last executing test programs: 4m18.327129319s ago: executing program 1 (id=263): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m15.28223814s ago: executing program 1 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4m12.69906007s ago: executing program 1 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4m6.774750137s ago: executing program 1 (id=302): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x8580) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, 0x0) 4m6.315079878s ago: executing program 1 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0xb, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) 4m4.94015333s ago: executing program 1 (id=312): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) write(r1, &(0x7f0000000100)='N', 0x1) write(r2, &(0x7f0000000100)='1', 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) 3m49.813993271s ago: executing program 32 (id=312): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) write(r1, &(0x7f0000000100)='N', 0x1) write(r2, &(0x7f0000000100)='1', 0x1) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0) 13.374972329s ago: executing program 5 (id=907): r0 = userfaultfd(0x80801) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000d00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r2], 0x298}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9e4291e4061b41}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000180)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x29, 0x3, 0xe}, 0x2c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 12.389366672s ago: executing program 2 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 9.46335761s ago: executing program 4 (id=910): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000000c0)={0xfffffffc, 0x0, '\x00', {0x0, @bt={0x7, 0x400000, 0x1, 0x1, 0x9, 0x8, 0x7, 0x2, 0xffff8000, 0x5, 0x6, 0xc72, 0x6, 0x81, 0x17, 0x36, {0x0, 0x2}, 0x6, 0xe}}}) 9.429813301s ago: executing program 5 (id=911): socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) 9.227215515s ago: executing program 2 (id=913): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001140)={0x80000001, 0x80, 0x0, 0xfd, 0x11, 0x7, 0x4, 0xb, 0x100, 0x612a9f2f, 0xa0, 0xbe, 0x0, 0x0, 0x0}) 9.205862846s ago: executing program 0 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mknodat(r1, &(0x7f0000000040)='./file2\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 8.15468087s ago: executing program 5 (id=916): fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x400c0c1, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000b00), 0x100) 6.748228353s ago: executing program 0 (id=917): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x20, 0x82, 0xd, 0xffffffff, 0x0, 0x20, 0x7, 0x20, 0x1, 0x20, 0x3, &(0x7f0000000140)=[0x7], 0x1, 0x0}) 6.747090323s ago: executing program 2 (id=918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6.538368988s ago: executing program 5 (id=919): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 6.45103637s ago: executing program 2 (id=920): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6000800fffc020000000000000000000000000000ff020000000000000000008000000001880001045a"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb4a4) 6.408073861s ago: executing program 3 (id=921): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.380376364s ago: executing program 2 (id=922): setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.267100147s ago: executing program 5 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 4.136086303s ago: executing program 4 (id=924): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000802}, 0x40041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, &(0x7f0000000140), 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) close_range(r0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4) 4.000263287s ago: executing program 3 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 3.951445088s ago: executing program 0 (id=926): socket$nl_generic(0x10, 0x3, 0x10) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) 3.870461299s ago: executing program 5 (id=927): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000100000010000000c00020002000000000000001c0007800c0001"], 0x48}}, 0x4) 2.820495224s ago: executing program 4 (id=928): r0 = socket$inet_udp(0x2, 0x2, 0x11) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000300)="0303ec58000000004500001c0000000040840000ac14140b7f0000014e214e24", 0xffeb, 0x0, &(0x7f0000000400)={0x2, 0x0, @dev}, 0x10) 2.786948715s ago: executing program 3 (id=929): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 2.718594746s ago: executing program 0 (id=930): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.57121415s ago: executing program 4 (id=931): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001140)={0x80000001, 0x80, 0x0, 0xfd, 0x11, 0x7, 0x4, 0xb, 0x100, 0x612a9f2f, 0xa0, 0xbe, 0x0, 0x0, 0x0}) 2.57079856s ago: executing program 0 (id=932): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a6000800fffc020000000000000000000000000000ff020000000000000000008000000001880001045a"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb4a4) 2.494526242s ago: executing program 4 (id=933): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, 0x0, 0x0) 1.538288144s ago: executing program 0 (id=934): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000005c0)={0x2, 0x32d, &(0x7f0000000280), 0x0}) 1.206962112s ago: executing program 3 (id=935): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) 1.142122623s ago: executing program 2 (id=936): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.039155775s ago: executing program 3 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 897.411859ms ago: executing program 4 (id=938): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) 0s ago: executing program 3 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000020603000000000000000000070000001c00078008000840000000e2050015000200000008001240000000040500010006000000050005000200000005000400050000000900020073797a310000000015000300"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) kernel console output (not intermixed with test programs): EV_CHANGE): veth0_macvtap: link becomes ready [ 82.838778][ T4276] device veth1_vlan entered promiscuous mode [ 82.850792][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.862432][ T4275] device veth0_macvtap entered promiscuous mode [ 82.888888][ T4274] device veth1_vlan entered promiscuous mode [ 82.919082][ T4275] device veth1_macvtap entered promiscuous mode [ 82.940584][ T4289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.969488][ T4276] device veth0_macvtap entered promiscuous mode [ 82.978693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.989193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.997498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.006408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.014940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.023218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.031741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.045869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.053306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.068650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.079754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.091324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.111454][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.141704][ T4274] device veth0_macvtap entered promiscuous mode [ 83.153520][ T4276] device veth1_macvtap entered promiscuous mode [ 83.172338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.180980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.190058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.200028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.208946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.221928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.235231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.243584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.254714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.262464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.273407][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.284713][ T4273] device veth0_vlan entered promiscuous mode [ 83.319693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.328529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.346983][ T4274] device veth1_macvtap entered promiscuous mode [ 83.371161][ T4275] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.380701][ T4275] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396888][ T4275] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.410145][ T4275] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.423593][ T4273] device veth1_vlan entered promiscuous mode [ 83.445028][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.456959][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.473510][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.494591][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.503652][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.513466][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.528470][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.539857][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.562166][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.572902][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.583633][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.594474][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.605896][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.615522][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.626637][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.641492][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.657728][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.669029][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.681152][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.692338][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.703858][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 83.711101][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.721845][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.732319][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.742945][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.759018][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.782700][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.785197][ T4293] Bluetooth: hci4: command 0x040f tx timeout [ 83.795553][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 83.798884][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 83.803489][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 83.821440][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830302][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.845280][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.863500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.887077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.903580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.912636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.930104][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.939518][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.951620][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.960559][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.974000][ T4273] device veth0_macvtap entered promiscuous mode [ 83.985547][ T4273] device veth1_macvtap entered promiscuous mode [ 84.031574][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.045750][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.054005][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.062598][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.094359][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.102339][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156421][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.187059][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.196389][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.209809][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.221937][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.232452][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.243281][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.253328][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.271348][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.283153][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.301469][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.310372][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.322367][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.332968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.341731][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.351648][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.360005][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.370451][ T4289] device veth0_vlan entered promiscuous mode [ 84.385935][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.396570][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.402478][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.416238][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.427767][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.437888][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.448650][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.459464][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.471282][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.491258][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.501982][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.513038][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.531483][ T4289] device veth1_vlan entered promiscuous mode [ 84.553971][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.562706][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.572474][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.581820][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.621653][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.654035][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.690346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.705795][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.718928][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.755385][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.778519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.792589][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.833551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.881839][ T4366] i2c i2c-0: new_device: Missing parameters [ 84.891525][ T4366] i2c i2c-0: new_device: Can't parse I2C address [ 85.089799][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.109416][ T4289] device veth0_macvtap entered promiscuous mode [ 85.150438][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.169101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.202784][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.244655][ T130] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.268514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.398819][ T4289] device veth1_macvtap entered promiscuous mode [ 85.434619][ T130] usb 1-1: device descriptor read/64, error -71 [ 85.724019][ T130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.783921][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 85.863816][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 85.870231][ T4293] Bluetooth: hci4: command 0x0419 tx timeout [ 85.876776][ T4286] Bluetooth: hci2: command 0x0419 tx timeout [ 85.882952][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 85.908291][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.919583][ T130] usb 1-1: device descriptor read/64, error -71 [ 85.972568][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.004668][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.033323][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.046260][ T130] usb usb1-port1: attempt power cycle [ 86.078620][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.120489][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.155291][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.186354][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.229313][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.277266][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.315786][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.398403][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.426424][ T14] cfg80211: failed to load regulatory.db [ 86.445518][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.504360][ T130] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.560595][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.571307][ T130] usb 1-1: device descriptor read/8, error -71 [ 86.616995][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.809227][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.905397][ T130] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.974575][ T130] usb 1-1: device descriptor read/8, error -71 [ 87.003307][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.171834][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.184769][ T130] usb usb1-port1: unable to enumerate USB device [ 87.335719][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.532240][ T4289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.679014][ T4289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.730941][ T4289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.793746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 87.803746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 87.813746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.823745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.833745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.843745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.853748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.863745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.873748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 87.883743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 89.370930][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.853062][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.912911][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.004687][ T4289] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.013470][ T4289] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.063818][ T4289] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.072554][ T4289] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.134442][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.148207][ T4382] FAULT_INJECTION: forcing a failure. [ 91.148207][ T4382] name failslab, interval 1, probability 0, space 0, times 1 [ 91.168550][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.173948][ T4382] CPU: 0 PID: 4382 Comm: syz.0.8 Not tainted syzkaller #0 [ 91.182995][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.193088][ T4382] Call Trace: [ 91.196396][ T4382] [ 91.199366][ T4382] dump_stack_lvl+0x188/0x24e [ 91.204106][ T4382] ? show_regs_print_info+0x12/0x12 [ 91.209371][ T4382] ? load_image+0x410/0x410 [ 91.213918][ T4382] ? __lock_acquire+0x7c40/0x7c40 [ 91.218984][ T4382] ? memset+0x1e/0x40 [ 91.222995][ T4382] should_fail_ex+0x390/0x4c0 [ 91.227714][ T4382] should_failslab+0x5/0x20 [ 91.232238][ T4382] slab_pre_alloc_hook+0x59/0x300 [ 91.237309][ T4382] kmem_cache_alloc+0x56/0x2f0 [ 91.242107][ T4382] ? security_inode_alloc+0x30/0x110 [ 91.247435][ T4382] security_inode_alloc+0x30/0x110 [ 91.252585][ T4382] inode_init_always+0x910/0xc90 [ 91.257557][ T4382] new_inode_pseudo+0x91/0x1c0 [ 91.262362][ T4382] alloc_anon_inode+0x1b/0x300 [ 91.267155][ T4382] anon_inode_make_secure_inode+0x95/0x160 [ 91.273002][ T4382] ? do_compat_epoll_pwait+0x1c0/0x1c0 [ 91.278515][ T4382] ? _raw_spin_unlock+0x24/0x40 [ 91.283412][ T4382] __se_sys_memfd_secret+0xcd/0x2f0 [ 91.288676][ T4382] do_syscall_64+0x4c/0xa0 [ 91.293148][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 91.297862][ T4382] ? clear_bhb_loop+0x60/0xb0 [ 91.302664][ T4382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.308619][ T4382] RIP: 0033:0x7fb4bb79e159 [ 91.313084][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.332726][ T4382] RSP: 002b:00007fb4bc616028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 91.341190][ T4382] RAX: ffffffffffffffda RBX: 00007fb4bba25fa0 RCX: 00007fb4bb79e159 [ 91.349187][ T4382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.357182][ T4382] RBP: 00007fb4bb835024 R08: 0000000000000000 R09: 0000000000000000 [ 91.365173][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.373169][ T4382] R13: 00007fb4bba26038 R14: 00007fb4bba25fa0 R15: 00007ffeb3ee5ec8 [ 91.381188][ T4382] [ 91.387973][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.649182][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.684871][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.710115][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.819469][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.846258][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.864951][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.344230][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 93.384132][ T4399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.099428][ T4419] binder: 4417:4419 ioctl 4018620d 0 returned -22 [ 94.203666][ T4399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.931502][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.862360][ T4441] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 98.869155][ T4441] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.897985][ T4326] usb 4-1: device descriptor read/all, error -71 [ 98.938071][ T4441] vhci_hcd vhci_hcd.0: Device attached [ 99.555955][ T4456] Invalid ELF header magic: != ELF [ 100.080088][ T4442] vhci_hcd: connection closed [ 100.105662][ T4457] i2c i2c-0: new_device: Missing parameters [ 100.125004][ T4457] i2c i2c-0: new_device: Can't parse I2C address [ 100.144177][ T9] vhci_hcd: stop threads [ 100.196061][ T9] vhci_hcd: release socket [ 100.260139][ T9] vhci_hcd: disconnect device [ 100.505320][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.685030][ T14] usb 3-1: device descriptor read/64, error -71 [ 100.693796][ T4369] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 100.701439][ T4369] usb 41-1: enqueue for inactive port 0 [ 100.984106][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.104030][ T4326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.174064][ T14] usb 3-1: device descriptor read/64, error -71 [ 101.304642][ T14] usb usb3-port1: attempt power cycle [ 101.324077][ T4326] usb 2-1: Using ep0 maxpacket: 8 [ 101.348826][ T4326] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 101.425405][ T4326] usb 2-1: config 0 has no interface number 0 [ 101.510399][ T4326] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 101.597321][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.676278][ T4326] usb 2-1: Product: syz [ 101.719259][ T4326] usb 2-1: Manufacturer: syz [ 101.725121][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.782981][ T14] usb 3-1: device descriptor read/8, error -71 [ 103.352955][ T4326] usb 2-1: SerialNumber: syz [ 103.381454][ T4326] usb 2-1: config 0 descriptor?? [ 103.387824][ T4326] usb 2-1: can't set config #0, error -71 [ 103.413161][ T4326] usb 2-1: USB disconnect, device number 2 [ 103.503997][ T4369] vhci_hcd: vhci_device speed not set [ 103.633899][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.079668][ T14] usb 3-1: device not accepting address 5, error -71 [ 105.131174][ T14] usb usb3-port1: unable to enumerate USB device [ 105.304645][ T130] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.797285][ T130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.838514][ T130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.922187][ T130] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.962165][ T130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.003235][ T130] usb 4-1: config 0 descriptor?? [ 106.019207][ T4488] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.136241][ T4489] tipc: Started in network mode [ 106.177250][ T4489] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 106.194593][ T4491] Bluetooth: MGMT ver 1.22 [ 106.245499][ T4489] tipc: Enabled bearer , priority 0 [ 106.258872][ T130] usbhid 4-1:0.0: can't add hid device: -71 [ 106.277970][ T130] usbhid: probe of 4-1:0.0 failed with error -71 [ 106.301567][ T130] usb 4-1: USB disconnect, device number 4 [ 107.463827][ T4505] Invalid ELF header magic: != ELF [ 107.764505][ T4500] sched: RT throttling activated [ 107.764890][ T130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.813460][ T4326] tipc: Node number set to 43690 [ 112.754103][ T4539] device syzkaller0 entered promiscuous mode [ 113.470368][ T4550] i2c i2c-0: new_device: Missing parameters [ 113.478613][ T4550] i2c i2c-0: new_device: Can't parse I2C address [ 113.893925][ T4369] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.073954][ T4369] usb 2-1: device descriptor read/64, error -71 [ 114.353957][ T4369] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.543974][ T4369] usb 2-1: device descriptor read/64, error -71 [ 114.674320][ T4369] usb usb2-port1: attempt power cycle [ 115.084022][ T4369] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.146498][ T4369] usb 2-1: device descriptor read/8, error -71 [ 115.504174][ T4369] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.564904][ T4369] usb 2-1: device descriptor read/8, error -71 [ 115.745031][ T4369] usb usb2-port1: unable to enumerate USB device [ 116.633883][ T4369] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.983987][ T4369] usb 1-1: Using ep0 maxpacket: 8 [ 117.013812][ T4369] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 117.021937][ T4369] usb 1-1: config 0 has no interface number 0 [ 117.275571][ T4369] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 117.343115][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.390910][ T4369] usb 1-1: Product: syz [ 117.416519][ T4369] usb 1-1: Manufacturer: syz [ 117.452239][ T4369] usb 1-1: SerialNumber: syz [ 117.469980][ T4369] usb 1-1: config 0 descriptor?? [ 117.494887][ T4369] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 117.503648][ T4369] pctv452e: pctv452e_power_ctrl: 1 [ 117.503648][ T4369] [ 117.558660][ T4369] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 117.558660][ T4369] [ 117.594057][ T4369] dvb-usb: bulk message failed: -22 (5/0) [ 117.627349][ T26] audit: type=1326 audit(1788758357.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.4.46" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31fff9e159 code=0x0 [ 117.702768][ T4561] dvb-usb: bulk message failed: -22 (7/0) [ 117.721847][ T4561] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 117.801591][ T4369] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.812442][ T4369] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 117.821241][ T4369] usb 1-1: media controller created [ 117.826832][ T4369] dvb-usb: bulk message failed: -22 (8/0) [ 117.832727][ T4369] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 117.850575][ T4369] dvb-usb: MAC address reading failed. [ 117.878261][ T4369] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.943870][ T33] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.963777][ T4647] Invalid ELF header magic: != ELF [ 118.209792][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.332516][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.528548][ T33] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.576700][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.665231][ T33] usb 2-1: config 0 descriptor?? [ 118.721050][ T4369] DVB: Unable to find symbol stb0899_attach() [ 118.737985][ T4369] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 118.924202][ T33] usbhid 2-1:0.0: can't add hid device: -71 [ 118.935974][ T33] usbhid: probe of 2-1:0.0 failed with error -71 [ 118.980402][ T33] usb 2-1: USB disconnect, device number 7 [ 119.683789][ T33] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.653864][ T4369] rc_core: IR keymap rc-tt-1500 not found [ 121.659735][ T4369] Registered IR keymap rc-empty [ 121.676256][ T4369] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 121.697785][ T4369] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7 [ 121.728993][ T4369] dvb-usb: schedule remote query interval to 100 msecs. [ 121.743778][ T4369] pctv452e: pctv452e_power_ctrl: 0 [ 121.743778][ T4369] [ 121.751182][ T4369] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 121.793639][ T4369] usb 1-1: USB disconnect, device number 6 [ 122.773000][ T4369] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 122.896761][ T4675] FAULT_INJECTION: forcing a failure. [ 122.896761][ T4675] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 122.971414][ T4675] CPU: 0 PID: 4675 Comm: syz.4.59 Not tainted syzkaller #0 [ 122.978705][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.988801][ T4675] Call Trace: [ 122.992123][ T4675] [ 122.995086][ T4675] dump_stack_lvl+0x188/0x24e [ 122.999843][ T4675] ? show_regs_print_info+0x12/0x12 [ 123.005110][ T4675] ? load_image+0x410/0x410 [ 123.009635][ T4675] ? __lock_acquire+0x7c40/0x7c40 [ 123.014697][ T4675] should_fail_ex+0x390/0x4c0 [ 123.019435][ T4675] prepare_alloc_pages+0x1e1/0x5b0 [ 123.024580][ T4675] __alloc_pages+0x130/0x4f0 [ 123.029199][ T4675] ? zone_statistics+0x170/0x170 [ 123.034169][ T4675] ? mark_lock+0x94/0x320 [ 123.038555][ T4675] pte_alloc_one+0x7b/0x310 [ 123.043090][ T4675] ? pfn_modify_allowed+0x560/0x560 [ 123.048315][ T4675] ? __might_sleep+0xd0/0xd0 [ 123.052925][ T4675] ? __lock_acquire+0x7c40/0x7c40 [ 123.057987][ T4675] __pte_alloc+0x21/0x150 [ 123.062355][ T4675] ? move_page_tables+0x1b2/0x1950 [ 123.067498][ T4675] move_page_tables+0x175c/0x1950 [ 123.072596][ T4675] ? do_mprotect_pkey+0xba0/0xba0 [ 123.077662][ T4675] ? __vm_enough_memory+0x116/0x370 [ 123.082905][ T4675] move_vma+0x4eb/0xca0 [ 123.087086][ T4675] ? vma_expandable+0xf0/0xf0 [ 123.091789][ T4675] ? cap_mmap_addr+0x153/0x2c0 [ 123.096602][ T4675] ? bpf_lsm_mmap_addr+0x5/0x10 [ 123.101484][ T4675] ? security_mmap_addr+0x6e/0x90 [ 123.106533][ T4675] ? get_unmapped_area+0x2f0/0x360 [ 123.111678][ T4675] mremap_to+0x513/0x5c0 [ 123.115963][ T4675] __se_sys_mremap+0x691/0x1120 [ 123.120846][ T4675] ? __ia32_sys_get_robust_list+0x100/0x100 [ 123.126755][ T4675] ? __se_sys_capset+0x114/0x780 [ 123.131720][ T4675] ? __lock_acquire+0x7c40/0x7c40 [ 123.136800][ T4675] ? __x64_sys_mremap+0xc0/0xc0 [ 123.141679][ T4675] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.147725][ T4675] ? lock_chain_count+0x20/0x20 [ 123.152611][ T4675] ? lockdep_hardirqs_on+0x94/0x140 [ 123.157830][ T4675] ? __x64_sys_mremap+0x1c/0xc0 [ 123.162718][ T4675] do_syscall_64+0x4c/0xa0 [ 123.167168][ T4675] ? clear_bhb_loop+0x60/0xb0 [ 123.171876][ T4675] ? clear_bhb_loop+0x60/0xb0 [ 123.176582][ T4675] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.182520][ T4675] RIP: 0033:0x7f31fff9e159 [ 123.186960][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.206572][ T4675] RSP: 002b:00007f3200ec0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 123.215003][ T4675] RAX: ffffffffffffffda RBX: 00007f3200225fa0 RCX: 00007f31fff9e159 [ 123.222985][ T4675] RDX: 0000000000003021 RSI: 0000000000003000 RDI: 0000200000001000 [ 123.230971][ T4675] RBP: 00007f3200035024 R08: 0000200000ffd000 R09: 0000000000000000 [ 123.238954][ T4675] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 123.246942][ T4675] R13: 00007f3200226038 R14: 00007f3200225fa0 R15: 00007fff98042728 [ 123.254952][ T4675] [ 124.853837][ T4702] Invalid ELF header magic: != ELF [ 125.593832][ T4326] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.633783][ T4363] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.804096][ T4326] usb 4-1: Using ep0 maxpacket: 8 [ 125.811714][ T4326] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 125.825419][ T4363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.831418][ T4326] usb 4-1: config 0 has no interface number 0 [ 125.846887][ T4363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.856704][ T4326] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 125.871125][ T4363] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.875319][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.880530][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.904345][ T4326] usb 4-1: Product: syz [ 125.908650][ T4326] usb 4-1: Manufacturer: syz [ 125.913264][ T4326] usb 4-1: SerialNumber: syz [ 125.921410][ T4363] usb 5-1: config 0 descriptor?? [ 125.932862][ T4326] usb 4-1: config 0 descriptor?? [ 125.956892][ T4326] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 125.965136][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 125.987477][ T4326] pctv452e: pctv452e_power_ctrl: 1 [ 125.987477][ T4326] [ 125.995936][ T4326] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 125.995936][ T4326] [ 126.007799][ T4326] dvb-usb: bulk message failed: -22 (5/0) [ 126.019011][ T4326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.039288][ T4326] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 126.048234][ T4326] usb 4-1: media controller created [ 126.053670][ T4326] dvb-usb: bulk message failed: -22 (8/0) [ 126.059850][ T4326] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 126.890160][ T4326] dvb-usb: MAC address reading failed. [ 126.895265][ T4363] usbhid 5-1:0.0: can't add hid device: -71 [ 126.902388][ T4363] usbhid: probe of 5-1:0.0 failed with error -71 [ 126.911452][ T4695] dvb-usb: bulk message failed: -22 (7/0) [ 126.920586][ T4695] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 126.926561][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 126.934784][ T4363] usb 5-1: USB disconnect, device number 2 [ 126.946022][ T7] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 126.971403][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.980218][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.988740][ T7] usb 1-1: Product: syz [ 126.992945][ T7] usb 1-1: Manufacturer: syz [ 126.999284][ T7] usb 1-1: SerialNumber: syz [ 127.078881][ T7] usb 1-1: config 0 descriptor?? [ 127.157236][ T4326] DVB: Unable to find symbol stb0899_attach() [ 127.163410][ T4326] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 127.273908][ T4326] rc_core: IR keymap rc-tt-1500 not found [ 127.279692][ T4326] Registered IR keymap rc-empty [ 127.294343][ T4326] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 127.313808][ T4326] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8 [ 127.335120][ T4326] dvb-usb: schedule remote query interval to 100 msecs. [ 127.342310][ T4326] pctv452e: pctv452e_power_ctrl: 0 [ 127.342310][ T4326] [ 127.355931][ T4326] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 127.368832][ T4262] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.382267][ T4326] usb 4-1: USB disconnect, device number 6 [ 127.479863][ T4326] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 127.489584][ T4363] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.512915][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 127.531546][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.544319][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 127.558398][ T7] usb 1-1: media controller created [ 127.576636][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.585136][ T4262] usb 2-1: Using ep0 maxpacket: 16 [ 127.593313][ T4262] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.609905][ T4262] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 127.618459][ T4262] usb 2-1: config 1 has no interface number 0 [ 127.625021][ T4262] usb 2-1: config 1 interface 169 altsetting 93 endpoint 0x83 has invalid wMaxPacketSize 0 [ 127.636199][ T4262] usb 2-1: config 1 interface 169 has no altsetting 0 [ 127.649050][ T4262] usb 2-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 127.658422][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.667575][ T4262] usb 2-1: Product: syz [ 127.671856][ T4262] usb 2-1: Manufacturer: syz [ 127.676991][ T4262] usb 2-1: SerialNumber: syz [ 127.679098][ T4363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.702914][ T4363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.713834][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 127.721768][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 127.733202][ T4363] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 127.769964][ T4363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.800122][ T4363] usb 5-1: config 0 descriptor?? [ 128.786878][ T4262] io_ti 2-1:1.169: required endpoints missing [ 128.845702][ T4262] usb 2-1: USB disconnect, device number 9 [ 128.892962][ T7] usb 1-1: USB disconnect, device number 7 [ 129.151335][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 129.163295][ T4363] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 129.178481][ T4363] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 129.363144][ T4363] input: failed to attach handler kbd to device input9, error: -5 [ 129.387227][ T4363] usb 5-1: USB disconnect, device number 3 [ 129.478996][ T4747] Invalid ELF header magic: != ELF [ 130.194176][ T4749] tmpfs: Unknown parameter 'defcontext' [ 131.363891][ T130] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.645211][ T130] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.655916][ T130] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.665911][ T130] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.676522][ T130] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 131.685851][ T130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.697127][ T4753] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.928496][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.128989][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 132.135853][ T4262] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 132.164362][ T4293] Bluetooth: hci5: Reading Intel version command failed (-71) [ 132.176476][ T130] usb 3-1: USB disconnect, device number 6 [ 132.206298][ T4262] usb 5-1: config 0 has no interface number 0 [ 132.278657][ T4262] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 132.309078][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.338939][ T4262] usb 5-1: Product: syz [ 132.343152][ T4262] usb 5-1: Manufacturer: syz [ 132.367815][ T4262] usb 5-1: SerialNumber: syz [ 132.409305][ T4262] usb 5-1: config 0 descriptor?? [ 132.417509][ T4262] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 132.438712][ T4262] pctv452e: pctv452e_power_ctrl: 1 [ 132.438712][ T4262] [ 132.446557][ T4262] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 132.446557][ T4262] [ 132.463566][ T4262] dvb-usb: bulk message failed: -22 (5/0) [ 132.471931][ T4778] usb usb8: usbfs: process 4778 (syz.1.89) did not claim interface 0 before use [ 132.494428][ T4262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 132.516727][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.517809][ T4262] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 132.523295][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.538148][ T4262] usb 5-1: media controller created [ 132.548762][ T4262] dvb-usb: bulk message failed: -22 (8/0) [ 132.560205][ T4262] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 132.593483][ T4262] dvb-usb: MAC address reading failed. [ 132.619868][ T4766] dvb-usb: bulk message failed: -22 (7/0) [ 132.634612][ T4766] pctv452e: I2C error -22; AA 02 00 00 00 -> aa 02 31 03 00 00 00 [ 132.683907][ T4262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.091940][ T4794] Invalid ELF header magic: != ELF [ 134.102955][ T4262] DVB: Unable to find symbol stb0899_attach() [ 134.137059][ T4262] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 135.123875][ T4262] rc_core: IR keymap rc-tt-1500 not found [ 135.264085][ T130] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.012122][ T4262] Registered IR keymap rc-empty [ 136.019561][ T4262] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 136.035546][ T4262] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 136.051789][ T4262] dvb-usb: schedule remote query interval to 100 msecs. [ 136.059032][ T4262] pctv452e: pctv452e_power_ctrl: 0 [ 136.059032][ T4262] [ 136.066481][ T4262] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 136.096732][ T4262] usb 5-1: USB disconnect, device number 4 [ 136.176944][ T4262] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 136.223803][ T130] usb 1-1: Using ep0 maxpacket: 8 [ 136.258144][ T130] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.340284][ T130] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.413824][ T130] usb 1-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0xB6, skipping [ 136.468343][ T130] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.572909][ T130] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.677097][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.730053][ T130] usbtmc 1-1:16.0: bulk endpoints not found [ 138.265671][ T14] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.944030][ T4845] mmap: syz.2.102 (4845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.121060][ T7] usb 1-1: USB disconnect, device number 8 [ 139.206157][ T4851] Invalid ELF header magic: != ELF [ 140.061844][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.079768][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 140.098200][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 141.361802][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.383794][ T14] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.393529][ T14] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 141.403208][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.471964][ T14] usb 5-1: can't set config #1, error -71 [ 141.505934][ T14] usb 5-1: USB disconnect, device number 5 [ 142.079189][ T4865] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.088377][ T4865] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.097189][ T4865] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.106668][ T4865] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.266169][ T4865] device syzkaller0 entered promiscuous mode [ 142.451461][ T4868] binder: 4867:4868 ioctl c0306201 0 returned -14 [ 143.053947][ T4363] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 144.905314][ T4363] usb 5-1: not running at top speed; connect to a high speed hub [ 145.004266][ T4363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 145.051284][ T4363] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 145.084116][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.092154][ T4363] usb 5-1: Product: syz [ 145.147261][ T4363] usb 5-1: Manufacturer: syz [ 145.163859][ T4363] usb 5-1: SerialNumber: syz [ 145.194046][ T4363] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 145.248619][ T4363] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 145.334329][ T4363] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 145.371691][ T4363] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 145.448923][ T4363] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 145.479465][ T26] audit: type=1326 audit(1788758385.370:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 145.596551][ T22] usb 5-1: USB disconnect, device number 6 [ 145.641088][ T22] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 145.683122][ T26] audit: type=1326 audit(1788758385.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 145.712265][ T22] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 145.764024][ T4901] binder: 4900:4901 ioctl c0306201 0 returned -14 [ 145.781103][ T26] audit: type=1326 audit(1788758385.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 145.807787][ T22] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 145.861048][ T22] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 145.887358][ T26] audit: type=1326 audit(1788758385.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 145.922932][ T22] keyspan 5-1:1.0: device disconnected [ 146.020992][ T26] audit: type=1326 audit(1788758385.450:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 146.148361][ T26] audit: type=1326 audit(1788758385.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 146.242155][ T26] audit: type=1326 audit(1788758385.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 146.361156][ T26] audit: type=1326 audit(1788758385.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 146.445903][ T26] audit: type=1326 audit(1788758385.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 147.499442][ T26] audit: type=1326 audit(1788758385.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4897 comm="syz.3.132" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f87f859e159 code=0x7ffc0000 [ 148.988850][ T4293] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 149.557274][ T4363] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.603650][ T4935] Invalid ELF header magic: != ELF [ 149.753801][ T4363] usb 5-1: Using ep0 maxpacket: 8 [ 149.773624][ T4363] usb 5-1: config 0 has no interfaces? [ 149.799138][ T4363] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 149.870150][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.883596][ T4363] usb 5-1: Product: syz [ 149.910075][ T4363] usb 5-1: Manufacturer: syz [ 149.929738][ T4363] usb 5-1: SerialNumber: syz [ 149.967351][ T4363] usb 5-1: config 0 descriptor?? [ 152.309784][ T4928] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 152.638146][ T22] usb 5-1: USB disconnect, device number 7 [ 153.941677][ T130] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 154.374272][ T4972] syz.3.150 uses obsolete (PF_INET,SOCK_PACKET) [ 154.423996][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 154.492736][ T130] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.504042][ T130] usb 2-1: config 0 has no interface number 0 [ 154.510418][ T130] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.526715][ T130] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.538037][ T130] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.553442][ T130] usb 2-1: config 0 interface 1 has no altsetting 0 [ 154.561727][ T130] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 154.588664][ T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.626192][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.634287][ T130] usb 2-1: config 0 descriptor?? [ 154.640965][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.654973][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.666757][ T22] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 154.694387][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.712634][ T22] usb 1-1: Product: syz [ 154.717008][ T22] usb 1-1: Manufacturer: syz [ 154.721665][ T22] usb 1-1: SerialNumber: syz [ 154.773327][ T22] usb 1-1: selecting invalid altsetting 1 [ 154.796224][ T22] usb 1-1: unit 6 not found! [ 154.996308][ T22] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 155.245611][ T22] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 155.255162][ T22] usb 1-1: USB disconnect, device number 9 [ 155.283969][ T130] uclogic 0003:145F:0212.0001: pen parameters not found [ 155.291005][ T130] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 155.359452][ T130] usb 2-1: USB disconnect, device number 10 [ 155.515260][ T4665] udevd[4665]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.897404][ T4983] binder: 4982:4983 ioctl c0306201 0 returned -14 [ 162.670339][ T4363] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.853172][ T5038] nvme nvme0: rdma connection establishment failed (-104) [ 162.863780][ T4363] usb 4-1: Using ep0 maxpacket: 32 [ 162.875477][ T4363] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.916989][ T4363] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.953794][ T4363] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.989617][ T4363] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 163.023822][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.062450][ T4363] usb 4-1: Product: syz [ 163.072566][ T4363] usb 4-1: Manufacturer: syz [ 163.089471][ T4363] usb 4-1: SerialNumber: syz [ 163.114819][ T4363] usb 4-1: config 0 descriptor?? [ 163.244763][ T4293] Bluetooth: hci1: hcon ffff888073af2000 sent 1 < count 14450 [ 163.252353][ T4293] Bluetooth: hci1: hcon ffff88807ad1c000 sent 1 < count 8 [ 163.464123][ T5061] Invalid ELF header magic: != ELF [ 163.618651][ T4363] gs_usb 4-1:0.0: Configuring for 63 interfaces [ 163.839069][ T4363] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 164.056099][ T4363] gs_usb: probe of 4-1:0.0 failed with error -71 [ 164.114632][ T4363] usb 4-1: USB disconnect, device number 7 [ 164.283881][ T4323] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.607920][ T4323] usb 3-1: Using ep0 maxpacket: 32 [ 164.615955][ T4323] usb 3-1: unable to get BOS descriptor or descriptor too short [ 164.636479][ T4323] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 164.657043][ T4323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.725255][ T4323] usb 3-1: Product: syz [ 164.808849][ T4323] usb 3-1: Manufacturer: syz [ 164.964334][ T4323] usb 3-1: SerialNumber: syz [ 165.525431][ T4323] usb 3-1: MIDIStreaming interface descriptor not found [ 165.616498][ T4323] usb 3-1: USB disconnect, device number 7 [ 166.988456][ T5104] Invalid ELF header magic: != ELF [ 168.883969][ T4294] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 169.713909][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.903807][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 169.910945][ T22] usb 2-1: config 0 has no interfaces? [ 169.932992][ T22] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 169.970105][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.002050][ T22] usb 2-1: Product: syz [ 170.022096][ T22] usb 2-1: Manufacturer: syz [ 170.051235][ T22] usb 2-1: SerialNumber: syz [ 170.083619][ T22] usb 2-1: config 0 descriptor?? [ 175.766649][ T33] usb 2-1: USB disconnect, device number 11 [ 176.321321][ T5205] nvme nvme0: rdma connection establishment failed (-104) [ 176.507431][ T5214] bond0: invalid ARP target specified [ 178.568100][ T5235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 178.861203][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 178.861217][ T26] audit: type=1800 audit(1788758418.750:14): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="c_chmask" dev="configfs" ino=62925 res=0 errno=0 [ 178.959528][ T4294] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 179.006996][ T26] audit: type=1800 audit(1788758418.780:15): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.233" name="UDC" dev="configfs" ino=62926 res=0 errno=0 [ 179.429012][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.565831][ T5261] nvme nvme0: rdma connection establishment failed (-104) [ 179.634356][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 179.641292][ T14] usb 1-1: config 0 has no interfaces? [ 179.686019][ T14] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 179.723715][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.766426][ T14] usb 1-1: Product: syz [ 179.770672][ T14] usb 1-1: Manufacturer: syz [ 179.794109][ T14] usb 1-1: SerialNumber: syz [ 179.815522][ T14] usb 1-1: config 0 descriptor?? [ 181.756038][ T33] usb 1-1: USB disconnect, device number 10 [ 182.319309][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 186.676610][ T5319] Zero length message leads to an empty skb [ 186.873496][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.257'. [ 187.107998][ T5324] binder: 5323:5324 ioctl c0306201 0 returned -14 [ 187.508857][ T5330] tipc: Enabled bearer , priority 0 [ 187.523538][ T5330] device syzkaller0 entered promiscuous mode [ 187.571075][ T5330] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 187.786098][ T5330] tipc: Resetting bearer [ 188.000144][ T5329] tipc: Resetting bearer [ 188.297916][ T5329] tipc: Disabling bearer [ 190.124201][ T5347] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 190.491567][ T5355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 190.552564][ T5358] binder: 5357:5358 ioctl c0306201 0 returned -14 [ 190.697660][ T5361] device syzkaller0 left promiscuous mode [ 194.266642][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273029][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.043594][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 197.063529][ T5401] binder: 5399:5401 ioctl c0306201 0 returned -14 [ 197.535871][ T5413] tipc: Started in network mode [ 197.540817][ T5413] tipc: Node identity 42b296094987, cluster identity 4711 [ 197.583904][ T5413] tipc: Enabled bearer , priority 0 [ 197.605712][ T5416] device syzkaller0 entered promiscuous mode [ 197.662315][ T5413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 197.773463][ T5413] tipc: Resetting bearer [ 197.808323][ T5412] tipc: Resetting bearer [ 197.978670][ T5412] tipc: Disabling bearer [ 198.174107][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 198.442952][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 198.515650][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.753760][ T7] usb 3-1: config 0 has no interfaces? [ 198.791460][ T7] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 198.846858][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.912106][ T7] usb 3-1: config 0 descriptor?? [ 199.142032][ T7] usb 3-1: USB disconnect, device number 8 [ 199.163549][ T5439] jffs2: notice: (5439) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 200.272991][ T5448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 201.143865][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 201.149931][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 201.153925][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 201.156224][ T4294] Bluetooth: hci0: command 0x0406 tx timeout [ 201.161939][ T4286] Bluetooth: hci4: command 0x0406 tx timeout [ 202.033843][ T4283] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.104866][ T5474] tipc: Started in network mode [ 202.109765][ T5474] tipc: Node identity 62d0d7273ea1, cluster identity 4711 [ 202.175251][ T5474] tipc: Enabled bearer , priority 0 [ 202.194099][ T5477] device syzkaller0 entered promiscuous mode [ 202.223957][ T4283] usb 4-1: Using ep0 maxpacket: 16 [ 202.234849][ T4283] usb 4-1: config 0 has no interfaces? [ 202.274870][ T5474] netem: change failed [ 202.282333][ T4283] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 202.328302][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 202.345123][ T5477] tipc: Resetting bearer [ 202.386375][ T4283] usb 4-1: Product: syz [ 202.390589][ T4283] usb 4-1: Manufacturer: syz [ 202.415765][ T4283] usb 4-1: SerialNumber: syz [ 202.422213][ T4283] usb 4-1: config 0 descriptor?? [ 202.652312][ T4283] usb 4-1: USB disconnect, device number 8 [ 203.204716][ T14] tipc: Node number set to 1550964519 [ 206.772534][ T5521] binder: BINDER_SET_CONTEXT_MGR already set [ 207.675047][ T5521] binder: 5520:5521 ioctl 4018620d 200000004a80 returned -16 [ 207.951590][ T5525] nvme_fcloop: unknown parameter or missing value 'wwnn' [ 210.743795][ T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 211.385414][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.409179][ T22] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 211.447155][ T22] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.488284][ T22] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 211.497668][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.767365][ T22] qmi_wwan: probe of 3-1:1.0 failed with error -22 [ 211.812374][ T22] usb 3-1: USB disconnect, device number 9 [ 215.618774][ T5574] autofs4:pid:5574:autofs_fill_super: called with bogus options [ 215.734353][ T5577] device syzkaller0 left promiscuous mode [ 215.740232][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 218.470020][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.478679][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.487035][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.495206][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.502748][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.510692][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.057375][ T5628] ======================================================= [ 219.057375][ T5628] WARNING: The mand mount option has been deprecated and [ 219.057375][ T5628] and is ignored by this kernel. Remove the mand [ 219.057375][ T5628] option from the mount to silence this warning. [ 219.057375][ T5628] ======================================================= [ 219.817404][ T5615] chnl_net:caif_netlink_parms(): no params data found [ 220.664396][ T4290] Bluetooth: hci5: command 0x0409 tx timeout [ 222.744111][ T4290] Bluetooth: hci5: command 0x041b tx timeout [ 223.498440][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.506976][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.125572][ T4290] Bluetooth: hci5: command 0x040f tx timeout [ 227.762361][ T4290] Bluetooth: hci5: command 0x0419 tx timeout [ 228.009518][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.150349][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.000656][ T5638] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.010069][ T5638] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.019769][ T5638] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.028734][ T5638] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.146336][ T5638] tipc: Resetting bearer [ 229.165321][ T5638] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.174584][ T5638] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.183480][ T5638] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.192450][ T5638] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.232846][ T5638] syz.2.374 (5638) used greatest stack depth: 20688 bytes left [ 229.391556][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.455369][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.498058][ T5615] device bridge_slave_0 entered promiscuous mode [ 229.574051][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.581362][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.604052][ T5615] device bridge_slave_1 entered promiscuous mode [ 229.684510][ T4625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.090799][ T4625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.113734][ T4326] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.236928][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.292231][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.393762][ T4625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.438492][ T5615] team0: Port device team_slave_0 added [ 231.453580][ T5615] team0: Port device team_slave_1 added [ 231.468433][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 231.479527][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.530217][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.543807][ T4326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.557386][ T4326] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.566879][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.759041][ T4326] usb 3-1: config 0 descriptor?? [ 232.354763][ T4326] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 232.375983][ T4326] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 232.397299][ T4326] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 232.414669][ T4326] microsoft 0003:045E:07DA.0002: no inputs found [ 232.421042][ T4326] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 233.235529][ T4262] usb 3-1: USB disconnect, device number 10 [ 233.938681][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.946441][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.453467][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.501085][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.920025][ T5714] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.929168][ T5714] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.938351][ T5714] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.947493][ T5714] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.113376][ T5714] syz.3.400 (5714) used greatest stack depth: 20528 bytes left [ 235.192607][ T4625] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.255097][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.262087][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.319277][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.414155][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.431867][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.647090][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.851559][ T5615] device hsr_slave_0 entered promiscuous mode [ 237.876041][ T5615] device hsr_slave_1 entered promiscuous mode [ 237.925566][ T5615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.933218][ T5615] Cannot create hsr debugfs directory [ 239.324529][ T5759] tipc: Resetting bearer [ 240.605821][ T4367] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.800001][ T4367] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.820676][ T4367] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 240.851846][ T4367] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.893811][ T4367] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 240.920293][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.193522][ T4367] qmi_wwan: probe of 4-1:1.0 failed with error -22 [ 241.218366][ T4367] usb 4-1: USB disconnect, device number 9 [ 241.259020][ T5759] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.266486][ T5759] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.700580][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.779432][ T5759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.322273][ T5759] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.331958][ T5759] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.341549][ T5759] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.350743][ T5759] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.493550][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.501163][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.191744][ T5872] using random self ethernet address [ 252.200721][ T5872] using random host ethernet address [ 252.348151][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.421212][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.844250][ T5838] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.853171][ T5838] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.862430][ T5838] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.871396][ T5838] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.083210][ T5615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.220503][ T5615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.898861][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.905246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.059415][ T5615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.095544][ T5615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.143780][ T5904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.451'. [ 256.465180][ T4625] device hsr_slave_0 left promiscuous mode [ 256.482131][ T4625] device hsr_slave_1 left promiscuous mode [ 256.494052][ T4625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.512851][ T4625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.536537][ T4625] device bridge_slave_1 left promiscuous mode [ 256.557443][ T4625] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.595695][ T4625] device bridge_slave_0 left promiscuous mode [ 256.615113][ T4625] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.686369][ T4625] device veth1_macvtap left promiscuous mode [ 256.699585][ T4625] device veth0_macvtap left promiscuous mode [ 256.712505][ T4625] device veth1_vlan left promiscuous mode [ 256.725286][ T4625] device veth0_vlan left promiscuous mode [ 262.192664][ T4289] cgroup: fork rejected by pids controller in /syz4 [ 262.227031][ T4625] team0 (unregistering): Port device team_slave_1 removed [ 262.309692][ T4625] team0 (unregistering): Port device team_slave_0 removed [ 262.360146][ T4625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.399762][ T4625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.408621][ T5731] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 262.605001][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 262.611933][ T5731] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.631805][ T5731] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.664483][ T5731] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 262.673565][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 262.681891][ T5731] usb 1-1: SerialNumber: syz [ 262.701302][ T5731] usb 1-1: 0:2 : does not exist [ 262.766733][ T4625] bond0 (unregistering): Released all slaves [ 262.932902][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 263.049553][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.123194][ T5731] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 263.142062][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.153528][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.164717][ T5731] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 263.184250][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.202615][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 263.224738][ T5731] usb 1-1: USB disconnect, device number 11 [ 263.244539][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 263.269534][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.277067][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.320762][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.346821][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 263.362629][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 263.391254][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.398543][ T4621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.448835][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.465643][ T4665] udevd[4665]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.512776][ T5615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.557828][ T5615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.694913][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.714314][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.880208][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.221242][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 264.438682][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 264.448879][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.458288][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.467618][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.498236][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.658729][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 264.885257][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.788782][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.808875][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.824033][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.833137][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.844480][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 266.851738][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.112592][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.121895][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.168939][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.356496][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 268.422275][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.437810][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.471431][ T5994] device bridge_slave_0 entered promiscuous mode [ 268.481126][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.488499][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.497103][ T5994] device bridge_slave_1 entered promiscuous mode [ 268.527763][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.539833][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.636441][ T5994] team0: Port device team_slave_0 added [ 268.655715][ T5994] team0: Port device team_slave_1 added [ 268.719334][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.758107][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.880488][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.904035][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 268.930795][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.614767][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.714065][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.773927][ T4383] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 269.818740][ T5994] device hsr_slave_0 entered promiscuous mode [ 269.828707][ T5994] device hsr_slave_1 entered promiscuous mode [ 269.846426][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.864240][ T5994] Cannot create hsr debugfs directory [ 269.964156][ T4383] usb 1-1: Using ep0 maxpacket: 8 [ 269.972169][ T4383] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.999479][ T4383] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 270.016295][ T4383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.030445][ T4383] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.052987][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 270.062921][ T4383] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 270.079961][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.089114][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.128200][ T5615] device veth0_vlan entered promiscuous mode [ 270.140271][ T4383] usb 1-1: Product: syz [ 270.144816][ T4383] usb 1-1: Manufacturer: syz [ 270.149445][ T4383] usb 1-1: SerialNumber: syz [ 270.161833][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 270.183166][ T4383] usb 1-1: config 0 descriptor?? [ 270.191051][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.200093][ T6038] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 270.225626][ T4383] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 270.237718][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.258382][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.268769][ T5615] device veth1_vlan entered promiscuous mode [ 270.372434][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 270.393510][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 270.420562][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.440256][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.448430][ T4283] usb 1-1: USB disconnect, device number 12 [ 270.486169][ T5615] device veth0_macvtap entered promiscuous mode [ 270.544887][ T5615] device veth1_macvtap entered promiscuous mode [ 270.634352][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.649068][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.659746][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.690874][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.710143][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.742455][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.884224][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.892986][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.953201][ T5615] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.982705][ T5615] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.991853][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 271.020483][ T5615] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.059977][ T5615] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.087336][ T6063] Invalid ELF header magic: != ELF [ 272.208078][ T4621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.225243][ T4621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.286203][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.365617][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.404386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.449070][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.536040][ T5994] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.073791][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 273.266691][ T5994] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.334170][ T5994] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.420045][ T5994] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.554898][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.577850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.617240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.657106][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.682331][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.712731][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.752926][ T4621] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.760134][ T4621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.801786][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.838001][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.898628][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.960699][ T4621] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.967889][ T4621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.070489][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.143921][ T4294] Bluetooth: hci0: command 0x0419 tx timeout [ 275.168166][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.177259][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.206372][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.241795][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.261523][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.324768][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.394578][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.470134][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 275.560517][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.614687][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.645801][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.663324][ T4621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.835167][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.846608][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.876570][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.596607][ T6174] Invalid ELF header magic: != ELF [ 281.034478][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.053299][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 282.133864][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.204950][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.266295][ T5994] device veth0_vlan entered promiscuous mode [ 282.275286][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.298051][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.370858][ T5994] device veth1_vlan entered promiscuous mode [ 282.613974][ T4283] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 283.322097][ T5994] device veth0_macvtap entered promiscuous mode [ 283.332000][ T5994] device veth1_macvtap entered promiscuous mode [ 283.368825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.407792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.434413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.443337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 283.461455][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.493477][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.513755][ T4283] usb 3-1: Using ep0 maxpacket: 8 [ 283.520880][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.527060][ T4283] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 283.567860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.264887][ T4283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 284.286030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.293955][ T4283] usb 3-1: Product: syz [ 284.391099][ T4283] usb 3-1: Manufacturer: syz [ 285.277142][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.293863][ T4283] usb 3-1: SerialNumber: syz [ 285.312991][ T4283] usb 3-1: config 0 descriptor?? [ 285.318793][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.375747][ T4283] usb 3-1: can't set config #0, error -71 [ 285.408898][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.428328][ T4283] usb 3-1: USB disconnect, device number 11 [ 285.467412][ T5994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.490487][ T26] audit: type=1326 audit(1788758525.380:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 285.503769][ T5994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.541336][ T5994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.542816][ T6208] Bluetooth: MGMT ver 1.22 [ 285.573698][ T5994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.584246][ T26] audit: type=1326 audit(1788758525.420:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 285.635132][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.644933][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.706969][ T26] audit: type=1326 audit(1788758525.420:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 285.853745][ T26] audit: type=1326 audit(1788758525.420:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 285.884938][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.904013][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.932982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.969965][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.970862][ T26] audit: type=1326 audit(1788758525.420:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 286.012174][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.039611][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.127909][ T26] audit: type=1326 audit(1788758525.420:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 286.168395][ T6216] device syzkaller1 entered promiscuous mode [ 286.274044][ T26] audit: type=1326 audit(1788758525.420:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 287.355162][ T26] audit: type=1326 audit(1788758525.420:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547379e159 code=0x7ffc0000 [ 287.463936][ T26] audit: type=1326 audit(1788758525.420:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547375e98e code=0x7ffc0000 [ 287.563813][ T26] audit: type=1326 audit(1788758525.420:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.2.517" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f547379f457 code=0x7ffc0000 [ 290.407449][ T6266] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.416457][ T6266] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.425483][ T6266] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.434307][ T6266] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.545450][ T6274] sctp: failed to load transform for md5: -2 [ 292.853746][ T4323] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 293.046888][ T4323] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 293.060834][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.092190][ T4323] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 293.135707][ T4323] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 293.176559][ T4323] usb 3-1: Manufacturer: syz [ 293.186283][ T4323] usb 3-1: config 0 descriptor?? [ 293.392539][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.427253][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.479425][ T4323] rc_core: IR keymap rc-hauppauge not found [ 293.499790][ T4323] Registered IR keymap rc-empty [ 293.520766][ T4323] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 293.568532][ T4323] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 293.640974][ T4323] usb 3-1: USB disconnect, device number 12 [ 296.047894][ T6326] Mass Storage Function, version: 2009/09/11 [ 296.089935][ T6326] LUN: removable file: (no medium) [ 297.620341][ T6346] FAULT_INJECTION: forcing a failure. [ 297.620341][ T6346] name failslab, interval 1, probability 1, space 0, times 0 [ 297.721636][ T6346] CPU: 0 PID: 6346 Comm: syz.5.537 Not tainted syzkaller #0 [ 297.729074][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.739174][ T6346] Call Trace: [ 297.742503][ T6346] [ 297.745467][ T6346] dump_stack_lvl+0x188/0x24e [ 297.750199][ T6346] ? show_regs_print_info+0x12/0x12 [ 297.755440][ T6346] ? load_image+0x410/0x410 [ 297.759991][ T6346] ? __lock_acquire+0x7c40/0x7c40 [ 297.765058][ T6346] ? _raw_spin_lock_irq+0xb7/0xf0 [ 297.770088][ T6346] ? _raw_spin_lock_irqsave+0x100/0x100 [ 297.775642][ T6346] should_fail_ex+0x390/0x4c0 [ 297.780329][ T6346] should_failslab+0x5/0x20 [ 297.784827][ T6346] slab_pre_alloc_hook+0x59/0x300 [ 297.789852][ T6346] kmem_cache_alloc+0x56/0x2f0 [ 297.794612][ T6346] ? copy_utsname+0x117/0x430 [ 297.799294][ T6346] copy_utsname+0x117/0x430 [ 297.803803][ T6346] create_new_namespaces+0x17b/0x700 [ 297.809098][ T6346] ? bpf_lsm_capable+0x5/0x10 [ 297.813806][ T6346] unshare_nsproxy_namespaces+0x116/0x160 [ 297.819526][ T6346] ksys_unshare+0x4f6/0x8e0 [ 297.824054][ T6346] ? sighand_ctor+0x40/0x40 [ 297.828603][ T6346] ? lock_chain_count+0x20/0x20 [ 297.833462][ T6346] ? syscall_enter_from_user_mode+0x21/0x80 [ 297.839357][ T6346] __x64_sys_unshare+0x34/0x40 [ 297.844126][ T6346] do_syscall_64+0x4c/0xa0 [ 297.848647][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 297.853328][ T6346] ? clear_bhb_loop+0x60/0xb0 [ 297.858007][ T6346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.863909][ T6346] RIP: 0033:0x7f49a899e159 [ 297.868319][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.887924][ T6346] RSP: 002b:00007f49a9863028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 297.896335][ T6346] RAX: ffffffffffffffda RBX: 00007f49a8c25fa0 RCX: 00007f49a899e159 [ 297.904344][ T6346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 297.912339][ T6346] RBP: 00007f49a8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 297.920340][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.928307][ T6346] R13: 00007f49a8c26038 R14: 00007f49a8c25fa0 R15: 00007ffd34387038 [ 297.936291][ T6346] [ 304.223816][ T5731] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 304.413850][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 304.425572][ T5731] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 304.470254][ T5731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.519697][ T5731] usb 5-1: config 0 descriptor?? [ 304.562210][ T5731] usb 5-1: probing VID:PID(0424:012C) [ 304.581702][ T5731] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 304.615179][ T5731] vub300: probe of 5-1:0.0 failed with error -22 [ 304.769205][ T4322] usb 5-1: USB disconnect, device number 8 [ 307.637525][ T6445] Mass Storage Function, version: 2009/09/11 [ 307.670392][ T6445] LUN: removable file: (no medium) [ 310.017711][ T6487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.578'. [ 316.834131][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.843498][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.250661][ T6579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.736332][ T4283] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 322.784640][ T4283] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.158320][ T6649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.524088][ T4283] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 328.987036][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.013780][ T4283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.047631][ T4283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.203754][ T4283] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.212873][ T4283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.024345][ T4283] usb 3-1: config 0 descriptor?? [ 332.644696][ T4283] usbhid 3-1:0.0: can't add hid device: -71 [ 332.661173][ T4283] usbhid: probe of 3-1:0.0 failed with error -71 [ 332.713947][ T4283] usb 3-1: USB disconnect, device number 13 [ 332.880607][ T6736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.496791][ T6802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.109854][ T6824] tipc: Resetting bearer [ 343.117022][ T6824] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.126043][ T6824] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.135003][ T6824] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.143936][ T6824] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.663974][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 352.272029][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.279618][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.042754][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.129245][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.787856][ T6880] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.796861][ T6880] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.806049][ T6880] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.815039][ T6880] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.524486][ T4283] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 355.720221][ T4283] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.731232][ T4283] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.741418][ T4283] usb 6-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 355.750863][ T4283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.779303][ T4283] usb 6-1: config 0 descriptor?? [ 356.014028][ T4283] usb 6-1: USB disconnect, device number 2 [ 356.078753][ T6953] FAULT_INJECTION: forcing a failure. [ 356.078753][ T6953] name failslab, interval 1, probability 1, space 0, times 0 [ 356.137113][ T6953] CPU: 1 PID: 6953 Comm: syz.3.696 Not tainted syzkaller #0 [ 356.144465][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.154545][ T6953] Call Trace: [ 356.157842][ T6953] [ 356.160794][ T6953] dump_stack_lvl+0x188/0x24e [ 356.165505][ T6953] ? show_regs_print_info+0x12/0x12 [ 356.170709][ T6953] ? load_image+0x410/0x410 [ 356.175214][ T6953] ? __might_sleep+0xd0/0xd0 [ 356.179802][ T6953] ? __lock_acquire+0x7c40/0x7c40 [ 356.184855][ T6953] should_fail_ex+0x390/0x4c0 [ 356.189540][ T6953] should_failslab+0x5/0x20 [ 356.194053][ T6953] slab_pre_alloc_hook+0x59/0x300 [ 356.199109][ T6953] ? snd_seq_oss_timer_new+0x4d/0x220 [ 356.204512][ T6953] __kmem_cache_alloc_node+0x4f/0x270 [ 356.209994][ T6953] ? snd_seq_oss_timer_new+0x4d/0x220 [ 356.215383][ T6953] kmalloc_trace+0x26/0xe0 [ 356.219850][ T6953] snd_seq_oss_timer_new+0x4d/0x220 [ 356.225064][ T6953] snd_seq_oss_open+0x8a8/0xf00 [ 356.229934][ T6953] ? snd_seq_oss_delete_client+0x50/0x50 [ 356.235620][ T6953] ? trace_raw_output_contention_end+0xd0/0xd0 [ 356.241817][ T6953] ? odev_open+0x58/0x90 [ 356.246077][ T6953] ? __lock_acquire+0x7c40/0x7c40 [ 356.251140][ T6953] ? snd_seq_oss_process_event+0x2910/0x2910 [ 356.257131][ T6953] ? async_call_lookup_ports+0x10/0x10 [ 356.262602][ T6953] ? do_raw_spin_unlock+0x11d/0x230 [ 356.267817][ T6953] ? soundcore_open+0x309/0x4b0 [ 356.272703][ T6953] odev_open+0x63/0x90 [ 356.276806][ T6953] chrdev_open+0x585/0x5f0 [ 356.281255][ T6953] ? cd_forget+0x160/0x160 [ 356.285695][ T6953] ? fsnotify_perm+0x39b/0x550 [ 356.290485][ T6953] ? cd_forget+0x160/0x160 [ 356.294921][ T6953] do_dentry_open+0x7dd/0x10b0 [ 356.299727][ T6953] path_openat+0x2674/0x2f10 [ 356.304361][ T6953] ? verify_lock_unused+0x140/0x140 [ 356.309589][ T6953] ? do_sys_openat2+0xdd/0x4f0 [ 356.314378][ T6953] ? do_filp_open+0x420/0x420 [ 356.319083][ T6953] do_filp_open+0x1ee/0x420 [ 356.323605][ T6953] ? vfs_tmpfile+0x470/0x470 [ 356.328226][ T6953] ? _raw_spin_unlock+0x24/0x40 [ 356.333111][ T6953] ? alloc_fd+0x590/0x640 [ 356.337462][ T6953] do_sys_openat2+0x14b/0x4f0 [ 356.342163][ T6953] ? do_sys_open+0xe0/0xe0 [ 356.346602][ T6953] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 356.352607][ T6953] ? lock_chain_count+0x20/0x20 [ 356.357491][ T6953] __x64_sys_openat+0x135/0x160 [ 356.362374][ T6953] do_syscall_64+0x4c/0xa0 [ 356.366821][ T6953] ? clear_bhb_loop+0x60/0xb0 [ 356.371533][ T6953] ? clear_bhb_loop+0x60/0xb0 [ 356.376281][ T6953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.382202][ T6953] RIP: 0033:0x7f87f859e159 [ 356.386640][ T6953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.406278][ T6953] RSP: 002b:00007f87f9537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.414718][ T6953] RAX: ffffffffffffffda RBX: 00007f87f8825fa0 RCX: 00007f87f859e159 [ 356.422701][ T6953] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 356.430711][ T6953] RBP: 00007f87f8635024 R08: 0000000000000000 R09: 0000000000000000 [ 356.438697][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.446682][ T6953] R13: 00007f87f8826038 R14: 00007f87f8825fa0 R15: 00007ffd82f86a38 [ 356.454681][ T6953] [ 356.523826][ T6953] ALSA: seq_oss: can't alloc timer [ 357.698368][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 362.938302][ T4370] tipc: Left network mode [ 368.142559][ T4294] Bluetooth: hci1: command 0x0406 tx timeout [ 370.345639][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.353120][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.422257][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.489878][ T7075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.647121][ T7075] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.686587][ T7075] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.696562][ T7075] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.709136][ T7075] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.963864][ T4363] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 374.054023][ T7143] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.062833][ T7143] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.071849][ T7143] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.080684][ T7143] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.253824][ T4363] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.431474][ T4370] device hsr_slave_0 left promiscuous mode [ 374.507438][ T7149] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 375.053257][ T4363] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 375.062374][ T4363] usb 3-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 375.071559][ T4363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.081297][ T4363] usb 3-1: config 0 descriptor?? [ 375.183990][ T4370] device hsr_slave_1 left promiscuous mode [ 375.220568][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.854842][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.045738][ T4370] device bridge_slave_1 left promiscuous mode [ 377.195252][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.383102][ T4370] device bridge_slave_0 left promiscuous mode [ 377.488999][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.636064][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646293][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.735324][ T4262] usb 3-1: USB disconnect, device number 14 [ 378.905918][ T7169] IPVS: nq: FWM 3 0x00000003 - no destination available [ 379.392897][ T4363] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.607655][ T4363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.620085][ T4363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.642701][ T4363] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 379.679362][ T4363] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 379.719256][ T4363] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.749491][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.767894][ T4363] usb 5-1: Product: syz [ 379.776667][ T4363] usb 5-1: Manufacturer: syz [ 379.787246][ T4363] usb 5-1: SerialNumber: syz [ 380.018055][ T4363] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 380.036972][ T4363] cdc_ncm 5-1:1.0: bind() failure [ 380.056864][ T4363] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 380.064251][ T4363] cdc_ncm 5-1:1.1: bind() failure [ 380.093965][ T4363] usb 5-1: USB disconnect, device number 9 [ 380.161867][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 380.200451][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 380.234250][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.270492][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.509991][ T4370] bond0 (unregistering): Released all slaves [ 383.403848][ T4283] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 384.314365][ T4283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 384.354850][ T4283] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 384.422143][ T4283] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 384.451369][ T4283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.476487][ T4283] usb 6-1: Product: syz [ 384.481788][ T4283] usb 6-1: Manufacturer: syz [ 384.488638][ T4283] usb 6-1: SerialNumber: syz [ 385.838158][ T4283] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 386.460834][ T7241] xt_TCPMSS: Only works on TCP SYN packets [ 387.347218][ T7] usb 6-1: USB disconnect, device number 3 [ 387.371174][ T7] usblp0: removed [ 388.894203][ T4262] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 388.913192][ T7260] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 390.275113][ T4262] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.296228][ T4262] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.314422][ T4262] usb 5-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 390.330239][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.359234][ T4262] usb 5-1: config 0 descriptor?? [ 390.584501][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 390.656693][ T4262] usb 5-1: USB disconnect, device number 10 [ 391.971844][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 391.971858][ T26] audit: type=1326 audit(1788758631.860:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7284 comm="syz.5.791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49a899e159 code=0x0 [ 392.033682][ T26] audit: type=1326 audit(1788758631.920:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.4.792" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd63699e159 code=0x0 [ 393.730476][ T7302] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 394.198394][ T33] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 394.233691][ T7] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 394.395606][ T33] usb 4-1: unable to get BOS descriptor or descriptor too short [ 394.405637][ T33] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 394.418572][ T7317] device bridge_slave_0 left promiscuous mode [ 394.418749][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.432214][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 394.433226][ T33] usb 4-1: string descriptor 0 read error: -22 [ 394.444118][ T33] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 394.448960][ T7] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.453447][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.484101][ T7317] device bridge_slave_1 left promiscuous mode [ 394.485724][ T7] usb 6-1: config 0 interface 0 has no altsetting 0 [ 394.490561][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.509165][ T7] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 394.520352][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.529555][ T7317] bond0: (slave bond_slave_0): Releasing backup interface [ 394.534031][ T7] usb 6-1: Product: syz [ 394.542875][ T7] usb 6-1: Manufacturer: syz [ 394.548258][ T7317] bond0: (slave bond_slave_1): Releasing backup interface [ 394.553916][ T7] usb 6-1: SerialNumber: syz [ 394.565553][ T7317] team0: Port device team_slave_0 removed [ 394.583090][ T7] usb 6-1: config 0 descriptor?? [ 394.588862][ T7317] team0: Port device team_slave_1 removed [ 394.595820][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.603895][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.617693][ T7317] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 394.638857][ T7318] team0: Port device xfrm0 added [ 394.650001][ T7319] tipc: Enabled bearer , priority 0 [ 394.809361][ T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 395.547140][ T33] usb 4-1: USB disconnect, device number 10 [ 397.163826][ T7] rc_core: IR keymap rc-imon-pad not found [ 397.169758][ T7] Registered IR keymap rc-empty [ 397.179725][ T7] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 397.207022][ T7] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 397.221948][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 397.256697][ T4664] udevd[4664]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.276014][ T7] imon:send_packet: packet tx failed (-71) [ 397.293854][ T7] imon 6-1:0.0: remote input dev register failed [ 397.300319][ T7] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 397.385191][ T7] imon 6-1:0.0: unable to initialize intf0, err 0 [ 397.411647][ T7] imon:imon_probe: failed to initialize context! [ 397.428825][ T7] imon 6-1:0.0: unable to register, err -19 [ 397.443737][ T4363] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 397.468362][ T7] usb 6-1: USB disconnect, device number 4 [ 398.852810][ T4363] usb 1-1: device descriptor read/all, error -71 [ 399.204691][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 400.238652][ T7362] process 'syz.3.817' launched './file0' with NULL argv: empty string added [ 402.230488][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.5.822'. [ 403.133340][ T7376] netem: change failed [ 404.418060][ T7399] tipc: Resetting bearer [ 404.460143][ T7399] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.469177][ T7399] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.478289][ T7399] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.487227][ T7399] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.504080][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 405.841856][ T4283] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 405.877108][ T7408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 405.893693][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 405.900894][ T7] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 405.917420][ T7408] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 405.930913][ T7] usb 6-1: config 179 has no interface number 0 [ 405.951145][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 405.992781][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 406.048524][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.087490][ T7] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 406.149397][ T7] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 406.168196][ T4283] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 406.183837][ T4283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.191881][ T4283] usb 4-1: Product: syz [ 406.194697][ T7] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.215680][ T4283] usb 4-1: Manufacturer: syz [ 406.216415][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.221333][ T4283] usb 4-1: SerialNumber: syz [ 406.248065][ T4283] usb 4-1: config 0 descriptor?? [ 406.255892][ T7393] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 406.266296][ T7418] autofs4:pid:7418:autofs_fill_super: called with bogus options [ 406.483888][ T7] usb 6-1: USB disconnect, device number 6 [ 406.483946][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 406.498182][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.301999][ T4283] usb 4-1: non-Atmel transceiver xxxx251f [ 408.504044][ T4283] usb 4-1: Firmware version (0.0) predates our first public release. [ 408.512199][ T4283] usb 4-1: Please update to version 0.2 or newer [ 408.534207][ T4283] usb 4-1: atusb_probe: initialization failed, error = -19 [ 408.700594][ T7428] netlink: 52 bytes leftover after parsing attributes in process `syz.5.837'. [ 408.722263][ T4283] usb 4-1: USB disconnect, device number 11 [ 411.861610][ T7446] autofs4:pid:7446:autofs_fill_super: called with bogus options [ 413.163720][ T4283] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 413.841497][ T7466] xt_TCPMSS: Only works on TCP SYN packets [ 414.695660][ T4283] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 414.720091][ T4283] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 414.761372][ T4283] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 414.825132][ T4283] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.901191][ T4283] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.913703][ T4283] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 414.923233][ T4283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.958098][ T7455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 414.966797][ T7455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.018200][ T7455] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 415.156675][ T4283] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 415.593897][ T4283] usb 1-1: mos7720: usb_control_msg() failed: -71 [ 416.394146][ T4283] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 416.406712][ T4283] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 416.442770][ T4283] usb 1-1: USB disconnect, device number 15 [ 416.448799][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 416.465200][ T4283] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 416.477178][ T4283] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 416.487724][ T4283] mos7720 1-1:1.0: device disconnected [ 416.653976][ T7475] netlink: 52 bytes leftover after parsing attributes in process `syz.0.851'. [ 418.738216][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 418.752943][ T7493] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 418.767211][ T7493] overlayfs: missing 'lowerdir' [ 419.304321][ T7496] xt_TCPMSS: Only works on TCP SYN packets [ 420.215645][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 420.222729][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.258660][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 420.280428][ T7] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 420.289784][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.303148][ T7] usb 1-1: Product: syz [ 420.307591][ T7] usb 1-1: Manufacturer: syz [ 420.312225][ T7] usb 1-1: SerialNumber: syz [ 420.332013][ T7] usb 1-1: config 0 descriptor?? [ 420.562262][ T7] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 421.233954][ T7] rc_core: IR keymap rc-imon-pad not found [ 421.240065][ T7] Registered IR keymap rc-empty [ 421.262375][ T7] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 421.302502][ T7] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 421.407255][ T7] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 421.423173][ T7] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 421.473490][ T7] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:16> initialized [ 422.622910][ C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 422.633287][ T4283] usb 1-1: USB disconnect, device number 16 [ 422.848710][ T7517] netlink: 52 bytes leftover after parsing attributes in process `syz.4.864'. [ 423.891380][ T7525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.868'. [ 423.933064][ T7525] netem: change failed [ 426.595083][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.879'. [ 427.434367][ T4363] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 427.664008][ T4363] usb 6-1: Using ep0 maxpacket: 32 [ 427.699079][ T4363] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 427.819421][ T4363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.134058][ T4363] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 428.349925][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 428.393727][ T7565] netem: change failed [ 428.773254][ T4363] gspca_nw80x: reg_w err -71 [ 428.779094][ T4363] nw80x: probe of 6-1:3.0 failed with error -71 [ 428.806840][ T4363] usb 6-1: USB disconnect, device number 7 [ 428.872587][ T7577] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.881624][ T7577] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.890406][ T7577] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.899163][ T7577] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.491064][ T7579] 9pnet_fd: Insufficient options for proto=fd [ 433.748477][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 433.788205][ T7604] netem: change failed [ 433.981162][ T7608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.898'. [ 434.662904][ T7629] FAULT_INJECTION: forcing a failure. [ 434.662904][ T7629] name failslab, interval 1, probability 1, space 0, times 0 [ 434.720657][ T7629] CPU: 0 PID: 7629 Comm: syz.5.907 Not tainted syzkaller #0 [ 434.728015][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.738523][ T7629] Call Trace: [ 434.741803][ T7629] [ 434.744736][ T7629] dump_stack_lvl+0x188/0x24e [ 434.749428][ T7629] ? show_regs_print_info+0x12/0x12 [ 434.754668][ T7629] ? load_image+0x410/0x410 [ 434.759200][ T7629] ? __might_sleep+0xd0/0xd0 [ 434.763790][ T7629] ? __lock_acquire+0x7c40/0x7c40 [ 434.768828][ T7629] should_fail_ex+0x390/0x4c0 [ 434.773523][ T7629] should_failslab+0x5/0x20 [ 434.778066][ T7629] slab_pre_alloc_hook+0x59/0x300 [ 434.783095][ T7629] kmem_cache_alloc+0x56/0x2f0 [ 434.787862][ T7629] ? mas_alloc_nodes+0x2ec/0x880 [ 434.792810][ T7629] mas_alloc_nodes+0x2ec/0x880 [ 434.797619][ T7629] mas_preallocate+0x162/0x3b0 [ 434.802405][ T7629] __vma_adjust+0x2ff/0x1d00 [ 434.807039][ T7629] ? validate_mm+0x2e0/0x2e0 [ 434.811659][ T7629] ? up_write+0x1b6/0x410 [ 434.816002][ T7629] ? anon_vma_clone+0x475/0x4c0 [ 434.820858][ T7629] __split_vma+0x3a2/0x4f0 [ 434.825299][ T7629] userfaultfd_ioctl+0x36d0/0x3f90 [ 434.830455][ T7629] ? userfaultfd_poll+0x1c0/0x1c0 [ 434.835514][ T7629] ? tomoyo_path_number_perm+0x205/0x650 [ 434.841188][ T7629] ? __lock_acquire+0x7c40/0x7c40 [ 434.846236][ T7629] ? slab_free_freelist_hook+0x133/0x1b0 [ 434.851894][ T7629] ? tomoyo_path_number_perm+0x4fb/0x650 [ 434.857543][ T7629] ? __kmem_cache_free+0xb6/0x200 [ 434.862591][ T7629] ? tomoyo_path_number_perm+0x205/0x650 [ 434.868243][ T7629] ? tomoyo_path_number_perm+0x5a4/0x650 [ 434.873890][ T7629] ? tomoyo_path_number_perm+0x205/0x650 [ 434.879539][ T7629] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 434.885051][ T7629] ? bpf_lsm_file_ioctl+0x5/0x10 [ 434.890017][ T7629] ? security_file_ioctl+0x7c/0xa0 [ 434.895153][ T7629] ? userfaultfd_poll+0x1c0/0x1c0 [ 434.900191][ T7629] __se_sys_ioctl+0xfa/0x170 [ 434.904806][ T7629] do_syscall_64+0x4c/0xa0 [ 434.909257][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 434.913999][ T7629] ? clear_bhb_loop+0x60/0xb0 [ 434.918700][ T7629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.924644][ T7629] RIP: 0033:0x7f49a899e159 [ 434.929072][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.948701][ T7629] RSP: 002b:00007f49a9842028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.957128][ T7629] RAX: ffffffffffffffda RBX: 00007f49a8c26090 RCX: 00007f49a899e159 [ 434.965109][ T7629] RDX: 0000200000000080 RSI: 00000000c020aa00 RDI: 0000000000000003 [ 434.973090][ T7629] RBP: 00007f49a8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 434.981113][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.989165][ T7629] R13: 00007f49a8c26128 R14: 00007f49a8c26090 R15: 00007ffd34387038 [ 434.997192][ T7629] [ 438.727746][ T7650] Can't find ip_set type [ 438.865792][ T7663] gadgetfs: bound to dummy_udc driver [ 439.835313][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.841851][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.323846][ T7] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 440.336604][ C0] gadgetfs: connected [ 440.342999][ T7662] gadgetfs: suspended from state 3 [ 440.348808][ T7662] gadgetfs: disconnected [ 443.899155][ T7696] Can't find ip_set type [ 446.996785][ T7728] nvmet: adding nsid 1 to subsystem testsubsys [ 447.046443][ T7728] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 447.058222][ T7728] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 447.066666][ T7728] CPU: 0 PID: 7728 Comm: syz.4.938 Not tainted syzkaller #0 [ 447.074007][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 447.084098][ T7728] RIP: 0010:strlen+0x25/0x60 [ 447.088732][ T7728] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 447.108377][ T7728] RSP: 0018:ffffc9000e92f9c0 EFLAGS: 00010246 [ 447.114490][ T7728] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 447.122497][ T7728] RDX: ffffc9000ce49000 RSI: 0000000000000794 RDI: 0000000000000000 [ 447.130507][ T7728] RBP: ffffc9000e92faf8 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 447.138511][ T7728] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: 1ffff92001d25f48 [ 447.146517][ T7728] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 447.154527][ T7728] FS: 00007fd6378786c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 447.163482][ T7728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.170089][ T7728] CR2: 000055870f3d2168 CR3: 0000000057df2000 CR4: 00000000003506f0 [ 447.178099][ T7728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.186102][ T7728] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.194095][ T7728] Call Trace: [ 447.197391][ T7728] [ 447.200366][ T7728] getname_kernel+0x24/0x2f0 [ 447.204994][ T7728] filp_open+0x84/0x1e0 [ 447.209210][ T7728] ? file_open_name+0x1b0/0x1b0 [ 447.214101][ T7728] ? nvmet_ns_enable+0x49/0x8c0 [ 447.219000][ T7728] ? mutex_lock_nested+0x10/0x10 [ 447.224002][ T7728] nvmet_file_ns_enable+0x70/0x330 [ 447.229183][ T7728] ? rwsem_write_trylock+0x135/0x1c0 [ 447.234514][ T7728] nvmet_ns_enable+0xf0/0x8c0 [ 447.239232][ T7728] nvmet_ns_enable_store+0xd4/0x170 [ 447.244471][ T7728] ? nvmet_ns_enable_show+0x60/0x60 [ 447.249721][ T7728] ? down_read+0x1a8/0x2d0 [ 447.254166][ T7728] configfs_write_iter+0x30b/0x400 [ 447.259315][ T7728] ? nvmet_ns_enable_show+0x60/0x60 [ 447.264550][ T7728] vfs_write+0x482/0x9a0 [ 447.268850][ T7728] ? file_end_write+0x250/0x250 [ 447.273798][ T7728] ? __fget_files+0x3fc/0x460 [ 447.278519][ T7728] ? __fdget_pos+0x2ae/0x360 [ 447.283164][ T7728] ? ksys_write+0x70/0x260 [ 447.287633][ T7728] ksys_write+0x14d/0x260 [ 447.292004][ T7728] ? __ia32_sys_read+0x80/0x80 [ 447.296811][ T7728] ? lockdep_hardirqs_on+0x94/0x140 [ 447.302053][ T7728] do_syscall_64+0x4c/0xa0 [ 447.306502][ T7728] ? clear_bhb_loop+0x60/0xb0 [ 447.311224][ T7728] ? clear_bhb_loop+0x60/0xb0 [ 447.315949][ T7728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.321906][ T7728] RIP: 0033:0x7fd63699e159 [ 447.326362][ T7728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.345993][ T7728] RSP: 002b:00007fd637878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.354449][ T7728] RAX: ffffffffffffffda RBX: 00007fd636c25fa0 RCX: 00007fd63699e159 [ 447.362451][ T7728] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: 0000000000000004 [ 447.370455][ T7728] RBP: 00007fd636a35024 R08: 0000000000000000 R09: 0000000000000000 [ 447.378464][ T7728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.386464][ T7728] R13: 00007fd636c26038 R14: 00007fd636c25fa0 R15: 00007ffc2cc18648 [ 447.394486][ T7728] [ 447.397545][ T7728] Modules linked in: [ 447.494023][ T7728] ---[ end trace 0000000000000000 ]--- [ 447.609325][ T7728] RIP: 0010:strlen+0x25/0x60 [ 447.736761][ T7728] Code: da 0f 1f 40 00 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 448.027971][ T7728] RSP: 0018:ffffc9000e92f9c0 EFLAGS: 00010246 [ 448.115604][ T7728] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 448.225766][ T7728] RDX: ffffc9000ce49000 RSI: 0000000000000794 RDI: 0000000000000000 [ 448.281570][ T7728] RBP: ffffc9000e92faf8 R08: ffffffff8e2116af R09: 1ffffffff1c422d5 [ 448.289716][ T7728] R10: dffffc0000000000 R11: fffffbfff1c422d6 R12: 1ffff92001d25f48 [ 448.297811][ T7728] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 448.307057][ T7728] FS: 00007fd6378786c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 448.316128][ T7728] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.322791][ T7728] CR2: 0000200000006000 CR3: 0000000057df2000 CR4: 00000000003506f0 [ 448.330931][ T7728] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.339032][ T7728] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.347369][ T7728] Kernel panic - not syncing: Fatal exception [ 448.354046][ T7728] Kernel Offset: disabled [ 448.358389][ T7728] Rebooting in 86400 seconds..