][ T5817] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 728.673789][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 728.706905][ T5817] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 728.717278][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.733924][ T5817] usb 3-1: Product: syz [ 728.738254][ T5817] usb 3-1: Manufacturer: syz [ 728.742884][ T5817] usb 3-1: SerialNumber: syz [ 728.772416][ T5817] usb 3-1: config 0 descriptor?? [ 729.002573][ T5817] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 729.034262][ T5817] gs_usb: probe of 3-1:0.0 failed with error -71 [ 729.054070][ T5817] usb 3-1: USB disconnect, device number 41 [ 731.574710][ T5820] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 731.823735][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 731.845843][ T5820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 731.873815][ T5820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 731.893910][ T5820] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 732.146430][ T5820] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.160883][ T5820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.170270][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.195103][ T5820] usbtmc 6-1:16.0: bulk endpoints not found [ 732.319489][T11755] hub 1-0:1.0: USB hub found [ 732.325716][T11755] hub 1-0:1.0: 1 port detected [ 732.971046][ T9256] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 733.181883][ T9256] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 733.215791][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 733.253394][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 733.273407][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 733.283691][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 733.379809][T11764] hub 1-0:1.0: USB hub found [ 733.386069][T11764] hub 1-0:1.0: 1 port detected [ 734.090349][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.104858][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.115917][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.127005][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.138699][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.163879][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.193803][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.219060][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.227264][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.236544][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.252331][ T5837] usb 6-1: USB disconnect, device number 9 [ 734.275073][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.285717][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.481450][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.522207][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.537672][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.554592][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.583333][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.610739][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.622231][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.638412][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.660158][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.680425][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.696710][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.722264][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.740824][ T9256] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.761300][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.793700][ T9256] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 734.815717][ T9256] usb 4-1: config 0 interface 0 has no altsetting 0 [ 734.846061][ T9256] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 734.874744][ T9256] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 734.893418][ T9256] usb 4-1: Product: syz [ 734.899769][ T9256] usb 4-1: Manufacturer: syz [ 734.910535][ T9256] usb 4-1: SerialNumber: syz [ 734.931880][ T9256] usb 4-1: config 0 descriptor?? [ 734.948326][ T9256] yurex 4-1:0.0: Could not submitting URB [ 734.980183][ T9256] yurex: probe of 4-1:0.0 failed with error -5 [ 735.075353][ T9256] usb 4-1: USB disconnect, device number 45 [ 735.587432][T11786] hub 1-0:1.0: USB hub found [ 735.603898][T11786] hub 1-0:1.0: 1 port detected [ 737.223797][ T5820] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 737.536725][T11808] hub 1-0:1.0: USB hub found [ 737.542472][T11808] hub 1-0:1.0: 1 port detected [ 737.583867][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 737.595984][ T5820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 737.611840][ T5820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 737.626281][ T5820] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 737.651863][ T5820] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.679872][ T5820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.701368][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.725369][ T5820] usbtmc 6-1:16.0: bulk endpoints not found [ 738.463569][T11832] hub 1-0:1.0: USB hub found [ 738.469760][T11832] hub 1-0:1.0: 1 port detected [ 739.827748][ T7047] usb 6-1: USB disconnect, device number 10 [ 740.504017][ T8114] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 741.141531][ T8114] usb 3-1: no configurations [ 741.155184][ T8114] usb 3-1: can't read configurations, error -22 [ 741.632253][T11862] hub 1-0:1.0: USB hub found [ 741.637500][T11862] hub 1-0:1.0: 1 port detected [ 741.663958][ T5817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 741.850070][T11861] hub 1-0:1.0: USB hub found [ 741.858502][T11861] hub 1-0:1.0: 1 port detected [ 741.863871][ T5817] usb 6-1: Using ep0 maxpacket: 8 [ 741.875843][ T5817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 741.890303][ T5817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 741.901021][ T5817] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 741.918435][ T5817] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.951173][ T5817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.972926][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.018290][ T5817] usbtmc 6-1:16.0: bulk endpoints not found [ 743.134082][ T7047] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 743.343840][ T7047] usb 1-1: Using ep0 maxpacket: 8 [ 743.356393][ T7047] usb 1-1: unable to get BOS descriptor or descriptor too short [ 743.376604][ T7047] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 743.394316][ T7047] usb 1-1: config 0 has no interface number 0 [ 743.407255][ T7047] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 743.439617][ T7047] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 743.459296][ T7047] usb 1-1: config 0 interface 88 has no altsetting 0 [ 743.683543][ T7047] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 743.693105][ T7047] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 743.702030][ T7047] usb 1-1: Product: syz [ 743.706594][ T7047] usb 1-1: Manufacturer: syz [ 743.711245][ T7047] usb 1-1: SerialNumber: syz [ 743.719669][ T7047] usb 1-1: config 0 descriptor?? [ 744.171181][ T7047] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input9 [ 744.205247][ T7047] usb 1-1: USB disconnect, device number 40 [ 744.445632][ T8114] usb 6-1: USB disconnect, device number 11 [ 744.764046][T11902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1791'. [ 744.886918][T11904] hub 1-0:1.0: USB hub found [ 744.891928][T11904] hub 1-0:1.0: 1 port detected [ 746.458607][ T7047] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 746.484957][ T5817] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 746.643797][ T7047] usb 4-1: Using ep0 maxpacket: 8 [ 746.658582][ T7047] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 746.676054][ T5817] usb 1-1: not running at top speed; connect to a high speed hub [ 746.685654][ T5817] usb 1-1: config 5 has an invalid interface number: 32 but max is 0 [ 746.691094][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 746.697702][ T5817] usb 1-1: config 5 has no interface number 0 [ 746.720003][ T5817] usb 1-1: config 5 interface 32 has no altsetting 0 [ 746.724651][ T7047] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 746.738570][ T5817] usb 1-1: string descriptor 0 read error: -22 [ 746.745234][ T5817] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 746.752824][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 746.758425][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.774478][ T7047] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.995977][ T7047] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 747.005250][ T7047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.025161][ T7047] usbtmc: probe of 4-1:16.0 failed with error -22 [ 747.057903][ T5817] usb 1-1: USB disconnect, device number 41 [ 747.289704][T11943] hub 1-0:1.0: USB hub found [ 747.296731][T11943] hub 1-0:1.0: 1 port detected [ 747.498276][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.504969][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.027840][ T5817] usb 4-1: USB disconnect, device number 46 [ 749.053007][T11970] hub 1-0:1.0: USB hub found [ 749.059058][T11970] hub 1-0:1.0: 1 port detected [ 749.497650][T11982] autofs4:pid:11982:autofs_fill_super: called with bogus options [ 749.625421][T11983] hub 1-0:1.0: USB hub found [ 749.630431][T11983] hub 1-0:1.0: 1 port detected [ 750.973897][ T8114] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 751.013864][ T27] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 751.273741][ T8114] usb 1-1: Using ep0 maxpacket: 8 [ 751.280895][ T8114] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 751.292210][ T8114] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 751.306076][ T8114] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 751.317178][ T8114] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 751.327363][ T8114] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.340925][ T8114] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.350385][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 751.361012][ T8114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.376994][ T27] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 751.389350][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.399425][ T8114] usbtmc: probe of 1-1:16.0 failed with error -22 [ 751.408625][ T27] usb 6-1: config 0 descriptor?? [ 751.432351][ T27] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 752.331706][ T27] gspca_nw80x: reg_r err -71 [ 752.538218][ T27] nw80x: probe of 6-1:0.0 failed with error -71 [ 752.564085][ T27] usb 6-1: USB disconnect, device number 12 [ 752.958581][T12022] usb 1-1: USB disconnect, device number 42 [ 752.986770][T12022] hub 1-0:1.0: USB hub found [ 752.992994][T12022] hub 1-0:1.0: 1 port detected [ 753.275852][ T5817] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 754.753862][ T5817] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 755.036512][ T5817] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 755.054663][ T5817] usb 1-1: config 0 has no interface number 0 [ 755.079684][ T5817] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 755.110432][ T5817] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.139568][ T5817] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 755.186651][ T5817] usb 1-1: config 0 interface 1 has no altsetting 0 [ 755.193608][ T5817] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 755.208194][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.226367][ T5817] usb 1-1: config 0 descriptor?? [ 755.858061][ T5817] uclogic 0003:145F:0212.0002: pen parameters not found [ 755.881540][ T5817] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 756.022578][ T5817] usb 1-1: USB disconnect, device number 44 [ 756.139068][T12049] veth1_to_bond: entered allmulticast mode [ 756.154722][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 756.278761][T12049] veth1_to_bond (unregistering): left allmulticast mode [ 757.045915][ T7047] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 757.071596][T12049] bond0: (slave bond_slave_1): Releasing backup interface [ 757.243829][ T7047] usb 4-1: Using ep0 maxpacket: 8 [ 757.259541][ T7047] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 757.307044][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 757.433196][ T7047] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 757.539558][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 757.629845][ T7047] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.741993][ T7047] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 757.805911][ T7047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.275342][ T7047] usbtmc: probe of 4-1:16.0 failed with error -22 [ 758.981291][T12076] hub 1-0:1.0: USB hub found [ 758.986363][T12076] hub 1-0:1.0: 1 port detected [ 759.033191][T12077] hub 1-0:1.0: USB hub found [ 759.038248][T12077] hub 1-0:1.0: 1 port detected [ 759.575935][T12084] warning: `syz.0.1854' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 759.856635][T12084] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 759.864866][T12084] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 760.340890][ T8] usb 4-1: USB disconnect, device number 47 [ 762.514567][T12116] hub 1-0:1.0: USB hub found [ 762.521179][T12116] hub 1-0:1.0: 1 port detected [ 763.203887][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 763.423888][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 763.461134][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 763.479545][T12124] hub 1-0:1.0: USB hub found [ 763.485441][T12124] hub 1-0:1.0: 1 port detected [ 763.543746][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 763.607099][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 763.703298][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.803136][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.875019][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.620362][T12133] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 764.627575][T12133] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 764.892861][ T5837] wlan0 speed is unknown, defaulting to 1000 [ 765.033890][ T8] usb 6-1: usb_control_msg returned -32 [ 765.063777][ T8] usbtmc 6-1:16.0: can't read capabilities [ 765.120281][ T8] usb 6-1: USB disconnect, device number 13 [ 766.771527][T12151] hub 1-0:1.0: USB hub found [ 766.776683][T12151] hub 1-0:1.0: 1 port detected [ 767.508087][T12165] hub 1-0:1.0: USB hub found [ 767.513039][T12165] hub 1-0:1.0: 1 port detected [ 768.984159][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 770.168624][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 770.274708][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 770.333785][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 770.353953][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.383697][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.429007][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.563329][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.412122][T12192] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 771.419231][T12192] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 771.621229][ T8] usb 3-1: usb_control_msg returned -32 [ 771.633952][ T8] usbtmc 3-1:16.0: can't read capabilities [ 771.665849][ T8] usb 3-1: USB disconnect, device number 44 [ 771.880587][T12199] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1891'. [ 772.175406][T12203] hub 1-0:1.0: USB hub found [ 772.180373][T12203] hub 1-0:1.0: 1 port detected [ 772.589318][T12205] hub 1-0:1.0: USB hub found [ 772.594356][T12205] hub 1-0:1.0: 1 port detected [ 775.634844][T12230] netlink: 'syz.3.1901': attribute type 1 has an invalid length. [ 776.240081][T12227] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 776.248029][T12227] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 776.453847][ T9256] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 776.656079][ T9256] usb 3-1: Using ep0 maxpacket: 8 [ 776.699814][ T9256] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 776.725230][ T9256] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 776.762800][ T9256] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 776.806446][ T9256] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.878201][ T9256] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 776.921021][ T9256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.958321][T12245] hub 1-0:1.0: USB hub found [ 776.963289][T12245] hub 1-0:1.0: 1 port detected [ 777.227809][ T9256] usb 3-1: usb_control_msg returned -32 [ 777.244178][ T9256] usbtmc 3-1:16.0: can't read capabilities [ 777.273556][ T9256] usb 3-1: USB disconnect, device number 45 [ 777.489696][T12253] hub 1-0:1.0: USB hub found [ 777.495784][T12253] hub 1-0:1.0: 1 port detected [ 778.263738][ T7047] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 779.180345][T12267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1913'. [ 779.265482][ T7047] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 779.324240][ T7047] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 779.430990][ T7047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 779.549778][ T7047] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 779.635886][ T7047] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 779.671582][ T7047] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 779.691487][ T7047] usb 6-1: Product: syz [ 779.710229][ T7047] usb 6-1: Manufacturer: syz [ 779.766367][ T7047] cdc_wdm 6-1:1.0: skipping garbage [ 779.771666][ T7047] cdc_wdm 6-1:1.0: skipping garbage [ 779.801562][ T7047] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 779.836070][ T7047] cdc_wdm 6-1:1.0: Unknown control protocol [ 780.153217][T12278] hub 1-0:1.0: USB hub found [ 780.159126][T12278] hub 1-0:1.0: 1 port detected [ 780.507306][ T5837] usb 6-1: USB disconnect, device number 14 [ 780.703993][ T7047] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 781.415870][T12292] hub 1-0:1.0: USB hub found [ 781.421082][T12292] hub 1-0:1.0: 1 port detected [ 781.686383][ T7047] usb 4-1: Using ep0 maxpacket: 8 [ 781.742926][ T7047] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 781.833041][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 781.915626][ T7047] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 781.994102][ T7047] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.102455][ T7047] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 782.164830][ T7047] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.922706][T12298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'. [ 783.062693][ T7047] usb 4-1: usb_control_msg returned -32 [ 783.273809][ T7047] usbtmc 4-1:16.0: can't read capabilities [ 783.293222][ T7047] usb 4-1: USB disconnect, device number 48 [ 784.210831][T12316] hub 1-0:1.0: USB hub found [ 784.215979][T12316] hub 1-0:1.0: 1 port detected [ 785.165713][T12325] hub 1-0:1.0: USB hub found [ 785.177947][T12325] hub 1-0:1.0: 1 port detected [ 786.560044][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 788.044194][ T9256] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 789.177562][ T9256] usb 1-1: Using ep0 maxpacket: 8 [ 789.240309][ T9256] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 789.286200][ T9256] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 789.342733][ T9256] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 789.390588][ T9256] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.421928][ T9256] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 789.436112][ T9256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.049119][ T9256] usb 1-1: usb_control_msg returned -71 [ 791.077582][ T9256] usbtmc 1-1:16.0: can't read capabilities [ 791.247985][ T9256] usb 1-1: USB disconnect, device number 45 [ 792.485544][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1954'. [ 793.958516][T12400] hub 1-0:1.0: USB hub found [ 793.964709][T12400] hub 1-0:1.0: 1 port detected [ 793.995829][ T7047] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 794.214020][ T7047] usb 6-1: Using ep0 maxpacket: 8 [ 794.332267][ T7047] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 794.576365][ T7047] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 794.603660][ T7047] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.264945][T12410] hub 1-0:1.0: USB hub found [ 795.270933][T12410] hub 1-0:1.0: 1 port detected [ 795.555987][ T7047] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.571255][ T7047] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 795.602975][ T7047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.096261][ T7047] usb 6-1: usb_control_msg returned -32 [ 796.102035][ T7047] usbtmc 6-1:16.0: can't read capabilities [ 796.182910][ T7047] usb 6-1: USB disconnect, device number 15 [ 796.535882][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 797.958281][T12440] hub 1-0:1.0: USB hub found [ 797.966299][T12440] hub 1-0:1.0: 1 port detected [ 799.303424][T12451] program syz.2.1978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 799.394881][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1979'. [ 799.549737][ T5820] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 799.595350][T12433] hub 1-0:1.0: USB hub found [ 799.635831][T12433] hub 1-0:1.0: 1 port detected [ 799.783976][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 800.090575][ T5820] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 800.129518][ T5820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 800.153708][ T5820] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 800.170249][ T5820] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.193735][ T5820] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 800.210520][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.789235][T12466] hub 1-0:1.0: USB hub found [ 800.796002][T12466] hub 1-0:1.0: 1 port detected [ 801.441214][ T5820] usb 6-1: GET_CAPABILITIES returned 0 [ 801.484144][ T5820] usbtmc 6-1:16.0: can't read capabilities [ 801.636910][ T5820] usb 6-1: USB disconnect, device number 16 [ 801.738278][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1988'. [ 803.297449][T12499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1999'. [ 803.423007][T12504] hub 1-0:1.0: USB hub found [ 803.429282][T12504] hub 1-0:1.0: 1 port detected [ 804.248799][T12510] hub 1-0:1.0: USB hub found [ 804.255058][T12510] hub 1-0:1.0: 1 port detected [ 804.667642][T12514] Mass Storage Function, version: 2009/09/11 [ 804.696436][T12514] LUN: removable file: (no medium) [ 804.913947][ T8114] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 805.113901][ T8114] usb 6-1: Using ep0 maxpacket: 8 [ 805.163178][ T8114] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 805.282852][ T8114] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 805.376243][ T8114] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.462137][ T8114] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.619441][ T8114] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.722741][ T8114] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.285752][ T8114] usb 6-1: GET_CAPABILITIES returned 0 [ 806.292176][ T8114] usbtmc 6-1:16.0: can't read capabilities [ 806.446360][T12537] hub 1-0:1.0: USB hub found [ 806.451950][T12537] hub 1-0:1.0: 1 port detected [ 806.773168][ T8114] usb 6-1: USB disconnect, device number 17 [ 807.156776][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2012'. [ 808.944221][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.950598][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.363789][ T5837] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 810.397238][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2025'. [ 810.636251][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 810.704537][ T5837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 810.812956][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 810.915154][ T5837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 811.027057][ T5837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.171493][ T5837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 811.206258][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.500120][ T5837] usb 6-1: GET_CAPABILITIES returned 0 [ 811.515062][ T5837] usbtmc 6-1:16.0: can't read capabilities [ 812.455377][ T9256] usb 6-1: USB disconnect, device number 18 [ 813.745593][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2037'. [ 817.154647][T12651] hub 1-0:1.0: USB hub found [ 817.163794][T12651] hub 1-0:1.0: 1 port detected [ 818.113169][T12655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'. [ 818.549501][T12667] kvm: kvm [12666]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x11e) = 0xbe70a111 [ 818.742777][T12674] hub 1-0:1.0: USB hub found [ 818.748972][T12674] hub 1-0:1.0: 1 port detected [ 820.944665][T12684] hub 1-0:1.0: USB hub found [ 820.951084][T12684] hub 1-0:1.0: 1 port detected [ 821.297158][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 821.808347][T12705] hub 1-0:1.0: USB hub found [ 821.814413][T12705] hub 1-0:1.0: 1 port detected [ 823.970006][T12719] hub 1-0:1.0: USB hub found [ 823.976173][T12719] hub 1-0:1.0: 1 port detected [ 824.590824][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2080'. [ 824.664615][T12726] Bluetooth: MGMT ver 1.22 [ 825.292289][T12744] hub 1-0:1.0: USB hub found [ 825.298846][T12744] hub 1-0:1.0: 1 port detected [ 826.424207][T12745] hub 1-0:1.0: USB hub found [ 826.429227][T12745] hub 1-0:1.0: 1 port detected [ 826.867570][T12753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2091'. [ 827.692213][T12771] hub 1-0:1.0: USB hub found [ 827.697293][T12771] hub 1-0:1.0: 1 port detected [ 827.995347][T12780] hub 1-0:1.0: USB hub found [ 828.001792][T12780] hub 1-0:1.0: 1 port detected [ 828.708714][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2103'. [ 829.268610][T12809] random: crng reseeded on system resumption [ 829.504420][ T5785] Bluetooth: hci0: unexpected event for opcode 0x042c [ 829.918691][T12811] hub 1-0:1.0: USB hub found [ 829.934004][T12811] hub 1-0:1.0: 1 port detected [ 830.994251][T12820] hub 1-0:1.0: USB hub found [ 831.004076][T12820] hub 1-0:1.0: 1 port detected [ 831.790445][T12823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 833.214670][T12851] hub 1-0:1.0: USB hub found [ 833.220978][T12851] hub 1-0:1.0: 1 port detected [ 833.283010][T12852] hub 1-0:1.0: USB hub found [ 833.289163][T12852] hub 1-0:1.0: 1 port detected [ 834.083071][T12861] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2128'. [ 834.931015][T12886] netlink: 592 bytes leftover after parsing attributes in process `syz.5.2139'. [ 835.025247][T12888] hub 1-0:1.0: USB hub found [ 835.031254][T12888] hub 1-0:1.0: 1 port detected [ 835.955372][T12895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2141'. [ 836.089523][T12901] hub 1-0:1.0: USB hub found [ 836.094544][T12901] hub 1-0:1.0: 1 port detected [ 837.546580][T12913] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2149'. [ 838.203766][T12929] hub 1-0:1.0: USB hub found [ 838.209565][T12929] hub 1-0:1.0: 1 port detected [ 839.003240][T12935] hub 1-0:1.0: USB hub found [ 839.009234][T12935] hub 1-0:1.0: 1 port detected [ 839.652423][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2157'. [ 842.074664][T12951] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2162'. [ 843.570106][T12970] hub 1-0:1.0: USB hub found [ 843.575279][T12970] hub 1-0:1.0: 1 port detected [ 843.870704][T12974] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.2168' sets config #0 [ 844.216446][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2170'. [ 845.025645][T12985] netlink: 592 bytes leftover after parsing attributes in process `syz.0.2172'. [ 846.652941][T13014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2183'. [ 846.686405][T13013] netlink: 592 bytes leftover after parsing attributes in process `syz.5.2184'. [ 846.780907][T13015] hub 1-0:1.0: USB hub found [ 846.846418][T13015] hub 1-0:1.0: 1 port detected [ 847.660259][T13030] syz.3.2188 (13030) used greatest stack depth: 17608 bytes left [ 847.713955][T13034] hub 1-0:1.0: USB hub found [ 847.740186][T13034] hub 1-0:1.0: 1 port detected [ 847.855005][T13038] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2193'. [ 848.253991][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2194'. [ 849.101604][T13060] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 850.304763][T13076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 850.503889][ T973] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 850.725939][ T973] usb 6-1: config 0 has no interfaces? [ 850.735061][ T973] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 850.754112][T13080] hub 1-0:1.0: USB hub found [ 850.768675][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.781163][T13080] hub 1-0:1.0: 1 port detected [ 850.798605][ T973] usb 6-1: config 0 descriptor?? [ 851.040822][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.071866][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.100887][ T973] usb 6-1: USB disconnect, device number 19 [ 851.584688][T13096] hub 1-0:1.0: USB hub found [ 851.613886][T13096] hub 1-0:1.0: 1 port detected [ 852.069638][ T973] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 852.242066][T13104] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 852.304135][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 852.388860][ T973] usb 6-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 852.505733][ T973] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 853.055149][ T973] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.066794][ T973] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.078561][ T973] usb 6-1: config 0 interface 0 has no altsetting 0 [ 853.190140][ T973] usb 6-1: string descriptor 0 read error: -71 [ 853.205331][ T973] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 853.234814][ T973] usb 6-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 853.331463][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 853.368718][ T973] usb 6-1: config 0 descriptor?? [ 853.375257][ T973] usb 6-1: can't set config #0, error -71 [ 853.390813][ T973] usb 6-1: USB disconnect, device number 20 [ 854.213193][T13131] hub 1-0:1.0: USB hub found [ 854.241162][T13131] hub 1-0:1.0: 1 port detected [ 854.852308][T13141] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 856.054741][T13149] hub 1-0:1.0: USB hub found [ 856.060553][T13149] hub 1-0:1.0: 1 port detected [ 856.877238][T13150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2230'. [ 857.384338][ T8114] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 857.759381][ T8114] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 857.770947][ T8114] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 857.780698][ T8114] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.802181][ T8114] usb 4-1: config 0 descriptor?? [ 857.886406][T13174] hub 1-0:1.0: USB hub found [ 857.893774][T13174] hub 1-0:1.0: 1 port detected [ 857.955241][T13157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 858.717294][ T8114] hid (null): bogus close delimiter [ 858.722610][ T8114] hid (null): unknown global tag 0xc [ 858.734766][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2243'. [ 858.737167][ T8114] hid (null): global environment stack overflow [ 858.758842][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.777698][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.793996][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.813028][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.840679][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.887249][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 858.934677][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x7 [ 858.998395][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 859.030594][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 859.059185][ T8114] wacom 0003:056A:5000.0003: unknown main item tag 0x0 [ 859.089348][ T8114] wacom 0003:056A:5000.0003: bogus close delimiter [ 859.113109][ T8114] wacom 0003:056A:5000.0003: item 0 0 2 10 parsing failed [ 859.139142][ T8114] wacom 0003:056A:5000.0003: parse failed [ 859.152876][ T8114] wacom: probe of 0003:056A:5000.0003 failed with error -22 [ 859.204175][ T8114] usb 4-1: USB disconnect, device number 49 [ 859.435777][T13192] hub 1-0:1.0: USB hub found [ 859.441620][T13192] hub 1-0:1.0: 1 port detected [ 860.579816][T13207] hub 1-0:1.0: USB hub found [ 860.585821][T13207] hub 1-0:1.0: 1 port detected [ 861.544122][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2255'. [ 861.591304][T13218] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 862.248549][T13232] hub 1-0:1.0: USB hub found [ 862.254571][T13232] hub 1-0:1.0: 1 port detected [ 864.951991][T13243] hub 1-0:1.0: USB hub found [ 865.072690][T13243] hub 1-0:1.0: 1 port detected [ 865.396958][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 865.407953][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 865.417154][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 865.429327][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 865.440939][ T5785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 865.451491][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 865.668194][T13246] wlan0 speed is unknown, defaulting to 1000 [ 865.863366][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.126843][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.318498][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.426361][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2270'. [ 866.659961][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.813857][T13246] chnl_net:caif_netlink_parms(): no params data found [ 867.231277][T13278] hub 1-0:1.0: USB hub found [ 867.237356][T13278] hub 1-0:1.0: 1 port detected [ 867.535355][ T5084] Bluetooth: hci4: command tx timeout [ 867.810942][T13246] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.847254][T13246] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.868296][T13246] bridge_slave_0: entered allmulticast mode [ 867.890404][T13246] bridge_slave_0: entered promiscuous mode [ 868.005357][T13246] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.044987][T13246] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.074725][T13246] bridge_slave_1: entered allmulticast mode [ 868.099542][T13246] bridge_slave_1: entered promiscuous mode [ 868.255887][T13246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.306794][T13246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.358992][T13296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 868.731340][T13299] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 869.342070][T13301] hub 1-0:1.0: USB hub found [ 869.347400][T13301] hub 1-0:1.0: 1 port detected [ 869.643628][ T5084] Bluetooth: hci4: command tx timeout [ 869.727049][T13246] team0: Port device team_slave_0 added [ 869.764058][T13246] team0: Port device team_slave_1 added [ 870.384118][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.410581][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.580497][T13246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.605812][T13312] hub 1-0:1.0: USB hub found [ 870.614151][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.643211][T13312] hub 1-0:1.0: 1 port detected [ 870.655657][T13246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.787842][T13246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.806890][T13246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.873656][T13246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.204689][T13246] hsr_slave_0: entered promiscuous mode [ 871.224073][T13246] hsr_slave_1: entered promiscuous mode [ 871.251775][T13246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.283810][T13246] Cannot create hsr debugfs directory [ 871.653735][ T5084] Bluetooth: hci4: command tx timeout [ 872.024155][T13334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2291'. [ 872.161896][T13339] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 873.733981][ T5084] Bluetooth: hci4: command tx timeout [ 873.805652][T13364] hub 1-0:1.0: USB hub found [ 873.899472][T13364] hub 1-0:1.0: 1 port detected [ 873.980561][T13368] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 874.612074][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2300'. [ 874.865337][ T144] hsr_slave_0: left promiscuous mode [ 874.900613][ T144] hsr_slave_1: left promiscuous mode [ 874.907223][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.952501][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.990842][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.021204][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.069162][ T144] bridge_slave_1: left allmulticast mode [ 875.077758][ T144] bridge_slave_1: left promiscuous mode [ 875.083654][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.338478][ T144] bridge_slave_0: left allmulticast mode [ 875.344368][ T144] bridge_slave_0: left promiscuous mode [ 875.350272][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.395948][ T144] veth1_macvtap: left promiscuous mode [ 875.401610][ T144] veth0_macvtap: left promiscuous mode [ 875.414143][ T144] veth1_vlan: left promiscuous mode [ 875.419577][ T144] veth0_vlan: left promiscuous mode [ 875.585080][T13376] hub 1-0:1.0: USB hub found [ 875.611859][T13376] hub 1-0:1.0: 1 port detected [ 877.922898][T13397] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 878.495775][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2309'. [ 879.077665][ T144] team0 (unregistering): Port device team_slave_1 removed [ 879.184513][T13405] hub 1-0:1.0: USB hub found [ 879.193833][T13405] hub 1-0:1.0: 1 port detected [ 879.606488][ T144] team0 (unregistering): Port device team_slave_0 removed [ 879.927694][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.090924][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.454049][ T9256] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 880.662815][ T144] bond0 (unregistering): Released all slaves [ 880.689032][ T9256] usb 4-1: Using ep0 maxpacket: 8 [ 880.721337][ T9256] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 880.739203][ T9256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 880.769294][ T9256] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 880.781440][ T9256] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 880.818950][ T9256] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 880.829597][ T9256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.066363][ T9256] usb 4-1: GET_CAPABILITIES returned 0 [ 881.071954][ T9256] usbtmc 4-1:16.0: can't read capabilities [ 881.326874][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 881.376196][T13246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 881.391578][T13246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 881.414049][T13410] usbtmc 4-1:16.0: Unable to send data, error -71 [ 881.481202][ T5837] usb 4-1: USB disconnect, device number 50 [ 881.504278][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2319'. [ 881.588658][T13246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 881.599533][T13246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 881.823516][ T144] IPVS: stop unused estimator thread 0... [ 881.858353][T13431] hub 1-0:1.0: USB hub found [ 881.863313][T13431] hub 1-0:1.0: 1 port detected [ 882.047251][T13246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.119560][T13246] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.178532][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.185789][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.222118][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.229422][ T8126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.685859][T13455] hub 1-0:1.0: USB hub found [ 883.690920][T13455] hub 1-0:1.0: 1 port detected [ 883.712042][T13246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.877746][T13246] veth0_vlan: entered promiscuous mode [ 884.010306][T13246] veth1_vlan: entered promiscuous mode [ 884.130556][T13246] veth0_macvtap: entered promiscuous mode [ 884.151855][T13246] veth1_macvtap: entered promiscuous mode [ 884.233510][T13460] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 884.610724][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.797739][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.828871][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.870131][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.913691][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.947635][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.975677][T13246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.027337][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.054462][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.078106][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.107488][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.123677][T13246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.153646][T13246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.175817][T13246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.208058][T13246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.239267][T13246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.253779][T13246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.285970][T13246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.472607][T13469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2327'. [ 885.511250][ T2906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.550963][ T2906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.720723][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.795000][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.079850][T13485] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 887.866634][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2337'. [ 888.557809][T13511] hub 1-0:1.0: USB hub found [ 888.562802][T13511] hub 1-0:1.0: 1 port detected [ 889.454541][T13518] hub 1-0:1.0: USB hub found [ 889.463734][T13518] hub 1-0:1.0: 1 port detected [ 890.427364][T13529] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 893.156335][T13571] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 893.185290][T13568] hub 1-0:1.0: USB hub found [ 893.193723][T13568] hub 1-0:1.0: 1 port detected [ 894.612428][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2364'. [ 894.702185][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 894.712300][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 894.722589][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 894.734930][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 894.742711][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 894.750433][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 894.846492][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.900505][T13582] wlan0 speed is unknown, defaulting to 1000 [ 894.961236][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.024808][T13589] hub 1-0:1.0: USB hub found [ 895.037414][T13589] hub 1-0:1.0: 1 port detected [ 895.127680][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.278143][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.824728][T13582] chnl_net:caif_netlink_parms(): no params data found [ 897.007784][ T5785] Bluetooth: hci1: command tx timeout [ 898.694010][T13582] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.723430][T13582] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.753674][T13582] bridge_slave_0: entered allmulticast mode [ 898.775220][T13582] bridge_slave_0: entered promiscuous mode [ 898.854464][T13582] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.862216][T13582] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.885556][T13582] bridge_slave_1: entered allmulticast mode [ 898.923944][T13582] bridge_slave_1: entered promiscuous mode [ 899.091177][T13582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.094448][ T5785] Bluetooth: hci1: command tx timeout [ 899.381318][T13582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.504712][T13654] hub 1-0:1.0: USB hub found [ 899.513789][T13654] hub 1-0:1.0: 1 port detected [ 900.158623][T13657] hub 1-0:1.0: USB hub found [ 900.264137][T13657] hub 1-0:1.0: 1 port detected [ 900.509685][T13582] team0: Port device team_slave_0 added [ 900.558115][T13582] team0: Port device team_slave_1 added [ 901.193803][ T5785] Bluetooth: hci1: command tx timeout [ 901.776363][T13582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.795050][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.843405][T13582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.866792][T13582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.883686][T13582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.937568][T13582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.221376][T13582] hsr_slave_0: entered promiscuous mode [ 902.263180][T13582] hsr_slave_1: entered promiscuous mode [ 902.348638][ T49] hsr_slave_0: left promiscuous mode [ 902.374213][ T49] hsr_slave_1: left promiscuous mode [ 902.380433][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.402735][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.417161][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.443705][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.464366][ T49] bridge_slave_1: left allmulticast mode [ 902.470086][ T49] bridge_slave_1: left promiscuous mode [ 902.487473][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.587606][ T49] bridge_slave_0: left allmulticast mode [ 902.606789][ T49] bridge_slave_0: left promiscuous mode [ 902.612631][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.792260][ T49] veth1_macvtap: left promiscuous mode [ 902.798047][ T49] veth0_macvtap: left promiscuous mode [ 903.130280][ T49] veth1_vlan: left promiscuous mode [ 903.206212][ T49] veth0_vlan: left promiscuous mode [ 903.359450][ T5785] Bluetooth: hci1: command tx timeout [ 903.916451][T13694] hub 1-0:1.0: USB hub found [ 903.954019][T13694] hub 1-0:1.0: 1 port detected [ 905.494758][ T49] team0 (unregistering): Port device team_slave_1 removed [ 905.621715][ T49] team0 (unregistering): Port device team_slave_0 removed [ 905.695281][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 905.792926][T13707] hub 1-0:1.0: USB hub found [ 905.805089][T13707] hub 1-0:1.0: 1 port detected [ 905.918735][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.433040][ T49] bond0 (unregistering): Released all slaves [ 910.237061][T13751] hub 1-0:1.0: USB hub found [ 910.243029][T13751] hub 1-0:1.0: 1 port detected [ 911.979234][T13582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 912.011489][T13582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 912.037492][T13582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 912.057319][T13582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 912.295825][T13768] hub 1-0:1.0: USB hub found [ 912.300808][T13768] hub 1-0:1.0: 1 port detected [ 912.968565][T13582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.082319][T13582] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.215290][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.222517][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.318549][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.325824][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.805485][T13789] hub 1-0:1.0: USB hub found [ 914.811504][T13789] hub 1-0:1.0: 1 port detected [ 916.577924][T13582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.707339][T13582] veth0_vlan: entered promiscuous mode [ 916.762766][T13582] veth1_vlan: entered promiscuous mode [ 916.851188][T13582] veth0_macvtap: entered promiscuous mode [ 916.889756][T13582] veth1_macvtap: entered promiscuous mode [ 916.992360][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.029909][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.039896][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.051751][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.061807][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.072374][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.084109][T13582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.510442][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.747636][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.770764][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.796387][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.829609][T13582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.858143][T13582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.901732][T13582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.957229][T13582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.993915][T13582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.997108][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 918.013468][T13582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.049883][T13582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.378938][T13828] hub 1-0:1.0: USB hub found [ 918.384233][T13828] hub 1-0:1.0: 1 port detected [ 918.519438][ T8] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 918.765393][ T8] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 918.976964][ T8] usb 3-1: config 220 has no interface number 2 [ 919.010699][ T8] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 919.078427][ T8] usb 3-1: config 220 interface 0 has no altsetting 0 [ 919.120655][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.130661][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.155973][ T8] usb 3-1: config 220 interface 76 has no altsetting 0 [ 919.184502][ T8] usb 3-1: config 220 interface 1 has no altsetting 0 [ 919.203703][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 919.218439][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.246348][ T8] usb 3-1: Product: syz [ 919.255370][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.257227][ T8] usb 3-1: Manufacturer: syz [ 919.263240][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.312925][ T8] usb 3-1: SerialNumber: syz [ 919.556700][ T8] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 920.349105][ T8] usb 3-1: No valid video chain found. [ 920.356256][ T8] usb 3-1: selecting invalid altsetting 0 [ 920.424711][ T8] usb 3-1: selecting invalid altsetting 0 [ 920.430543][ T8] usbtest: probe of 3-1:220.1 failed with error -22 [ 920.536579][ T8] usb 3-1: USB disconnect, device number 46 [ 922.151432][T13865] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 923.277130][T13872] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2436'. [ 923.447617][T13877] hub 1-0:1.0: USB hub found [ 923.513753][T13877] hub 1-0:1.0: 1 port detected [ 923.643174][T13879] hub 1-0:1.0: USB hub found [ 923.676148][T13879] hub 1-0:1.0: 1 port detected [ 923.676465][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 923.693365][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 923.703789][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 923.716188][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 923.725339][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 923.732861][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 924.111301][ T8126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.753452][T13883] wlan0 speed is unknown, defaulting to 1000 [ 924.907745][ T8126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.034886][ T8126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.287634][ T8126] team0: Port device netdevsim0 removed [ 925.331056][ T8126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.656333][T13905] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 925.819364][ T5785] Bluetooth: hci2: command tx timeout [ 926.129501][T13883] chnl_net:caif_netlink_parms(): no params data found [ 926.351715][T13916] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 927.482323][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2447'. [ 928.794924][ T5785] Bluetooth: hci2: command tx timeout [ 929.215679][T13883] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.252021][T13883] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.296578][T13883] bridge_slave_0: entered allmulticast mode [ 929.305280][T13883] bridge_slave_0: entered promiscuous mode [ 929.315792][T13883] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.323196][T13883] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.331945][T13883] bridge_slave_1: entered allmulticast mode [ 929.353167][T13883] bridge_slave_1: entered promiscuous mode [ 929.672866][T13883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.916503][T13883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.113679][T13962] hub 1-0:1.0: USB hub found [ 930.119806][T13962] hub 1-0:1.0: 1 port detected [ 930.857594][ T5785] Bluetooth: hci2: command tx timeout [ 930.882493][T13966] hub 1-0:1.0: USB hub found [ 930.941028][T13966] hub 1-0:1.0: 1 port detected [ 931.144471][T13883] team0: Port device team_slave_0 added [ 931.224385][T13974] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 931.819434][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.837817][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.037963][T13883] team0: Port device team_slave_1 added [ 932.106678][T13980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2456'. [ 932.629392][T13883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.750674][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.092222][ T5785] Bluetooth: hci2: command tx timeout [ 933.140927][T13883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.210995][T13883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.238497][T13883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 933.326669][T13883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.762126][T13883] hsr_slave_0: entered promiscuous mode [ 934.884050][T14008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'. [ 935.051488][T13883] hsr_slave_1: entered promiscuous mode [ 935.852226][T14016] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 935.868565][T14014] hub 1-0:1.0: USB hub found [ 935.874585][T14014] hub 1-0:1.0: 1 port detected [ 936.061139][T13883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.110522][T13883] Cannot create hsr debugfs directory [ 936.511200][ T8126] hsr_slave_0: left promiscuous mode [ 936.528469][ T8126] hsr_slave_1: left promiscuous mode [ 936.641581][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.813481][ T8126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.158168][ T8126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.211220][ T8126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.229950][ T8126] bridge_slave_1: left allmulticast mode [ 937.239213][ T8126] bridge_slave_1: left promiscuous mode [ 937.247601][ T8126] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.276790][ T8126] bridge_slave_0: left allmulticast mode [ 937.282648][ T8126] bridge_slave_0: left promiscuous mode [ 937.308684][ T8126] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.376296][ T8126] veth1_macvtap: left promiscuous mode [ 937.381948][ T8126] veth0_macvtap: left promiscuous mode [ 937.404065][ T8126] veth1_vlan: left promiscuous mode [ 937.418564][ T8126] veth0_vlan: left promiscuous mode [ 938.749007][T14044] hub 1-0:1.0: USB hub found [ 938.767305][T14044] hub 1-0:1.0: 1 port detected [ 939.567904][T14049] syz.5.2471: attempt to access beyond end of device [ 939.567904][T14049] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 941.045178][T14063] hub 1-0:1.0: USB hub found [ 941.050410][T14063] hub 1-0:1.0: 1 port detected [ 941.206393][T14065] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 941.614130][T14068] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2475'. [ 942.125487][ T8126] team0 (unregistering): Port device team_slave_1 removed [ 942.269073][ T8126] team0 (unregistering): Port device team_slave_0 removed [ 942.442027][ T8126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.702310][T14090] hub 1-0:1.0: USB hub found [ 943.707870][T14090] hub 1-0:1.0: 1 port detected [ 944.333126][T14093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2484'. [ 944.617865][ T8126] bond0 (unregistering): Released all slaves [ 944.753135][T14097] hub 1-0:1.0: USB hub found [ 944.777556][T14097] hub 1-0:1.0: 1 port detected [ 945.109382][T14100] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 948.714659][T14130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2492'. [ 949.266544][T14139] hub 1-0:1.0: USB hub found [ 949.271554][T14139] hub 1-0:1.0: 1 port detected [ 949.837378][T13883] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 949.892390][T13883] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 949.912073][T13883] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 949.929156][T14142] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 949.948668][T13883] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 950.354878][T13883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.429372][T13883] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.463207][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.470538][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.519458][ T8126] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.526737][ T8126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.665859][T13883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.571946][T13883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.754904][T14182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2503'. [ 953.797302][T13883] veth0_vlan: entered promiscuous mode [ 954.002637][T13883] veth1_vlan: entered promiscuous mode [ 954.151364][T13883] veth0_macvtap: entered promiscuous mode [ 954.221163][T13883] veth1_macvtap: entered promiscuous mode [ 954.341244][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.389112][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.455945][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.487025][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.497037][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.507763][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.520395][T13883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.532478][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.561013][T14193] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 954.574920][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.593467][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.613691][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.624971][T13883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.635935][T13883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.648186][T13883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.673733][T13883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.682662][T13883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.693838][T13883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.702715][T13883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.934262][T14196] hub 1-0:1.0: USB hub found [ 954.939632][T14196] hub 1-0:1.0: 1 port detected [ 955.175726][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.253817][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.393757][T13963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.403604][T13963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.263337][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 959.772674][T14240] hub 1-0:1.0: USB hub found [ 959.795264][T14240] hub 1-0:1.0: 1 port detected [ 960.194251][T14249] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 962.996487][T14280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2522'. [ 963.449451][T14287] hub 1-0:1.0: USB hub found [ 963.456515][T14287] hub 1-0:1.0: 1 port detected [ 967.564868][T14309] hub 1-0:1.0: USB hub found [ 967.635096][T14309] hub 1-0:1.0: 1 port detected [ 967.901118][T14312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'. [ 968.746351][T14326] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 973.292216][T14345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2541'. [ 973.985201][T14357] hub 1-0:1.0: USB hub found [ 973.991044][T14357] hub 1-0:1.0: 1 port detected [ 975.563955][T14360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.637304][T14367] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 976.928021][ T2906] Bluetooth: hci3: Frame reassembly failed (-84) [ 977.475864][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2552'. [ 978.558046][T14391] hub 1-0:1.0: USB hub found [ 978.573987][T14391] hub 1-0:1.0: 1 port detected [ 979.300583][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 980.853877][T14405] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 983.808702][T14420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2563'. [ 984.404461][T14430] hub 1-0:1.0: USB hub found [ 984.413677][T14430] hub 1-0:1.0: 1 port detected [ 985.683679][ T9256] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 985.761294][T14437] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 985.904620][ T9256] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 985.924993][ T9256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.933188][ T9256] usb 4-1: Product: syz [ 985.940584][ T9256] usb 4-1: Manufacturer: syz [ 985.951577][ T9256] usb 4-1: SerialNumber: syz [ 986.271637][ T9256] rtl8150 4-1:1.0: couldn't reset the device [ 986.303917][ T9256] rtl8150: probe of 4-1:1.0 failed with error -5 [ 986.415016][ T9256] usb 4-1: USB disconnect, device number 51 [ 986.459512][T14442] hub 1-0:1.0: USB hub found [ 986.465241][T14442] hub 1-0:1.0: 1 port detected [ 987.218691][T14453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2574'. [ 987.977618][T14462] hub 1-0:1.0: USB hub found [ 987.983905][T14462] hub 1-0:1.0: 1 port detected [ 988.845673][T14466] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 988.913126][T14468] gretap1: entered promiscuous mode [ 990.217670][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 990.237166][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2583'. [ 990.338667][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2584'. [ 990.712333][T14493] hub 1-0:1.0: USB hub found [ 990.718517][T14493] hub 1-0:1.0: 1 port detected [ 992.024262][T14505] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 992.374534][T14507] hub 1-0:1.0: USB hub found [ 992.383728][T14507] hub 1-0:1.0: 1 port detected [ 993.269786][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.347871][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.677078][T14518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2596'. [ 994.115170][T14522] loop8: detected capacity change from 0 to 7 [ 994.161829][T14522] Dev loop8: unable to read RDB block 7 [ 994.238143][T14522] loop8: unable to read partition table [ 994.272241][T14522] loop8: partition table beyond EOD, truncated [ 994.293652][T14522] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 994.608930][T14530] hub 1-0:1.0: USB hub found [ 994.614956][T14530] hub 1-0:1.0: 1 port detected [ 995.465051][T14540] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 997.467321][T14546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 997.847855][T14552] hub 1-0:1.0: USB hub found [ 997.863888][T14552] hub 1-0:1.0: 1 port detected [ 998.673986][T14559] netlink: 'syz.5.2608': attribute type 1 has an invalid length. [ 998.698008][T14559] netlink: 'syz.5.2608': attribute type 2 has an invalid length. [ 999.553387][T14574] hub 1-0:1.0: USB hub found [ 999.559722][T14574] hub 1-0:1.0: 1 port detected [ 1000.470904][T14577] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1002.707607][T14591] hub 1-0:1.0: USB hub found [ 1002.713836][T14591] hub 1-0:1.0: 1 port detected [ 1007.561494][T14613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2614'. [ 1007.717794][T14614] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1008.309318][T14621] hub 1-0:1.0: USB hub found [ 1008.315387][T14621] hub 1-0:1.0: 1 port detected [ 1013.731341][T14646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2635'. [ 1016.844415][T14659] Mass Storage Function, version: 2009/09/11 [ 1016.861892][T14659] LUN: removable file: (no medium) [ 1016.903003][T14659] mass_storage.usb0/lun.0: unable to open backing file: f [ 1017.349879][T14665] hub 1-0:1.0: USB hub found [ 1017.391761][T14665] hub 1-0:1.0: 1 port detected [ 1018.034963][T14673] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1021.030716][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.438270][T14701] mass_storage.usb0/lun.0: unable to open backing file: f [ 1022.926451][T14708] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1023.286786][T14715] hub 1-0:1.0: USB hub found [ 1023.291820][T14715] hub 1-0:1.0: 1 port detected [ 1027.958885][T14739] mass_storage.usb0/lun.0: unable to open backing file: f [ 1027.992573][T14741] (null): rxe_set_mtu: Set mtu to 4096 [ 1027.999948][T14741] lo speed is unknown, defaulting to 1000 [ 1028.009380][T14741] lo speed is unknown, defaulting to 1000 [ 1028.016276][T14741] lo speed is unknown, defaulting to 1000 [ 1028.193049][T14741] infiniband syz1: set active [ 1028.198302][T14741] infiniband syz1: added lo [ 1028.211666][ T8114] lo speed is unknown, defaulting to 1000 [ 1028.257018][T14741] RDS/IB: syz1: added [ 1028.262725][T14741] smc: adding ib device syz1 with port count 1 [ 1028.269700][T14741] smc: ib device syz1 port 1 has pnetid [ 1028.279974][T14741] lo speed is unknown, defaulting to 1000 [ 1028.463942][T14741] lo speed is unknown, defaulting to 1000 [ 1028.498639][T14747] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1028.649317][T14741] lo speed is unknown, defaulting to 1000 [ 1028.680189][ T5613] lo speed is unknown, defaulting to 1000 [ 1028.847689][T14741] lo speed is unknown, defaulting to 1000 [ 1029.137075][T14754] hub 1-0:1.0: USB hub found [ 1029.142084][T14754] hub 1-0:1.0: 1 port detected [ 1030.832698][T14759] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1030.839727][T14759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.852651][T14759] vhci_hcd vhci_hcd.0: Device attached [ 1030.859222][T14761] vhci_hcd: connection closed [ 1030.865651][T13963] vhci_hcd: stop threads [ 1030.918185][T13963] vhci_hcd: release socket [ 1030.922761][T13963] vhci_hcd: disconnect device [ 1034.365315][T14782] hub 1-0:1.0: USB hub found [ 1034.399886][T14782] hub 1-0:1.0: 1 port detected [ 1034.550004][T14785] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1036.070376][T14795] hub 1-0:1.0: USB hub found [ 1036.075489][T14795] hub 1-0:1.0: 1 port detected [ 1036.109725][T14798] mass_storage.usb0/lun.0: unable to open backing file: f [ 1036.267043][T14802] hub 1-0:1.0: USB hub found [ 1036.374478][T14802] hub 1-0:1.0: 1 port detected [ 1037.443200][T14822] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1039.674456][T14831] hub 1-0:1.0: USB hub found [ 1039.679474][T14831] hub 1-0:1.0: 1 port detected [ 1041.399726][T14840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2691'. [ 1042.380467][T14851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2694'. [ 1043.572693][T14854] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1046.323760][T14868] hub 1-0:1.0: USB hub found [ 1046.328792][T14868] hub 1-0:1.0: 1 port detected [ 1047.544592][T14881] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2705'. [ 1048.586390][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 1048.609935][T14880] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1051.916997][T14899] hub 1-0:1.0: USB hub found [ 1051.922608][T14899] hub 1-0:1.0: 1 port detected [ 1052.612308][T14904] hub 1-0:1.0: USB hub found [ 1052.617472][T14904] hub 1-0:1.0: 1 port detected [ 1053.880527][T14922] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1053.924043][ T5818] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1054.585115][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 1054.606124][ T5818] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1054.724287][T14925] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2717'. [ 1055.774364][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.780805][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.105749][ T5818] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.642913][ T5818] usb 3-1: config 135 has no interface number 0 [ 1056.652993][ T5818] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1056.673957][ T5818] usb 3-1: string descriptor 0 read error: -71 [ 1056.680342][ T5818] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1056.703869][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.720714][ T5818] usb 3-1: can't set config #135, error -71 [ 1056.734086][ T5818] usb 3-1: USB disconnect, device number 47 [ 1059.280929][T14949] hub 1-0:1.0: USB hub found [ 1059.286143][T14949] hub 1-0:1.0: 1 port detected [ 1060.202056][T14956] hub 1-0:1.0: USB hub found [ 1060.207492][T14956] hub 1-0:1.0: 1 port detected [ 1060.635916][T14960] [ 1060.638331][T14960] ====================================================== [ 1060.645394][T14960] WARNING: possible circular locking dependency detected [ 1060.652490][T14960] syzkaller #0 Not tainted [ 1060.656952][T14960] ------------------------------------------------------ [ 1060.664010][T14960] syz.0.2728/14960 is trying to acquire lock: [ 1060.670113][T14960] ffff888148cc29e0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_depend_item_unlocked+0x157/0x430 [ 1060.681726][T14960] [ 1060.681726][T14960] but task is already holding lock: [ 1060.689135][T14960] ffff8880572f7920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1060.698461][T14960] [ 1060.698461][T14960] which lock already depends on the new lock. [ 1060.698461][T14960] [ 1060.708907][T14960] [ 1060.708907][T14960] the existing dependency chain (in reverse order) is: [ 1060.717960][T14960] [ 1060.717960][T14960] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1060.725661][T14960] __mutex_lock+0x135/0xc80 [ 1060.730785][T14960] tcm_set_name+0x2a/0x90 [ 1060.735698][T14960] function_make+0x199/0x350 [ 1060.740886][T14960] configfs_mkdir+0x515/0x9e0 [ 1060.746123][T14960] vfs_mkdir+0x2a5/0x470 [ 1060.750953][T14960] do_mkdirat+0x1dc/0x450 [ 1060.755825][T14960] __x64_sys_mkdir+0x6e/0x80 [ 1060.760989][T14960] do_syscall_64+0x55/0xb0 [ 1060.765955][T14960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.772499][T14960] [ 1060.772499][T14960] -> #1 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 1060.780799][T14960] __mutex_lock+0x135/0xc80 [ 1060.785863][T14960] configfs_rmdir+0x63c/0x980 [ 1060.791087][T14960] vfs_rmdir+0x352/0x4b0 [ 1060.795879][T14960] do_rmdir+0x29f/0x590 [ 1060.800584][T14960] __x64_sys_rmdir+0x49/0x50 [ 1060.805724][T14960] do_syscall_64+0x55/0xb0 [ 1060.810698][T14960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.817144][T14960] [ 1060.817144][T14960] -> #0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 1060.825864][T14960] __lock_acquire+0x37ef/0x7d80 [ 1060.831278][T14960] lock_acquire+0x19e/0x420 [ 1060.836327][T14960] down_write+0x97/0x200 [ 1060.841124][T14960] configfs_depend_item_unlocked+0x157/0x430 [ 1060.847659][T14960] usbg_make_tpg+0x1f7/0x580 [ 1060.852800][T14960] target_fabric_make_tpg+0xa4/0x6d0 [ 1060.858676][T14960] configfs_mkdir+0x515/0x9e0 [ 1060.863906][T14960] vfs_mkdir+0x2a5/0x470 [ 1060.868695][T14960] do_mkdirat+0x1dc/0x450 [ 1060.873582][T14960] __x64_sys_mkdir+0x6e/0x80 [ 1060.878716][T14960] do_syscall_64+0x55/0xb0 [ 1060.883676][T14960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1060.890156][T14960] [ 1060.890156][T14960] other info that might help us debug this: [ 1060.890156][T14960] [ 1060.900409][T14960] Chain exists of: [ 1060.900409][T14960] &sb->s_type->i_mutex_key#22 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1060.900409][T14960] [ 1060.915575][T14960] Possible unsafe locking scenario: [ 1060.915575][T14960] [ 1060.923049][T14960] CPU0 CPU1 [ 1060.928437][T14960] ---- ---- [ 1060.933822][T14960] lock(&opts->dep_lock); [ 1060.938266][T14960] lock(gadget_subsys.su_mutex); [ 1060.945835][T14960] lock(&opts->dep_lock); [ 1060.952812][T14960] lock(&sb->s_type->i_mutex_key#22); [ 1060.958302][T14960] [ 1060.958302][T14960] *** DEADLOCK *** [ 1060.958302][T14960] [ 1060.966466][T14960] 5 locks held by syz.0.2728/14960: [ 1060.971682][T14960] #0: ffff8881426d2418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1060.981090][T14960] #1: ffff88805e0b95a0 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1060.991948][T14960] #2: ffffffff8db2b450 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_mkdir+0x4b9/0x9e0 [ 1061.001835][T14960] #3: ffffffff8de58aa8 (tpg_instances_lock){+.+.}-{3:3}, at: usbg_make_tpg+0xf8/0x580 [ 1061.011535][T14960] #4: ffff8880572f7920 (&opts->dep_lock){+.+.}-{3:3}, at: usbg_make_tpg+0x148/0x580 [ 1061.021063][T14960] [ 1061.021063][T14960] stack backtrace: [ 1061.026968][T14960] CPU: 1 PID: 14960 Comm: syz.0.2728 Not tainted syzkaller #0 [ 1061.034452][T14960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1061.044531][T14960] Call Trace: [ 1061.047836][T14960] [ 1061.050797][T14960] dump_stack_lvl+0x18c/0x250 [ 1061.055510][T14960] ? load_image+0x420/0x420 [ 1061.060084][T14960] ? show_regs_print_info+0x20/0x20 [ 1061.065320][T14960] ? print_circular_bug+0x12b/0x1a0 [ 1061.070554][T14960] check_noncircular+0x2fc/0x400 [ 1061.075526][T14960] ? look_up_lock_class+0x75/0x140 [ 1061.080674][T14960] ? print_deadlock_bug+0x5d0/0x5d0 [ 1061.085920][T14960] ? lockdep_lock+0xf5/0x230 [ 1061.090571][T14960] ? __lock_acquire+0x357f/0x7d80 [ 1061.095630][T14960] ? _find_first_zero_bit+0xd6/0x100 [ 1061.101009][T14960] __lock_acquire+0x37ef/0x7d80 [ 1061.105899][T14960] ? is_bpf_text_address+0x28f/0x2a0 [ 1061.111242][T14960] ? verify_lock_unused+0x140/0x140 [ 1061.116481][T14960] lock_acquire+0x19e/0x420 [ 1061.121015][T14960] ? configfs_depend_item_unlocked+0x157/0x430 [ 1061.127202][T14960] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1061.133388][T14960] ? __might_sleep+0xe0/0xe0 [ 1061.138014][T14960] ? rcu_is_watching+0x15/0xb0 [ 1061.142810][T14960] ? read_lock_is_recursive+0x20/0x20 [ 1061.148244][T14960] ? trace_contention_end+0x39/0xe0 [ 1061.153478][T14960] ? __mutex_lock+0x30d/0xc80 [ 1061.158197][T14960] ? do_syscall_64+0x55/0xb0 [ 1061.162811][T14960] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.168913][T14960] down_write+0x97/0x200 [ 1061.173198][T14960] ? configfs_depend_item_unlocked+0x157/0x430 [ 1061.179387][T14960] ? down_read_killable+0x340/0x340 [ 1061.184621][T14960] configfs_depend_item_unlocked+0x157/0x430 [ 1061.190635][T14960] usbg_make_tpg+0x1f7/0x580 [ 1061.195268][T14960] ? usbg_drop_tport+0x20/0x20 [ 1061.200065][T14960] ? vscnprintf+0x80/0x80 [ 1061.204430][T14960] target_fabric_make_tpg+0xa4/0x6d0 [ 1061.209746][T14960] ? target_fabric_release_wwn+0xb0/0xb0 [ 1061.215417][T14960] configfs_mkdir+0x515/0x9e0 [ 1061.220128][T14960] vfs_mkdir+0x2a5/0x470 [ 1061.224403][T14960] do_mkdirat+0x1dc/0x450 [ 1061.228798][T14960] ? vfs_mkdir+0x470/0x470 [ 1061.233242][T14960] ? getname_flags+0x20a/0x500 [ 1061.238043][T14960] __x64_sys_mkdir+0x6e/0x80 [ 1061.242657][T14960] do_syscall_64+0x55/0xb0 [ 1061.247100][T14960] ? clear_bhb_loop+0x40/0x90 [ 1061.251808][T14960] ? clear_bhb_loop+0x40/0x90 [ 1061.256510][T14960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1061.262468][T14960] RIP: 0033:0x7f1bb139de99 [ 1061.266915][T14960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1061.286642][T14960] RSP: 002b:00007f1bb2215028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1061.295164][T14960] RAX: ffffffffffffffda RBX: 00007f1bb1625fa0 RCX: 00007f1bb139de99 [ 1061.303168][T14960] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 1061.311164][T14960] RBP: 00007f1bb1433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1061.319182][T14960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.327190][T14960] R13: 00007f1bb1626038 R14: 00007f1bb1625fa0 R15: 00007fffd0ea2f38 [ 1061.335244][T14960] [ 1061.384316][T14960] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 1062.226074][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.363052][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.478938][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.572815][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.559183][ T59] hsr_slave_0: left promiscuous mode [ 1063.566765][ T59] hsr_slave_1: left promiscuous mode [ 1063.573239][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1063.598046][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.607143][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.614724][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.622491][ T59] bridge_slave_1: left allmulticast mode [ 1063.628362][ T59] bridge_slave_1: left promiscuous mode [ 1063.634595][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.644209][ T59] bridge_slave_0: left allmulticast mode [ 1063.649934][ T59] bridge_slave_0: left promiscuous mode [ 1063.656493][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.667883][ T59] veth1_macvtap: left promiscuous mode [ 1063.673475][ T59] veth0_macvtap: left promiscuous mode [ 1063.679866][ T59] veth1_vlan: left promiscuous mode [ 1063.685313][ T59] veth0_vlan: left promiscuous mode [ 1063.762099][ T59] infiniband syz1: set down [ 1063.921428][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1063.936367][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1063.977126][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.015581][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.109120][ T59] bond0 (unregistering): Released all slaves [ 1064.157277][ T11] smc: removing ib device syz1 [ 1064.176467][ T9256] lo speed is unknown, defaulting to 1000 [ 1064.885312][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.930130][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.991114][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.071445][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.190042][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.251496][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.311689][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.353891][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.516286][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.571293][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.640932][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.714268][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.087187][ T59] hsr_slave_0: left promiscuous mode [ 1067.093356][ T59] hsr_slave_1: left promiscuous mode [ 1067.101441][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.111923][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.122236][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.130017][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.141361][ T59] bridge_slave_1: left allmulticast mode [ 1067.147514][ T59] bridge_slave_1: left promiscuous mode [ 1067.153307][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.162604][ T59] bridge_slave_0: left allmulticast mode [ 1067.168614][ T59] bridge_slave_0: left promiscuous mode [ 1067.174723][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.187926][ T59] hsr_slave_0: left promiscuous mode [ 1067.199585][ T59] hsr_slave_1: left promiscuous mode [ 1067.205908][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.215163][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.223072][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.231073][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.240996][ T59] bridge_slave_1: left allmulticast mode [ 1067.248776][ T59] bridge_slave_1: left promiscuous mode [ 1067.256099][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.265589][ T59] bridge_slave_0: left allmulticast mode [ 1067.271301][ T59] bridge_slave_0: left promiscuous mode [ 1067.278858][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.293188][ T59] hsr_slave_0: left promiscuous mode [ 1067.300882][ T59] hsr_slave_1: left promiscuous mode [ 1067.310968][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.319984][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.329146][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.336994][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.345199][ T59] bridge_slave_1: left allmulticast mode [ 1067.350895][ T59] bridge_slave_1: left promiscuous mode [ 1067.358117][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.369646][ T59] bridge_slave_0: left allmulticast mode [ 1067.375703][ T59] bridge_slave_0: left promiscuous mode [ 1067.381470][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.399999][ T59] veth1_macvtap: left promiscuous mode [ 1067.406977][ T59] veth0_macvtap: left promiscuous mode [ 1067.412649][ T59] veth1_vlan: left promiscuous mode [ 1067.418497][ T59] veth0_vlan: left promiscuous mode [ 1067.426930][ T59] veth1_macvtap: left promiscuous mode [ 1067.432515][ T59] veth0_macvtap: left promiscuous mode [ 1067.441460][ T59] veth1_vlan: left promiscuous mode [ 1067.448050][ T59] veth0_vlan: left promiscuous mode [ 1067.456237][ T59] veth1_macvtap: left promiscuous mode [ 1067.461838][ T59] veth0_macvtap: left promiscuous mode [ 1067.469961][ T59] veth1_vlan: left promiscuous mode [ 1067.477681][ T59] veth0_vlan: left promiscuous mode [ 1067.912001][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1067.947493][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1067.986966][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.024842][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.146553][ T59] bond0 (unregistering): Released all slaves [ 1068.327643][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1068.345881][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1068.379031][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.415944][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.501661][ T59] bond0 (unregistering): Released all slaves [ 1068.687142][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1068.702931][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1068.741143][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.778186][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.861297][ T59] bond0 (unregistering): Released all slaves