last executing test programs: 15.018572654s ago: executing program 1 (id=483): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 14.941929656s ago: executing program 0 (id=484): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 14.81895107s ago: executing program 1 (id=485): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000014) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003"], 0x0) 14.716868114s ago: executing program 0 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 13.520476456s ago: executing program 0 (id=489): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000440)={'\x00', 0x0, 0x100, 0x1, 0x0, 0x808, 0xffff1000, 0x70000, '\x00', 0x4}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.0961125s ago: executing program 1 (id=492): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12.98317542s ago: executing program 4 (id=493): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 12.917206403s ago: executing program 2 (id=494): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000") 12.105914227s ago: executing program 1 (id=495): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 12.075311354s ago: executing program 4 (id=496): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 10.995666518s ago: executing program 2 (id=497): sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000014) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c03209040000020806500007050102000200070582020002000904000104080662000705010200020003"], 0x0) 10.912367151s ago: executing program 3 (id=498): openat(0xffffffffffffff9c, 0x0, 0x20846, 0x2) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10.737494781s ago: executing program 1 (id=499): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 10.666922436s ago: executing program 4 (id=500): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.848346331s ago: executing program 0 (id=501): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 9.514822342s ago: executing program 1 (id=502): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) unshare(0x40000000) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xa) 9.490040311s ago: executing program 4 (id=503): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x7) socket$inet(0x2, 0xa, 0x200000) syz_usbip_server_init(0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) userfaultfd(0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 8.360608579s ago: executing program 0 (id=504): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a1\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000040f7eca4d7"], 0x40) write(r2, 0x0, 0x0) symlinkat(&(0x7f0000000340)='usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='usb_gadget/g1/configs/c.1/ecm.usb0\x00') nanosleep(&(0x7f0000000440)={0x0, 0x1dcd6500}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', 0x1}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$packet(0x11, 0x3, 0x300) 8.355678062s ago: executing program 2 (id=505): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 8.28616541s ago: executing program 3 (id=506): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 8.162996554s ago: executing program 2 (id=507): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xe8962, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r5, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000002000000") 8.02704239s ago: executing program 3 (id=508): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x402, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0xf000000, 0x0, 0x12}, 0x4004004) 6.998828124s ago: executing program 4 (id=509): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.894293673s ago: executing program 2 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x8100, 0xd, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da2", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./config\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x2, 0x0) 6.822654564s ago: executing program 3 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x658, @empty, 0x0, 0x6}, 0x20) 6.762330591s ago: executing program 0 (id=512): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x40000000) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xa) 5.97110005s ago: executing program 2 (id=513): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 5.963516061s ago: executing program 4 (id=514): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x4008000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="44001029", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf2501000000050004000100000006001a004e230000050021000100000008001800ac1414bb06000300070000"], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000802000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x31) write(r1, &(0x7f0000000140)='off', 0x3) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) write(r1, &(0x7f0000000180)='on', 0x2) 5.794887122s ago: executing program 3 (id=515): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 0s ago: executing program 3 (id=516): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x3, 0x2, 0x20, 0x11, 0x0, @empty, @empty}, {0x4e23, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e541ff86db87a41f716be8e1fa0ff8fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28290b8a3bc8849d266124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 65.285950][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.311920][ T5248] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. syzkaller login: [ 92.130808][ T31] cfg80211: failed to load regulatory.db [ 94.443108][ T5573] cgroup: Unknown subsys name 'net' [ 94.673754][ T5573] cgroup: Unknown subsys name 'cpuset' [ 94.747637][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.750095][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.512329][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.538582][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.546221][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.584848][ T5603] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.601280][ T5603] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.618146][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.626672][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.627104][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.654087][ T5603] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.662899][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.663807][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.666700][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.695717][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.702095][ T5603] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.705373][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.708886][ T5600] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.732457][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.735681][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.742884][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.765760][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.933117][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.951671][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.953299][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.974169][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.985343][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.870573][ T59] Bluetooth: hci2: command tx timeout [ 101.947967][ T59] Bluetooth: hci3: command tx timeout [ 101.948083][ T59] Bluetooth: hci0: command tx timeout [ 101.948165][ T59] Bluetooth: hci1: command tx timeout [ 102.027006][ T5598] Bluetooth: hci4: command tx timeout [ 102.657430][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.658696][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.658875][ T5593] bridge_slave_0: entered allmulticast mode [ 102.660958][ T5593] bridge_slave_0: entered promiscuous mode [ 102.734225][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.734336][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.734927][ T5593] bridge_slave_1: entered allmulticast mode [ 102.736763][ T5593] bridge_slave_1: entered promiscuous mode [ 102.786768][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.787791][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.788299][ T5590] bridge_slave_0: entered allmulticast mode [ 102.804091][ T5590] bridge_slave_0: entered promiscuous mode [ 102.863702][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.863837][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.864004][ T5592] bridge_slave_0: entered allmulticast mode [ 102.866250][ T5592] bridge_slave_0: entered promiscuous mode [ 102.888203][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.888463][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.888943][ T5590] bridge_slave_1: entered allmulticast mode [ 102.907843][ T5590] bridge_slave_1: entered promiscuous mode [ 102.949802][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.949926][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.950062][ T5601] bridge_slave_0: entered allmulticast mode [ 102.952458][ T5601] bridge_slave_0: entered promiscuous mode [ 102.954387][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.954513][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.954686][ T5592] bridge_slave_1: entered allmulticast mode [ 102.962800][ T5592] bridge_slave_1: entered promiscuous mode [ 103.019011][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.019116][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.019267][ T5589] bridge_slave_0: entered allmulticast mode [ 103.021093][ T5589] bridge_slave_0: entered promiscuous mode [ 103.026622][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.026862][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.035866][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.036433][ T5601] bridge_slave_1: entered allmulticast mode [ 103.052920][ T5601] bridge_slave_1: entered promiscuous mode [ 103.124754][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.124882][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.125062][ T5589] bridge_slave_1: entered allmulticast mode [ 103.136073][ T5589] bridge_slave_1: entered promiscuous mode [ 103.162231][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.204355][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.265622][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.274027][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.319548][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.322817][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.357790][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.362015][ T5593] team0: Port device team_slave_0 added [ 103.364772][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.436577][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.448620][ T5593] team0: Port device team_slave_1 added [ 103.485756][ T5590] team0: Port device team_slave_0 added [ 103.539931][ T5592] team0: Port device team_slave_0 added [ 103.542231][ T5590] team0: Port device team_slave_1 added [ 103.585306][ T5601] team0: Port device team_slave_0 added [ 103.592922][ T5592] team0: Port device team_slave_1 added [ 103.615259][ T5589] team0: Port device team_slave_0 added [ 103.616664][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.616676][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.616698][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.634736][ T5601] team0: Port device team_slave_1 added [ 103.697934][ T5589] team0: Port device team_slave_1 added [ 103.698811][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.698823][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.698842][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.768032][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.768049][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.768078][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.849838][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.849855][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.849881][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.853602][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.853620][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.853648][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.936654][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.936671][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.936696][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.947005][ T5598] Bluetooth: hci2: command tx timeout [ 103.953128][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.953193][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.953282][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.010955][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.011004][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.011068][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.027036][ T5598] Bluetooth: hci1: command tx timeout [ 104.027071][ T5598] Bluetooth: hci0: command tx timeout [ 104.027095][ T5598] Bluetooth: hci3: command tx timeout [ 104.027728][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.027761][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.027841][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.117652][ T59] Bluetooth: hci4: command tx timeout [ 104.156635][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.156652][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.156677][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.681047][ T5593] hsr_slave_0: entered promiscuous mode [ 104.682338][ T5593] hsr_slave_1: entered promiscuous mode [ 104.699649][ T5590] hsr_slave_0: entered promiscuous mode [ 104.700715][ T5590] hsr_slave_1: entered promiscuous mode [ 104.701586][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 104.701689][ T5590] Cannot create hsr debugfs directory [ 104.771768][ T5592] hsr_slave_0: entered promiscuous mode [ 104.773865][ T5592] hsr_slave_1: entered promiscuous mode [ 104.774565][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 104.774593][ T5592] Cannot create hsr debugfs directory [ 104.818040][ T5601] hsr_slave_0: entered promiscuous mode [ 104.819096][ T5601] hsr_slave_1: entered promiscuous mode [ 104.819777][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 104.819796][ T5601] Cannot create hsr debugfs directory [ 104.873126][ T5589] hsr_slave_0: entered promiscuous mode [ 104.874616][ T5589] hsr_slave_1: entered promiscuous mode [ 104.875549][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 104.875574][ T5589] Cannot create hsr debugfs directory [ 105.982840][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.028002][ T59] Bluetooth: hci2: command tx timeout [ 106.031304][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.052820][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.094388][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.108556][ T5598] Bluetooth: hci3: command tx timeout [ 106.108593][ T5598] Bluetooth: hci1: command tx timeout [ 106.110317][ T59] Bluetooth: hci0: command tx timeout [ 106.112814][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.145444][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.173174][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.187196][ T59] Bluetooth: hci4: command tx timeout [ 106.215007][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.331645][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.360864][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.366142][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.401270][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.408672][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.451663][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.482942][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.513206][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.689911][ T5601] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.732210][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.736003][ T5601] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.766624][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.782955][ T5601] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.821496][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.856638][ T5601] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.900831][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.092327][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.132362][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.151944][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.192826][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.211932][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.241038][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.281886][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.301652][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.394460][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.534287][ T5590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.583636][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.603258][ T5590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.652043][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.673948][ T5590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.700963][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.721630][ T5590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.761623][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.765331][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.833525][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.834096][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.902889][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.915023][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.915138][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.055076][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.108304][ T59] Bluetooth: hci2: command tx timeout [ 108.108425][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.114122][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.114333][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.188308][ T59] Bluetooth: hci0: command tx timeout [ 108.188385][ T4901] Bluetooth: hci1: command tx timeout [ 108.188409][ T4901] Bluetooth: hci3: command tx timeout [ 108.233274][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.233388][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.267089][ T59] Bluetooth: hci4: command tx timeout [ 108.331329][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.395289][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.426815][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.437988][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.532038][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.532189][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.664653][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.721933][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.752632][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.752812][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.835124][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.852642][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.003108][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.082027][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.082607][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.180598][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.180844][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.679565][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.807232][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.304199][ T5593] veth0_vlan: entered promiscuous mode [ 110.463250][ T5592] veth0_vlan: entered promiscuous mode [ 110.475814][ T5593] veth1_vlan: entered promiscuous mode [ 110.594177][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.650843][ T5592] veth1_vlan: entered promiscuous mode [ 110.851260][ T5593] veth0_macvtap: entered promiscuous mode [ 110.888088][ T5593] veth1_macvtap: entered promiscuous mode [ 110.939934][ T5592] veth0_macvtap: entered promiscuous mode [ 110.985334][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.005571][ T5592] veth1_macvtap: entered promiscuous mode [ 111.063528][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.085096][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.155113][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.183440][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.226273][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.723668][ T5589] veth0_vlan: entered promiscuous mode [ 111.971777][ T5590] veth0_vlan: entered promiscuous mode [ 111.984915][ T5601] veth0_vlan: entered promiscuous mode [ 112.006240][ T5589] veth1_vlan: entered promiscuous mode [ 112.060611][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.060640][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.177535][ T5590] veth1_vlan: entered promiscuous mode [ 112.183370][ T5601] veth1_vlan: entered promiscuous mode [ 112.250195][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.250216][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.342004][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.342051][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.642843][ T5589] veth0_macvtap: entered promiscuous mode [ 112.684815][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.684837][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.769854][ T5589] veth1_macvtap: entered promiscuous mode [ 112.793855][ T5590] veth0_macvtap: entered promiscuous mode [ 112.810463][ T5601] veth0_macvtap: entered promiscuous mode [ 112.866693][ T5590] veth1_macvtap: entered promiscuous mode [ 112.885865][ T5601] veth1_macvtap: entered promiscuous mode [ 112.948399][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.011705][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.050779][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.054586][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.120090][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.123400][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.624401][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.624424][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.880505][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.880526][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.984619][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.984642][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.338584][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.338603][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.558192][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.558215][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.734460][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.734489][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.906975][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.382452][ T33] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.383037][ T33] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.386252][ T33] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.386673][ T33] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.608003][ T33] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.817801][ T33] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.882927][ T33] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.352399][ T1169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.359711][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.359946][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.462559][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.462791][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.462973][ T1169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.463385][ T1169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.463769][ T1169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.574788][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 118.574807][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 118.778415][ T1169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.830038][ T1169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.832390][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.833235][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.951866][ T5815] ======================================================= [ 118.951866][ T5815] WARNING: The mand mount option has been deprecated and [ 118.951866][ T5815] and is ignored by this kernel. Remove the mand [ 118.951866][ T5815] option from the mount to silence this warning. [ 118.951866][ T5815] ======================================================= [ 119.429826][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.782603][ T5850] Zero length message leads to an empty skb [ 120.931684][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23'. [ 121.559839][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 123.519520][ T5706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.538623][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.730863][ T10] usb 1-1: device descriptor read/64, error -71 [ 123.777997][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 123.782867][ T5706] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 123.855902][ T5706] usb 2-1: config index 0 descriptor too short (expected 27632, got 27) [ 123.855933][ T5706] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 123.855955][ T5706] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 123.855978][ T5706] usb 2-1: config 1 has no interface number 0 [ 123.856030][ T5706] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.856059][ T5706] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 123.856103][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.968291][ T5781] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.179591][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.944846][ T5781] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 125.182466][ T10] usb 1-1: device descriptor read/64, error -71 [ 125.224987][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.291996][ T10] usb usb1-port1: attempt power cycle [ 125.626949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.315561][ C0] dln2 3-1:1.0: short response: 0 [ 126.438641][ T5907] hpfs: Bad magic ... probably not HPFS [ 126.852796][ T5781] dln2 3-1:1.0: failed to initialize hardware [ 126.874577][ T5781] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 126.883039][ T5706] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 127.568561][ T5706] snd_usb_pod 2-1:1.1: set_interface failed [ 127.621005][ T5706] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 127.621373][ T5706] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 127.682301][ T5706] usb 2-1: USB disconnect, device number 2 [ 128.471929][ T5922] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 129.282274][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 129.847444][ T5781] usb 3-1: USB disconnect, device number 2 [ 130.808625][ T5721] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.937010][ T5721] usb 1-1: device descriptor read/64, error -71 [ 131.177009][ T5721] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.284979][ T5954] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 131.300713][ T5954] device-mapper: ioctl: Unable to rename non-existent device, to uuid j [ 131.327073][ T5721] usb 1-1: device descriptor read/64, error -71 [ 131.457281][ T5721] usb usb1-port1: attempt power cycle [ 131.837018][ T5721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.859316][ T5721] usb 1-1: device descriptor read/8, error -71 [ 132.087025][ T5966] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 132.118759][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 132.139242][ T5721] usb 1-1: device descriptor read/8, error -71 [ 132.145639][ T5970] netlink: 'syz.4.54': attribute type 4 has an invalid length. [ 132.250138][ T5721] usb usb1-port1: unable to enumerate USB device [ 133.357519][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.357631][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.836927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.856932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.918383][ T1576] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 138.017503][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.060078][ T1576] usb 2-1: device descriptor read/64, error -71 [ 138.187828][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 138.188772][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.190237][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.190266][ T10] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.190286][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 138.190316][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.294364][ T10] usb 4-1: config 0 descriptor?? [ 138.317037][ T1576] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.466975][ T1576] usb 2-1: device descriptor read/64, error -71 [ 138.567592][ T1576] usb usb2-port1: attempt power cycle [ 138.967124][ T1576] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.990944][ T1576] usb 2-1: device descriptor read/8, error -71 [ 139.104511][ T10] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 139.104541][ T10] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 4/5 [ 139.144002][ T10] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 139.144088][ T10] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 139.241465][ T10] usb 4-1: USB disconnect, device number 2 [ 139.463970][ T1576] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.506670][ T1576] usb 2-1: device descriptor read/8, error -71 [ 139.820568][ T1576] usb usb2-port1: unable to enumerate USB device [ 140.646755][ T6038] syz.0.79 (6038) used greatest stack depth: 18952 bytes left [ 141.408252][ T1576] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.586973][ T1576] usb 2-1: Using ep0 maxpacket: 8 [ 141.588065][ T1576] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.591125][ T1576] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.591158][ T1576] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.591183][ T1576] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.591299][ T1576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.679743][ T1576] usb 2-1: config 0 descriptor?? [ 142.312159][ T1576] usbhid 2-1:0.0: can't add hid device: -71 [ 142.312297][ T1576] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 142.373460][ T1576] usb 2-1: USB disconnect, device number 7 [ 143.470016][ T6077] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 143.902161][ T6084] netlink: 'syz.4.94': attribute type 4 has an invalid length. [ 143.917064][ T6084] netlink: 'syz.4.94': attribute type 4 has an invalid length. [ 144.027003][ T4967] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.163935][ T4967] usb 4-1: device descriptor read/64, error -71 [ 144.543757][ T6098] hpfs: Bad magic ... probably not HPFS [ 145.407239][ T5694] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.410406][ T4967] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.540853][ T6102] netlink: 'syz.0.99': attribute type 1 has an invalid length. [ 145.555053][ T4967] usb 4-1: device descriptor read/64, error -71 [ 145.577835][ T5694] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 145.581386][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 145.581413][ T5694] usb 3-1: Product: syz [ 145.581423][ T5694] usb 3-1: SerialNumber: syz [ 145.617835][ T5694] usb 3-1: config 0 descriptor?? [ 145.668085][ T4967] usb usb4-port1: attempt power cycle [ 146.369337][ T4967] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.397511][ T5694] hso 3-1:0.0: Failed to find BULK eps [ 146.398901][ T4967] usb 4-1: device descriptor read/8, error -71 [ 146.602946][ T5694] usb 3-1: USB disconnect, device number 3 [ 146.661550][ T4967] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.816466][ T4967] usb 4-1: device descriptor read/8, error -71 [ 146.932525][ T4967] usb usb4-port1: unable to enumerate USB device [ 146.996059][ T6106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.137353][ T6114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.104'. [ 147.339718][ T4967] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 147.498320][ T4967] usb 4-1: Using ep0 maxpacket: 8 [ 147.501837][ T4967] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 147.536092][ T4967] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.536129][ T4967] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.536152][ T4967] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.536187][ T4967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.580500][ T4967] usb 4-1: config 0 descriptor?? [ 148.122870][ T4967] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 148.122908][ T4967] mcp2221 0003:04D8:00DD.0002: item fetching failed at offset 4/5 [ 148.143220][ T4967] mcp2221 0003:04D8:00DD.0002: can't parse reports [ 148.143359][ T4967] mcp2221 0003:04D8:00DD.0002: probe with driver mcp2221 failed with error -22 [ 148.251163][ T5781] usb 4-1: USB disconnect, device number 7 [ 151.959581][ T197] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.147813][ T197] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 152.152915][ T197] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 152.152944][ T197] usb 4-1: Product: syz [ 152.152959][ T197] usb 4-1: SerialNumber: syz [ 152.245751][ T197] usb 4-1: config 0 descriptor?? [ 152.472968][ T197] hso 4-1:0.0: Failed to find BULK eps [ 152.673320][ T5714] usb 4-1: USB disconnect, device number 8 [ 152.738982][ T6210] netlink: 'syz.2.133': attribute type 7 has an invalid length. [ 153.022498][ T6215] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 153.501270][ T6231] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 153.542606][ T6234] device-mapper: ioctl: Unable to rename non-existent device, t to j [ 153.629580][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'. [ 153.726991][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 153.856509][ T6231] bond1: (slave geneve2): making interface the new active one [ 153.887797][ T5714] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 153.915393][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 153.915423][ T5714] usb 2-1: Product: syz [ 153.915439][ T5714] usb 2-1: SerialNumber: syz [ 153.980696][ T5714] usb 2-1: config 0 descriptor?? [ 154.065874][ T6231] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 154.067189][ T3397] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.098439][ T66] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.098493][ T66] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.098533][ T66] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 154.207878][ T5714] hso 2-1:0.0: Failed to find BULK eps [ 154.550385][ T5714] usb 2-1: USB disconnect, device number 8 [ 155.414006][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.155'. [ 157.078782][ T5714] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.277085][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 157.279657][ T5714] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.305604][ T5714] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.305639][ T5714] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.305664][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.305699][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.372966][ T5714] usb 2-1: config 0 descriptor?? [ 157.389782][ T6301] device-mapper: ioctl: Invalid ioctl structure: name my, dev f801 [ 157.907898][ T5714] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 157.907935][ T5714] mcp2221 0003:04D8:00DD.0003: item fetching failed at offset 4/5 [ 157.908645][ T5714] mcp2221 0003:04D8:00DD.0003: can't parse reports [ 157.908786][ T5714] mcp2221 0003:04D8:00DD.0003: probe with driver mcp2221 failed with error -22 [ 158.087039][ T4967] usb 2-1: USB disconnect, device number 9 [ 158.189673][ T6308] device-mapper: ioctl: Invalid target message parameters. [ 159.305050][ T6320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.168'. [ 159.797015][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.950584][ T5781] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 159.952005][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.723557][ T5781] dln2 3-1:1.0: USB write failed: -110 [ 160.723584][ T5781] dln2 3-1:1.0: failed to initialize hardware [ 160.729632][ T5781] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 161.304072][ T6343] fuse: root generation should be zero [ 163.876909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.896944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.906935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 163.959050][ T4967] usb 3-1: USB disconnect, device number 4 [ 164.818616][ T6383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 165.374940][ T6387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.784419][ T6394] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.209502][ T5781] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 166.477547][ T5781] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 166.484897][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.484959][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.652447][ T5781] usb 4-1: selecting invalid altsetting 1 [ 166.652471][ T5781] snd-usb-caiaq 4-1:1.0: can't set alt interface. [ 166.652491][ T5781] usb 4-1: unable to init card! (ret=-5) [ 166.653978][ T5781] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 167.167171][ T5781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.320094][ T5781] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 167.325199][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 167.325238][ T5781] usb 3-1: Product: syz [ 167.325256][ T5781] usb 3-1: SerialNumber: syz [ 167.374214][ T5781] usb 3-1: config 0 descriptor?? [ 167.552332][ T6422] device-mapper: ioctl: Invalid ioctl structure: name t, dev f802 [ 167.582696][ T6422] device-mapper: ioctl: Unable to change name on mapped device t to one that already exists: j [ 167.628105][ T5781] usb 3-1: USB disconnect, device number 5 [ 169.422019][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.250488][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 170.254234][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.254290][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.317041][ T4967] usb 4-1: USB disconnect, device number 9 [ 170.482858][ T9] spcp8x5 1-1:1.0: required endpoints missing [ 170.800112][ T6468] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 170.855071][ T6470] netlink: 'syz.3.219': attribute type 4 has an invalid length. [ 172.953043][ T1576] usb 1-1: USB disconnect, device number 9 [ 173.457074][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 173.608120][ T9] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 173.609811][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.111567][ C0] dln2 4-1:1.0: short response: 0 [ 174.317408][ T9] dln2 4-1:1.0: failed to initialize hardware [ 174.323358][ T9] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 176.072675][ T6535] netlink: 'syz.1.238': attribute type 7 has an invalid length. [ 176.268164][ T9] usb 4-1: USB disconnect, device number 10 [ 176.907647][ T6540] netlink: 'syz.3.242': attribute type 7 has an invalid length. [ 179.244438][ T6576] netlink: 'syz.1.253': attribute type 1 has an invalid length. [ 180.505608][ T6576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.842882][ T6589] 0x000000000000-0x000000020000 : "" [ 181.417154][ T6589] ftl_cs: FTL header not found. [ 181.523987][ T6591] hpfs: Bad magic ... probably not HPFS [ 183.131817][ T6614] netlink: 'syz.0.264': attribute type 7 has an invalid length. [ 183.134341][ T6611] netlink: 'syz.1.262': attribute type 7 has an invalid length. [ 184.127526][ T6639] hpfs: Bad magic ... probably not HPFS [ 185.529085][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 185.641750][ T6644] smpboot: CPU 1 is now offline [ 185.687688][ T9] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 185.723576][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.768354][ T5781] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 185.918801][ T5781] usb 4-1: Using ep0 maxpacket: 16 [ 185.952508][ T5781] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 185.984087][ T5781] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.984114][ T5781] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.984130][ T5781] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 185.984148][ T5781] usb 4-1: config 0 interface 0 has no altsetting 0 [ 185.985319][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.065318][ T9] dln2 5-1:1.0: USB write failed: -110 [ 186.065346][ T9] dln2 5-1:1.0: failed to initialize hardware [ 186.084182][ T9] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 186.136105][ T5781] usb 4-1: config 0 descriptor?? [ 186.648009][ T5781] usbhid 4-1:0.0: can't add hid device: -71 [ 186.648107][ T5781] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 186.805794][ T5781] usb 4-1: USB disconnect, device number 11 [ 188.915919][ T6646] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 189.298178][ T6666] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:3": -EINTR [ 189.527269][ T4967] usb 5-1: USB disconnect, device number 2 [ 189.610315][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.750047][ T6672] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 189.758865][ T10] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 189.768879][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.824782][ T6677] netlink: 'syz.3.284': attribute type 4 has an invalid length. [ 189.857243][ T6678] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 189.922936][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 190.087894][ T6678] bond1: (slave geneve2): making interface the new active one [ 190.090195][ T6678] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 190.097056][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.157293][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.159315][ T66] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.159367][ T66] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 190.243208][ C0] dln2 3-1:1.0: short response: 0 [ 190.448036][ T10] dln2 3-1:1.0: failed to initialize hardware [ 190.477803][ C0] dln2 3-1:1.0: short response: 0 [ 190.511394][ T10] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 190.833429][ T6694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.226665][ T4967] usb 3-1: USB disconnect, device number 6 [ 191.414892][ T6703] input: syz0 as /devices/virtual/input/input8 [ 191.743998][ T6702] smpboot: CPU 1 is now offline [ 193.905093][ T6704] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 196.254697][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.255435][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.554882][ T6740] 0x000000000006-0x000000020000 : "" [ 197.904253][ T6740] ftl_cs: FTL header corrupt! [ 199.919502][ T4967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.938275][ T6770] input: syz0 as /devices/virtual/input/input11 [ 200.119644][ T4967] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 200.121155][ T4967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.121189][ T4967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.121226][ T4967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.135669][ T4967] usb 5-1: config 0 descriptor?? [ 200.217029][ T197] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.250831][ T6782] netlink: 'syz.1.317': attribute type 1 has an invalid length. [ 200.282739][ T6783] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 200.338641][ T6786] netlink: 'syz.2.318': attribute type 4 has an invalid length. [ 200.366984][ T197] usb 1-1: Using ep0 maxpacket: 8 [ 200.368375][ T197] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.369736][ T197] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.369767][ T197] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.369792][ T197] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.369818][ T197] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.369858][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.693339][ T197] usb 1-1: GET_CAPABILITIES returned 0 [ 200.693388][ T197] usbtmc 1-1:16.0: can't read capabilities [ 200.810119][ T6784] bond2: (slave geneve2): making interface the new active one [ 200.810896][ T6784] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 200.813630][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813663][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813687][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813711][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813736][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813763][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 200.813788][ T4967] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 201.018521][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 201.018574][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 201.018614][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 201.029114][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 201.302088][ T4967] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 201.562208][ T4967] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 201.562265][ T4967] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 201.607530][ T4967] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 201.649438][ T4967] usb 5-1: USB disconnect, device number 3 [ 202.385402][ T6820] input: syz0 as /devices/virtual/input/input12 [ 202.736984][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 202.887026][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 202.888208][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 202.890490][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.890529][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.890556][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 202.890588][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.890628][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.972157][ T10] usb 3-1: config 0 descriptor?? [ 203.050603][ T5721] usb 1-1: USB disconnect, device number 10 [ 203.660054][ T4967] usb 3-1: USB disconnect, device number 7 [ 204.998718][ T6843] loop5: detected capacity change from 0 to 7 [ 205.378963][ T6843] Dev loop5: unable to read RDB block 7 [ 205.379033][ T6843] loop5: unable to read partition table [ 205.379282][ T6843] loop5: partition table beyond EOD, truncated [ 205.379327][ T6843] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.510451][ T6864] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 205.602009][ T6864] netlink: 'syz.1.341': attribute type 4 has an invalid length. [ 205.747011][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.764146][ T6865] netlink: 'syz.2.344': attribute type 7 has an invalid length. [ 205.900013][ T9] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 205.901727][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.096958][ T5721] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 206.137061][ T4967] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.157258][ T9] dln2 5-1:1.0: USB write failed: -110 [ 206.157367][ T9] dln2 5-1:1.0: failed to initialize hardware [ 206.161161][ T9] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 206.277224][ T5721] usb 4-1: Using ep0 maxpacket: 8 [ 206.280323][ T5721] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 206.283235][ T5721] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.283272][ T5721] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.283297][ T5721] usb 4-1: config 0 interface 0 has no altsetting 0 [ 206.283332][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.341273][ T4967] usb 2-1: Using ep0 maxpacket: 8 [ 206.354113][ T4967] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 206.381571][ T4967] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.381608][ T4967] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.381631][ T4967] usb 2-1: config 0 interface 0 has no altsetting 0 [ 206.381665][ T4967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.423837][ T4967] usb 2-1: config 0 descriptor?? [ 206.439676][ T5721] usb 4-1: config 0 descriptor?? [ 206.983236][ T4967] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 207.008292][ T5721] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 207.496697][ T4967] usb 2-1: USB disconnect, device number 10 [ 207.545618][ T5721] usb 4-1: USB disconnect, device number 12 [ 208.053534][ T6897] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 208.525012][ T5781] usb 5-1: USB disconnect, device number 4 [ 208.907314][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 209.089520][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 209.170242][ T6922] 0x000000000006-0x000000020000 : "" [ 209.328058][ T6922] ftl_cs: FTL header corrupt! [ 209.700909][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 209.700943][ T10] usb 4-1: Product: syz [ 209.700961][ T10] usb 4-1: SerialNumber: syz [ 209.845635][ T10] usb 4-1: config 0 descriptor?? [ 210.067403][ T5781] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.238113][ T5781] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 210.239987][ T5781] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.240069][ T5781] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 210.288683][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.288728][ T5781] usb 2-1: Product: syz [ 210.288744][ T5781] usb 2-1: Manufacturer: syz [ 210.288760][ T5781] usb 2-1: SerialNumber: syz [ 210.318132][ T10] hso 4-1:0.0: Failed to find BULK eps [ 210.372716][ T5781] usb-storage 2-1:1.0: USB Mass Storage device detected [ 210.397445][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.445064][ T10] usb 4-1: USB disconnect, device number 13 [ 210.483981][ T5781] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 210.485927][ T5781] scsi host1: usb-storage 2-1:1.0 [ 210.557766][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.559676][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.559718][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.559758][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.577052][ T5721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.619816][ T9] usb 5-1: config 0 descriptor?? [ 210.724683][ T5781] usb 2-1: USB disconnect, device number 11 [ 210.759940][ T5721] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.763867][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.763900][ T5721] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.763940][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.833158][ T5721] usb 3-1: config 0 descriptor?? [ 211.234666][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234715][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234743][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234772][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234799][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234826][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.234851][ T9] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0 [ 211.360684][ T5721] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 211.360732][ T5721] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 211.360761][ T5721] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x0 [ 211.516741][ T6940] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 211.572137][ T6942] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 211.590689][ T5721] pyra 0003:1E7D:2CF6.0009: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 211.595785][ T9] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 211.720296][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.821700][ T9] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 211.821758][ T9] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 211.900657][ T9] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 211.928865][ T10] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 211.939231][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.939371][ T10] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 212.002619][ T9] usb 5-1: USB disconnect, device number 5 [ 212.024457][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.024484][ T10] usb 1-1: Product: syz [ 212.024497][ T10] usb 1-1: Manufacturer: syz [ 212.024510][ T10] usb 1-1: SerialNumber: syz [ 212.151462][ T5721] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 212.151517][ T5721] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 212.201175][ T10] usb-storage 1-1:1.0: USB Mass Storage device detected [ 212.284401][ T5721] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -32 [ 212.307459][ T10] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 212.317334][ T10] scsi host1: usb-storage 1-1:1.0 [ 212.456337][ T5721] usb 3-1: USB disconnect, device number 8 [ 212.643031][ T10] usb 1-1: USB disconnect, device number 11 [ 212.713982][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.373'. [ 213.667050][ T1576] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 213.786425][ T6985] input: syz0 as /devices/virtual/input/input13 [ 213.837947][ T1576] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 213.865556][ T1576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.865585][ T1576] usb 2-1: Product: syz [ 213.865600][ T1576] usb 2-1: Manufacturer: syz [ 213.865615][ T1576] usb 2-1: SerialNumber: syz [ 213.959736][ T1576] usb 2-1: config 0 descriptor?? [ 214.023918][ T1576] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 214.125602][ T1576] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.126761][ T1576] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 214.146326][ T1576] usb 2-1: media controller created [ 214.201523][ T1576] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.546449][ T1576] DVB: Unable to find symbol mt352_attach() [ 214.790795][ T1576] DVB: Unable to find symbol nxt6000_attach() [ 214.790811][ T1576] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 214.825046][ T1576] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 214.829813][ T5598] Bluetooth: hci4: command 0x2016 tx timeout [ 214.876046][ T1576] dvb-usb: schedule remote query interval to 1000 msecs. [ 214.876079][ T1576] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 214.876395][ T1576] dvb-usb: bulk message failed: -22 (7/0) [ 214.876415][ T1576] dvb-usb: bulk message failed: -22 (7/0) [ 214.924666][ T1576] usb 2-1: USB disconnect, device number 12 [ 214.936990][ T5721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.027680][ T5714] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 215.101209][ T5721] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 215.119699][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.119775][ T5721] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 215.166118][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.166149][ T5721] usb 5-1: Product: syz [ 215.166165][ T5721] usb 5-1: Manufacturer: syz [ 215.166180][ T5721] usb 5-1: SerialNumber: syz [ 215.215081][ T5714] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 215.249908][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 215.249939][ T5714] usb 1-1: Product: syz [ 215.249956][ T5714] usb 1-1: SerialNumber: syz [ 215.288090][ T5714] usb 1-1: config 0 descriptor?? [ 215.333183][ T5721] usb-storage 5-1:1.0: USB Mass Storage device detected [ 215.453870][ T5721] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 215.455002][ T5721] scsi host1: usb-storage 5-1:1.0 [ 215.731830][ T5714] hso 1-1:0.0: Failed to find BULK eps [ 215.798568][ T5721] usb 5-1: USB disconnect, device number 6 [ 215.872176][ T1576] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 215.905117][ T5714] usb 1-1: USB disconnect, device number 12 [ 216.723066][ T7036] input: syz0 as /devices/virtual/input/input15 [ 216.824189][ T7039] hpfs: Bad magic ... probably not HPFS [ 216.907078][ T59] Bluetooth: hci4: command 0x2016 tx timeout [ 216.939454][ T5721] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 217.107857][ T5721] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 217.111818][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.111910][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 217.111954][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.188137][ T5721] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 217.206489][ T5721] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 217.902191][ T7063] input: syz0 as /devices/virtual/input/input16 [ 218.188852][ T7074] hpfs: Bad magic ... probably not HPFS [ 218.698033][ T7085] input: syz0 as /devices/virtual/input/input17 [ 219.217020][ T5721] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 219.377958][ T5721] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 219.380617][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.380653][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.380695][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.435256][ T5721] usb 1-1: config 0 descriptor?? [ 219.726439][ T9] usb 5-1: USB disconnect, device number 7 [ 219.891009][ T5721] hid_parser_main: 4 callbacks suppressed [ 219.891687][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891730][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891761][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891791][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891821][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891848][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.891877][ T5721] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 219.992596][ T5721] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 220.046104][ T7104] hpfs: Bad magic ... probably not HPFS [ 220.082174][ T5721] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 220.082233][ T5721] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 220.240215][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 220.274314][ T9] spcp8x5 5-1:1.0: device disconnected [ 220.382786][ T5721] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -32 [ 220.498316][ T5721] usb 1-1: USB disconnect, device number 13 [ 221.198044][ T7115] syz.4.427 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 221.198100][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.4.427 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 221.198126][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.198148][ T7115] Call Trace: [ 221.198168][ T7115] [ 221.198179][ T7115] dump_stack_lvl+0xe8/0x150 [ 221.198230][ T7115] dump_header+0xd3/0x4b0 [ 221.198263][ T7115] oom_kill_process+0x3ab/0x9e0 [ 221.198301][ T7115] out_of_memory+0x1064/0x1480 [ 221.198344][ T7115] ? __pfx_out_of_memory+0x10/0x10 [ 221.198376][ T7115] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 221.198403][ T7115] ? _mutex_lock_killable+0x152/0x1d0 [ 221.198435][ T7115] ? try_charge_memcg+0xbbe/0x15c0 [ 221.198469][ T7115] try_charge_memcg+0xc7d/0x15c0 [ 221.198515][ T7115] ? __pfx_try_charge_memcg+0x10/0x10 [ 221.198552][ T7115] ? percpu_ref_tryget+0x15/0x180 [ 221.198584][ T7115] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 221.198618][ T7115] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 221.198643][ T7115] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 221.198671][ T7115] __memcg_slab_post_alloc_hook+0x968/0xfe0 [ 221.198716][ T7115] ? sock_alloc_inode+0x2c/0x1a0 [ 221.198743][ T7115] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 221.198767][ T7115] ? sock_alloc_inode+0x2c/0x1a0 [ 221.198792][ T7115] ? sock_alloc_inode+0x2c/0x1a0 [ 221.198824][ T7115] ? __pfx_sock_alloc_inode+0x10/0x10 [ 221.198849][ T7115] sock_alloc_inode+0x2c/0x1a0 [ 221.198874][ T7115] ? __pfx_sock_alloc_inode+0x10/0x10 [ 221.198899][ T7115] alloc_inode+0x6a/0x1b0 [ 221.198929][ T7115] __sock_create+0x12d/0x9d0 [ 221.198965][ T7115] __sys_socket+0xd6/0x1b0 [ 221.198997][ T7115] __x64_sys_socket+0x7a/0x90 [ 221.199025][ T7115] do_syscall_64+0x166/0x520 [ 221.199050][ T7115] ? trace_irq_disable+0x3b/0x140 [ 221.199084][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.199107][ T7115] ? clear_bhb_loop+0x70/0xc0 [ 221.199133][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.199158][ T7115] RIP: 0033:0x7f836d67e0d9 [ 221.199189][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.199207][ T7115] RSP: 002b:00007f836b8d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 221.199231][ T7115] RAX: ffffffffffffffda RBX: 00007f836d905fa0 RCX: 00007f836d67e0d9 [ 221.199246][ T7115] RDX: 0000000000000084 RSI: 0000000000080001 RDI: 0000000000000002 [ 221.199260][ T7115] RBP: 00007f836d715024 R08: 0000000000000000 R09: 0000000000000000 [ 221.199273][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.199286][ T7115] R13: 00007f836d906038 R14: 00007f836d905fa0 R15: 00007fffa9110eb8 [ 221.199321][ T7115] [ 221.199358][ T7115] memory: usage 0kB, limit 0kB, failcnt 38 [ 221.199372][ T7115] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 221.199387][ T7115] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 221.199400][ T7115] Memory cgroup stats for /syz4/test: [ 221.199910][ T7115] cache 0 [ 221.199921][ T7115] rss 0 [ 221.199929][ T7115] shmem 0 [ 221.199936][ T7115] mapped_file 0 [ 221.199944][ T7115] dirty 0 [ 221.199951][ T7115] writeback 0 [ 221.199959][ T7115] workingset_refault_anon 0 [ 221.199967][ T7115] workingset_refault_file 0 [ 221.199975][ T7115] swap 0 [ 221.199982][ T7115] swapcached 0 [ 221.199990][ T7115] pgpgin 0 [ 221.199997][ T7115] pgpgout 0 [ 221.200005][ T7115] pgfault 0 [ 221.200012][ T7115] pgmajfault 0 [ 221.200020][ T7115] inactive_anon 0 [ 221.200028][ T7115] active_anon 0 [ 221.200035][ T7115] inactive_file 0 [ 221.200043][ T7115] active_file 0 [ 221.200050][ T7115] unevictable 0 [ 221.200057][ T7115] hierarchical_memory_limit 0 [ 221.200066][ T7115] hierarchical_memsw_limit 9223372036854771712 [ 221.200086][ T7115] total_cache 0 [ 221.200094][ T7115] total_rss 0 [ 221.200100][ T7115] total_shmem 0 [ 221.200108][ T7115] total_mapped_file 0 [ 221.200115][ T7115] total_dirty 0 [ 221.200122][ T7115] total_writeback 0 [ 221.200130][ T7115] total_workingset_refault_anon 0 [ 221.200138][ T7115] total_workingset_refault_file 0 [ 221.200147][ T7115] total_swap 0 [ 221.200154][ T7115] total_swapcached 0 [ 221.200162][ T7115] total_pgpgin 0 [ 221.200169][ T7115] total_pgpgout 0 [ 221.200176][ T7115] total_pgfault 0 [ 221.200183][ T7115] total_pgmajfault 0 [ 221.200190][ T7115] total_inactive_anon 0 [ 221.200198][ T7115] total_active_anon 0 [ 221.200205][ T7115] total_inactive_file 0 [ 221.200212][ T7115] total_active_file 0 [ 221.200220][ T7115] total_unevictable 0 [ 221.200228][ T7115] anon_cost 0 [ 221.200235][ T7115] file_cost 0 [ 221.200243][ T7115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.427,pid=7113,uid=0 [ 221.721743][ T7115] Memory cgroup out of memory: Killed process 7113 (syz.4.427) total-vm:102384kB, anon-rss:1440kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 221.767417][ T7115] socket: no more sockets [ 221.920224][ T7135] input: syz0 as /devices/virtual/input/input18 [ 222.186989][ T59] Bluetooth: hci4: command 0x2016 tx timeout [ 222.286972][ T5721] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.298275][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 222.298316][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 222.298456][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 222.298566][ T5600] Bluetooth: hci0: command 0x0406 tx timeout [ 222.447860][ T5721] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 222.450951][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.000283][ C1] dln2 5-1:1.0: short response: 0 [ 223.200616][ T5721] dln2 5-1:1.0: failed to initialize hardware [ 223.202721][ C1] dln2 5-1:1.0: short response: 0 [ 223.228714][ T5721] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 223.577083][ T5781] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 223.742585][ T10] usb 5-1: USB disconnect, device number 8 [ 223.758325][ T5781] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 223.764657][ T5781] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.764720][ T5781] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 223.764744][ T5781] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 223.764768][ T5781] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 223.764813][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.126903][ C0] usb 4-1: received EP1 urb->status = -2 [ 224.127279][ T5781] usb 4-1: unable to init card! (ret=-90) [ 224.127837][ T5781] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -90 [ 224.239515][ T7173] syz.2.444 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 224.239556][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.2.444 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.239583][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.239596][ T7173] Call Trace: [ 224.239605][ T7173] [ 224.239616][ T7173] dump_stack_lvl+0xe8/0x150 [ 224.239665][ T7173] dump_header+0xd3/0x4b0 [ 224.239700][ T7173] oom_kill_process+0x3ab/0x9e0 [ 224.239738][ T7173] out_of_memory+0x1064/0x1480 [ 224.239783][ T7173] ? __pfx_out_of_memory+0x10/0x10 [ 224.239814][ T7173] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 224.239841][ T7173] ? _mutex_lock_killable+0x152/0x1d0 [ 224.239873][ T7173] ? try_charge_memcg+0xbbe/0x15c0 [ 224.239906][ T7173] try_charge_memcg+0xc7d/0x15c0 [ 224.239954][ T7173] ? __pfx_try_charge_memcg+0x10/0x10 [ 224.239990][ T7173] ? percpu_ref_tryget+0x15/0x180 [ 224.240023][ T7173] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 224.240056][ T7173] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 224.240082][ T7173] ? __memcg_slab_post_alloc_hook+0x7d0/0xfe0 [ 224.240110][ T7173] __memcg_slab_post_alloc_hook+0x968/0xfe0 [ 224.240163][ T7173] ? sock_alloc_inode+0x2c/0x1a0 [ 224.240190][ T7173] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 224.240223][ T7173] ? sock_alloc_inode+0x2c/0x1a0 [ 224.240249][ T7173] ? sock_alloc_inode+0x2c/0x1a0 [ 224.240281][ T7173] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.240306][ T7173] sock_alloc_inode+0x2c/0x1a0 [ 224.240331][ T7173] ? __pfx_sock_alloc_inode+0x10/0x10 [ 224.240353][ T7173] alloc_inode+0x6a/0x1b0 [ 224.240383][ T7173] __sock_create+0x12d/0x9d0 [ 224.240420][ T7173] __sys_socket+0xd6/0x1b0 [ 224.240453][ T7173] __x64_sys_socket+0x7a/0x90 [ 224.240482][ T7173] do_syscall_64+0x166/0x520 [ 224.240506][ T7173] ? trace_irq_disable+0x3b/0x140 [ 224.240531][ T7173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.240554][ T7173] ? clear_bhb_loop+0x70/0xc0 [ 224.240583][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.240606][ T7173] RIP: 0033:0x7f7f402fe0d9 [ 224.240628][ T7173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.240646][ T7173] RSP: 002b:00007f7f3e556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 224.240671][ T7173] RAX: ffffffffffffffda RBX: 00007f7f40585fa0 RCX: 00007f7f402fe0d9 [ 224.240687][ T7173] RDX: 0000000000000084 RSI: 0000000000080001 RDI: 0000000000000002 [ 224.240700][ T7173] RBP: 00007f7f40395024 R08: 0000000000000000 R09: 0000000000000000 [ 224.240714][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.240727][ T7173] R13: 00007f7f40586038 R14: 00007f7f40585fa0 R15: 00007ffc659d3978 [ 224.240761][ T7173] [ 224.241083][ T7173] memory: usage 0kB, limit 0kB, failcnt 19 [ 224.241099][ T7173] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 224.241113][ T7173] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 224.241127][ T7173] Memory cgroup stats for /syz2/test: [ 224.241268][ T7173] cache 0 [ 224.241278][ T7173] rss 0 [ 224.241285][ T7173] shmem 0 [ 224.241292][ T7173] mapped_file 0 [ 224.241299][ T7173] dirty 0 [ 224.241306][ T7173] writeback 0 [ 224.241314][ T7173] workingset_refault_anon 0 [ 224.241322][ T7173] workingset_refault_file 0 [ 224.241331][ T7173] swap 0 [ 224.241338][ T7173] swapcached 0 [ 224.241346][ T7173] pgpgin 0 [ 224.241353][ T7173] pgpgout 0 [ 224.241360][ T7173] pgfault 0 [ 224.241368][ T7173] pgmajfault 0 [ 224.241376][ T7173] inactive_anon 0 [ 224.241384][ T7173] active_anon 0 [ 224.241392][ T7173] inactive_file 0 [ 224.241400][ T7173] active_file 0 [ 224.241408][ T7173] unevictable 0 [ 224.241415][ T7173] hierarchical_memory_limit 0 [ 224.241424][ T7173] hierarchical_memsw_limit 9223372036854771712 [ 224.241433][ T7173] total_cache 0 [ 224.241441][ T7173] total_rss 0 [ 224.241448][ T7173] total_shmem 0 [ 224.241456][ T7173] total_mapped_file 0 [ 224.241464][ T7173] total_dirty 0 [ 224.241472][ T7173] total_writeback 0 [ 224.241480][ T7173] total_workingset_refault_anon 0 [ 224.241489][ T7173] total_workingset_refault_file 0 [ 224.241497][ T7173] total_swap 0 [ 224.241505][ T7173] total_swapcached 0 [ 224.241513][ T7173] total_pgpgin 0 [ 224.241521][ T7173] total_pgpgout 0 [ 224.241528][ T7173] total_pgfault 0 [ 224.241536][ T7173] total_pgmajfault 0 [ 224.241545][ T7173] total_inactive_anon 0 [ 224.241553][ T7173] total_active_anon 0 [ 224.241561][ T7173] total_inactive_file 0 [ 224.241569][ T7173] total_active_file 0 [ 224.241577][ T7173] total_unevictable 0 [ 224.241585][ T7173] anon_cost 0 [ 224.241592][ T7173] file_cost 0 [ 224.241601][ T7173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.444,pid=7172,uid=0 [ 224.241749][ T7173] Memory cgroup out of memory: Killed process 7172 (syz.2.444) total-vm:102252kB, anon-rss:1440kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 224.476637][ T9] usb 4-1: USB disconnect, device number 14 [ 224.538282][ T7173] socket: no more sockets [ 225.203817][ T7175] kvm: kvm [7174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 225.230705][ T7175] kvm: kvm [7174]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 225.626583][ T7187] input: syz0 as /devices/virtual/input/input19 [ 226.113442][ T38] audit: type=1800 audit(1787643881.799:2): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.454" name="ifname" dev="configfs" ino=15489 res=0 errno=0 [ 226.757217][ T5721] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 226.808576][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 226.914456][ T5721] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 226.916501][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.916579][ T5721] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 226.916604][ T5721] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 226.916628][ T5721] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 226.916673][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.077830][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 227.079369][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 227.079399][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 227.079438][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.242738][ T10] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 227.244121][ C1] usb 2-1: received EP1 urb->status = -2 [ 227.244188][ T5721] usb 2-1: unable to init card! (ret=-90) [ 227.244665][ T5721] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -90 [ 227.480957][ T5721] usb 2-1: USB disconnect, device number 13 [ 227.502597][ T10] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 228.276994][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 228.477869][ T10] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 228.479234][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.786153][ T7245] input: syz0 as /devices/virtual/input/input20 [ 228.914118][ C0] dln2 4-1:1.0: short response: 0 [ 229.132158][ T10] dln2 4-1:1.0: failed to initialize hardware [ 229.146541][ T10] dln2 4-1:1.0: probe with driver dln2 failed with error -110 [ 229.371752][ T7253] syz.4.472 invoked oom-killer: gfp_mask=0x502dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 229.371796][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.4.472 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.371820][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.371833][ T7253] Call Trace: [ 229.371842][ T7253] [ 229.371851][ T7253] dump_stack_lvl+0xe8/0x150 [ 229.371888][ T7253] dump_header+0xd3/0x4b0 [ 229.371921][ T7253] oom_kill_process+0x3ab/0x9e0 [ 229.371958][ T7253] out_of_memory+0x1064/0x1480 [ 229.372004][ T7253] ? __pfx_out_of_memory+0x10/0x10 [ 229.372035][ T7253] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 229.372072][ T7253] ? _mutex_lock_killable+0x152/0x1d0 [ 229.372105][ T7253] ? try_charge_memcg+0xbbe/0x15c0 [ 229.372138][ T7253] try_charge_memcg+0xc7d/0x15c0 [ 229.372184][ T7253] ? __pfx_try_charge_memcg+0x10/0x10 [ 229.372211][ T7253] ? is_bpf_text_address+0x26/0x2b0 [ 229.372248][ T7253] ? percpu_ref_tryget+0x15/0x180 [ 229.372290][ T7253] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 229.372320][ T7253] __memcg_kmem_charge_page+0x36c/0x5a0 [ 229.372345][ T7253] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 229.372373][ T7253] __alloc_frozen_pages_noprof+0x263/0x5c0 [ 229.372406][ T7253] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 229.372433][ T7253] ? kasan_save_track+0x4f/0x80 [ 229.372464][ T7253] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.372491][ T7253] ? bpf_prog_alloc+0x3c/0x1a0 [ 229.372517][ T7253] ? bpf_prog_load+0x7f8/0x1c20 [ 229.372543][ T7253] ? __sys_bpf+0xd0d/0xd90 [ 229.372567][ T7253] ? __x64_sys_bpf+0xba/0xd0 [ 229.372589][ T7253] ? do_syscall_64+0x166/0x520 [ 229.372612][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.372644][ T7253] __alloc_pages_noprof+0x10/0x100 [ 229.372674][ T7253] alloc_pages_bulk_noprof+0x683/0x890 [ 229.372719][ T7253] alloc_pages_bulk_mempolicy_noprof+0x3f9/0x1670 [ 229.372764][ T7253] ? trace_kmalloc+0x2a/0xf0 [ 229.372791][ T7253] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 229.372823][ T7253] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 229.372849][ T7253] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 229.372871][ T7253] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 229.372902][ T7253] __vmalloc_node_range_noprof+0xa22/0x1560 [ 229.372958][ T7253] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 229.372984][ T7253] ? futex_unqueue+0x22/0x240 [ 229.373020][ T7253] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.373047][ T7253] __vmalloc_noprof+0xd2/0x120 [ 229.373078][ T7253] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 229.373110][ T7253] bpf_prog_alloc_no_stats+0x47/0x560 [ 229.373137][ T7253] ? bpf_prog_alloc+0x2a/0x1a0 [ 229.373166][ T7253] bpf_prog_alloc+0x3c/0x1a0 [ 229.373198][ T7253] bpf_prog_load+0x7f8/0x1c20 [ 229.373240][ T7253] ? __pfx_bpf_prog_load+0x10/0x10 [ 229.373297][ T7253] __sys_bpf+0xd0d/0xd90 [ 229.373334][ T7253] ? __pfx___sys_bpf+0x10/0x10 [ 229.373367][ T7253] ? do_futex+0x3e7/0x4e0 [ 229.373431][ T7253] ? rcu_is_watching+0x16/0xb0 [ 229.373467][ T7253] __x64_sys_bpf+0xba/0xd0 [ 229.373497][ T7253] do_syscall_64+0x166/0x520 [ 229.373520][ T7253] ? trace_irq_disable+0x3b/0x140 [ 229.373544][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.373567][ T7253] ? clear_bhb_loop+0x70/0xc0 [ 229.373595][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.373618][ T7253] RIP: 0033:0x7f836d67e0d9 [ 229.373638][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.373657][ T7253] RSP: 002b:00007f836b8d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.373680][ T7253] RAX: ffffffffffffffda RBX: 00007f836d905fa0 RCX: 00007f836d67e0d9 [ 229.373696][ T7253] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 229.373710][ T7253] RBP: 00007f836d715024 R08: 0000000000000000 R09: 0000000000000000 [ 229.373724][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.373737][ T7253] R13: 00007f836d906038 R14: 00007f836d905fa0 R15: 00007fffa9110eb8 [ 229.373773][ T7253] [ 229.389168][ T7253] memory: usage 8kB, limit 8kB, failcnt 93 [ 229.389191][ T7253] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 229.389207][ T7253] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 229.389221][ T7253] Memory cgroup stats for /syz4/test: [ 229.389511][ T7253] cache 0 [ 229.389535][ T7253] rss 0 [ 229.389541][ T7253] shmem 0 [ 229.389709][ T7253] mapped_file 0 [ 229.389718][ T7253] dirty 0 [ 229.389725][ T7253] writeback 0 [ 229.389731][ T7253] workingset_refault_anon 0 [ 229.389740][ T7253] workingset_refault_file 0 [ 229.389748][ T7253] swap 0 [ 229.389755][ T7253] swapcached 0 [ 229.389762][ T7253] pgpgin 0 [ 229.389769][ T7253] pgpgout 0 [ 229.389776][ T7253] pgfault 0 [ 229.389783][ T7253] pgmajfault 0 [ 229.389790][ T7253] inactive_anon 0 [ 229.389797][ T7253] active_anon 0 [ 229.389805][ T7253] inactive_file 0 [ 229.389812][ T7253] active_file 0 [ 229.389827][ T7253] unevictable 0 [ 229.389835][ T7253] hierarchical_memory_limit 8192 [ 229.389881][ T7253] hierarchical_memsw_limit 9223372036854771712 [ 229.389912][ T7253] total_cache 0 [ 229.389920][ T7253] total_rss 0 [ 229.389942][ T7253] total_shmem 0 [ 229.389959][ T7253] total_mapped_file 0 [ 229.389990][ T7253] total_dirty 0 [ 229.390006][ T7253] total_writeback 0 [ 229.390022][ T7253] total_workingset_refault_anon 0 [ 229.390031][ T7253] total_workingset_refault_file 0 [ 229.390039][ T7253] total_swap 0 [ 229.390046][ T7253] total_swapcached 0 [ 229.390061][ T7253] total_pgpgin 0 [ 229.390068][ T7253] total_pgpgout 0 [ 229.390075][ T7253] total_pgfault 0 [ 229.390567][ T7253] total_pgmajfault 0 [ 229.390577][ T7253] total_inactive_anon 0 [ 229.390611][ T7253] total_active_anon 0 [ 229.390673][ T7253] total_inactive_file 0 [ 229.390702][ T7253] total_active_file 0 [ 229.390757][ T7253] total_unevictable 0 [ 229.390778][ T7253] anon_cost 0 [ 229.390799][ T7253] file_cost 0 [ 229.390820][ T7253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.472,pid=7252,uid=0 [ 229.409483][ T7253] Memory cgroup out of memory: Killed process 7252 (syz.4.472) total-vm:102252kB, anon-rss:1432kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 230.025620][ T5781] usb 1-1: USB disconnect, device number 14 [ 230.208911][ T5781] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 230.221020][ T5781] spcp8x5 1-1:1.0: device disconnected [ 230.587188][ T5781] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 230.741632][ T5781] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 230.758404][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 230.758435][ T5781] usb 1-1: Product: syz [ 230.758451][ T5781] usb 1-1: SerialNumber: syz [ 230.786365][ T5781] usb 1-1: config 0 descriptor?? [ 230.838232][ T7270] netlink: 'syz.1.479': attribute type 1 has an invalid length. [ 230.910881][ T7270] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.967735][ T1576] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 231.001843][ T5781] hso 1-1:0.0: Failed to find BULK eps [ 231.096158][ T7272] bond3 (unregistering): Released all slaves [ 231.160662][ T1576] usb 3-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 231.166950][ T1576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.167017][ T1576] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.167044][ T1576] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.167071][ T1576] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 231.167241][ T1576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.253894][ T5721] usb 4-1: USB disconnect, device number 15 [ 231.292705][ T5714] usb 1-1: USB disconnect, device number 15 [ 231.505857][ C1] usb 3-1: received EP1 urb->status = -2 [ 231.509490][ T1576] usb 3-1: unable to init card! (ret=-90) [ 231.510043][ T1576] snd-usb-caiaq 3-1:1.0: probe with driver snd-usb-caiaq failed with error -90 [ 231.724583][ T10] usb 3-1: USB disconnect, device number 9 [ 231.885535][ T7284] netlink: 'syz.1.483': attribute type 4 has an invalid length. [ 231.938378][ T7285] netlink: 'syz.1.483': attribute type 4 has an invalid length. [ 232.327005][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 232.498449][ T7296] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 232.533357][ T10] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 232.534958][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.535030][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 232.620974][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.621003][ T10] usb 2-1: Product: syz [ 232.621020][ T10] usb 2-1: Manufacturer: syz [ 232.621036][ T10] usb 2-1: SerialNumber: syz [ 232.813304][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 233.078772][ T7301] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 233.342668][ T10] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 233.457124][ T10] scsi host1: usb-storage 2-1:1.0 [ 233.484513][ T10] usb 2-1: USB disconnect, device number 14 [ 236.040102][ T38] audit: type=1800 audit(1787643891.739:3): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.496" name="ifname" dev="configfs" ino=15856 res=0 errno=0 [ 236.227902][ T5733] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 236.229617][ T7338] syz.1.499 invoked oom-killer: gfp_mask=0x502dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 236.229814][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.1.499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 236.229840][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.229859][ T7338] Call Trace: [ 236.229868][ T7338] [ 236.229878][ T7338] dump_stack_lvl+0xe8/0x150 [ 236.229916][ T7338] dump_header+0xd3/0x4b0 [ 236.229949][ T7338] oom_kill_process+0x3ab/0x9e0 [ 236.229986][ T7338] out_of_memory+0x1064/0x1480 [ 236.230030][ T7338] ? __pfx_out_of_memory+0x10/0x10 [ 236.230068][ T7338] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 236.230094][ T7338] ? _mutex_lock_killable+0x152/0x1d0 [ 236.230131][ T7338] ? try_charge_memcg+0xbbe/0x15c0 [ 236.230163][ T7338] try_charge_memcg+0xc7d/0x15c0 [ 236.230210][ T7338] ? __pfx_try_charge_memcg+0x10/0x10 [ 236.230236][ T7338] ? is_bpf_text_address+0x26/0x2b0 [ 236.230273][ T7338] ? percpu_ref_tryget+0x15/0x180 [ 236.230315][ T7338] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 236.230343][ T7338] __memcg_kmem_charge_page+0x36c/0x5a0 [ 236.230366][ T7338] ? __memcg_kmem_charge_page+0x1ab/0x5a0 [ 236.230412][ T7338] __alloc_frozen_pages_noprof+0x263/0x5c0 [ 236.230446][ T7338] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.230473][ T7338] ? kasan_save_track+0x4f/0x80 [ 236.230500][ T7338] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.230528][ T7338] ? bpf_prog_alloc+0x3c/0x1a0 [ 236.230553][ T7338] ? bpf_prog_load+0x7f8/0x1c20 [ 236.230578][ T7338] ? __sys_bpf+0xd0d/0xd90 [ 236.230603][ T7338] ? __x64_sys_bpf+0xba/0xd0 [ 236.230625][ T7338] ? do_syscall_64+0x166/0x520 [ 236.230649][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.230681][ T7338] __alloc_pages_noprof+0x10/0x100 [ 236.230712][ T7338] alloc_pages_bulk_noprof+0x683/0x890 [ 236.230757][ T7338] alloc_pages_bulk_mempolicy_noprof+0x3f9/0x1670 [ 236.230802][ T7338] ? trace_kmalloc+0x2a/0xf0 [ 236.230830][ T7338] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 236.230860][ T7338] ? __kmalloc_node_noprof+0x58e/0x7b0 [ 236.230886][ T7338] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 236.230908][ T7338] ? __vmalloc_node_range_noprof+0x5d0/0x1560 [ 236.230940][ T7338] __vmalloc_node_range_noprof+0xa22/0x1560 [ 236.230996][ T7338] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.231022][ T7338] ? futex_unqueue+0x22/0x240 [ 236.231065][ T7338] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.231092][ T7338] __vmalloc_noprof+0xd2/0x120 [ 236.231116][ T7338] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 236.231147][ T7338] bpf_prog_alloc_no_stats+0x47/0x560 [ 236.231174][ T7338] ? bpf_prog_alloc+0x2a/0x1a0 [ 236.231204][ T7338] bpf_prog_alloc+0x3c/0x1a0 [ 236.231235][ T7338] bpf_prog_load+0x7f8/0x1c20 [ 236.231278][ T7338] ? __pfx_bpf_prog_load+0x10/0x10 [ 236.231337][ T7338] __sys_bpf+0xd0d/0xd90 [ 236.231375][ T7338] ? __pfx___sys_bpf+0x10/0x10 [ 236.231407][ T7338] ? do_futex+0x3e7/0x4e0 [ 236.231472][ T7338] ? rcu_is_watching+0x16/0xb0 [ 236.231508][ T7338] __x64_sys_bpf+0xba/0xd0 [ 236.231537][ T7338] do_syscall_64+0x166/0x520 [ 236.231563][ T7338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.231586][ T7338] ? clear_bhb_loop+0x70/0xc0 [ 236.231614][ T7338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.231637][ T7338] RIP: 0033:0x7f1f4981e0d9 [ 236.231659][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.231678][ T7338] RSP: 002b:00007f1f47a76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.231702][ T7338] RAX: ffffffffffffffda RBX: 00007f1f49aa5fa0 RCX: 00007f1f4981e0d9 [ 236.231719][ T7338] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 236.231733][ T7338] RBP: 00007f1f498b5024 R08: 0000000000000000 R09: 0000000000000000 [ 236.231747][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.231760][ T7338] R13: 00007f1f49aa6038 R14: 00007f1f49aa5fa0 R15: 00007ffd300fcc88 [ 236.231797][ T7338] [ 236.234462][ T7338] memory: usage 8kB, limit 8kB, failcnt 21 [ 236.234481][ T7338] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 236.234497][ T7338] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 236.234511][ T7338] Memory cgroup stats for /syz1/test: [ 236.234643][ T7338] cache 0 [ 236.234653][ T7338] rss 0 [ 236.234660][ T7338] shmem 0 [ 236.234667][ T7338] mapped_file 0 [ 236.234674][ T7338] dirty 0 [ 236.234682][ T7338] writeback 0 [ 236.234690][ T7338] workingset_refault_anon 0 [ 236.234698][ T7338] workingset_refault_file 0 [ 236.234706][ T7338] swap 0 [ 236.234713][ T7338] swapcached 0 [ 236.234721][ T7338] pgpgin 0 [ 236.234728][ T7338] pgpgout 0 [ 236.234735][ T7338] pgfault 0 [ 236.234743][ T7338] pgmajfault 0 [ 236.234750][ T7338] inactive_anon 0 [ 236.234758][ T7338] active_anon 0 [ 236.234766][ T7338] inactive_file 0 [ 236.234773][ T7338] active_file 0 [ 236.234781][ T7338] unevictable 0 [ 236.234788][ T7338] hierarchical_memory_limit 8192 [ 236.234797][ T7338] hierarchical_memsw_limit 9223372036854771712 [ 236.234806][ T7338] total_cache 0 [ 236.234814][ T7338] total_rss 0 [ 236.234821][ T7338] total_shmem 0 [ 236.234829][ T7338] total_mapped_file 0 [ 236.234837][ T7338] total_dirty 0 [ 236.234844][ T7338] total_writeback 0 [ 236.234852][ T7338] total_workingset_refault_anon 0 [ 236.234861][ T7338] total_workingset_refault_file 0 [ 236.234870][ T7338] total_swap 0 [ 236.234878][ T7338] total_swapcached 0 [ 236.234885][ T7338] total_pgpgin 0 [ 236.234893][ T7338] total_pgpgout 0 [ 236.234901][ T7338] total_pgfault 0 [ 236.234908][ T7338] total_pgmajfault 0 [ 236.234916][ T7338] total_inactive_anon 0 [ 236.234924][ T7338] total_active_anon 0 [ 236.234932][ T7338] total_inactive_file 0 [ 236.234940][ T7338] total_active_file 0 [ 236.234948][ T7338] total_unevictable 0 [ 236.234956][ T7338] anon_cost 0 [ 236.234964][ T7338] file_cost 0 [ 236.234972][ T7338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.499,pid=7337,uid=0 [ 236.235316][ T7338] Memory cgroup out of memory: Killed process 7337 (syz.1.499) total-vm:102252kB, anon-rss:1436kB, file-rss:22868kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 236.278096][ T5781] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 236.377216][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 236.380681][ T5733] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 236.432332][ T5733] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 236.432371][ T5733] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.432400][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.432436][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.584127][ T5733] usb 4-1: config 0 descriptor?? [ 237.044912][ T5781] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 237.046321][ T5781] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.046514][ T5781] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 237.105638][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.105682][ T5781] usb 3-1: Product: syz [ 237.105698][ T5781] usb 3-1: Manufacturer: syz [ 237.105714][ T5781] usb 3-1: SerialNumber: syz [ 237.392836][ T5781] usb-storage 3-1:1.0: USB Mass Storage device detected [ 237.621967][ T5733] usbhid 4-1:0.0: can't add hid device: -71 [ 237.622114][ T5733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 237.668657][ T5781] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 237.674102][ T5781] scsi host1: usb-storage 3-1:1.0 [ 237.806305][ T5733] usb 4-1: USB disconnect, device number 16 [ 238.015485][ T5781] usb 3-1: USB disconnect, device number 10 [ 238.389108][ T7352] netlink: 'syz.4.503': attribute type 17 has an invalid length. [ 238.389129][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 238.434212][ T7351] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 238.434240][ T7351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 238.607404][ T38] audit: type=1800 audit(1787643894.309:4): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.505" name="ifname" dev="configfs" ino=16470 res=0 errno=0 [ 238.732337][ T7351] vhci_hcd vhci_hcd.0: Device attached [ 238.789906][ T7353] vhci_hcd: connection closed [ 238.810626][ T38] audit: type=1800 audit(1787643894.479:5): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.504" name="ifname" dev="configfs" ino=15888 res=0 errno=0 [ 238.891536][ T1159] vhci_hcd vhci_hcd.4: stop threads [ 238.892172][ T7365] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 238.920528][ T1159] vhci_hcd vhci_hcd.4: release socket [ 238.930468][ T5714] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 239.247051][ T1159] vhci_hcd vhci_hcd.4: disconnect device [ 239.795030][ T7365] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 240.190787][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 240.246420][ T5606] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 240.792822][ T38] audit: type=1800 audit(1787643896.489:6): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.510" name="ifname" dev="configfs" ino=16496 res=0 errno=0 [ 242.716928][ T5606] Bluetooth: hci3: command 0x0406 tx timeout [ 244.017030][ T5714] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 245.746893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 245.756867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 245.766418][ T7388] smpboot: CPU 1 is now offline [ 246.771261][ C0] [ 246.771272][ C0] ============================================ [ 246.771278][ C0] WARNING: possible recursive locking detected [ 246.771288][ C0] syzkaller #0 Not tainted [ 246.771296][ C0] -------------------------------------------- [ 246.771302][ C0] kworker/u8:12/1171 is trying to acquire lock: [ 246.771311][ C0] ffff8880b873b868 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x86/0x890 [ 246.771355][ C0] [ 246.771355][ C0] but task is already holding lock: [ 246.771360][ C0] ffff8880b863b868 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x86/0x890 [ 246.771397][ C0] [ 246.771397][ C0] other info that might help us debug this: [ 246.771402][ C0] Possible unsafe locking scenario: [ 246.771402][ C0] [ 246.771407][ C0] CPU0 [ 246.771411][ C0] ---- [ 246.771414][ C0] lock(&pool->cb_lock); [ 246.771424][ C0] lock(&pool->cb_lock); [ 246.771434][ C0] [ 246.771434][ C0] *** DEADLOCK *** [ 246.771434][ C0] [ 246.771438][ C0] May be due to missing lock nesting notation [ 246.771438][ C0] [ 246.771443][ C0] locks held by kworker/u8:12/1171: 7, last CPU#0: [ 246.771455][ C0] #0: ffff888032868938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 246.771495][ C0] #1: ffffc90006787c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 246.771535][ C0] #2: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 246.771575][ C0] #3: ffff8880b863b868 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x86/0x890 [ 246.771614][ C0] #4: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 246.771657][ C0] #5: ffff88813ff21938 ((wq_completion)events_bh_highpri){+...}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 246.771696][ C0] #6: ffffc900067877a0 ((work_completion)(&dead_work.work)){+...}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 246.771736][ C0] [ 246.771736][ C0] stack backtrace: [ 246.771746][ C0] CPU: 0 UID: 0 PID: 1171 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.771764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.771774][ C0] Workqueue: bat_events batadv_tt_purge [ 246.771799][ C0] Call Trace: [ 246.771805][ C0] [ 246.771812][ C0] dump_stack_lvl+0xe8/0x150 [ 246.771836][ C0] print_deadlock_bug+0x279/0x290 [ 246.771864][ C0] __lock_acquire+0x24df/0x2ce0 [ 246.771884][ C0] ? ktime_get+0x45/0x220 [ 246.771905][ C0] ? ktime_get+0x45/0x220 [ 246.771920][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 246.771938][ C0] ? ktime_get+0x1f5/0x220 [ 246.771955][ C0] ? bh_worker+0x86/0x890 [ 246.771973][ C0] lock_acquire+0x106/0x350 [ 246.771989][ C0] ? bh_worker+0x86/0x890 [ 246.772014][ C0] rt_spin_lock+0x83/0x400 [ 246.772035][ C0] ? bh_worker+0x86/0x890 [ 246.772054][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 246.772071][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 246.772096][ C0] bh_worker+0x86/0x890 [ 246.772120][ C0] drain_dead_softirq_workfn+0x95/0x220 [ 246.772142][ C0] ? process_scheduled_works+0x97a/0x1630 [ 246.772160][ C0] process_scheduled_works+0xc3d/0x1630 [ 246.772190][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.772210][ C0] ? assign_work+0x3cf/0x5d0 [ 246.772229][ C0] bh_worker+0x44d/0x890 [ 246.772253][ C0] tasklet_hi_action+0xf/0x70 [ 246.772273][ C0] handle_softirqs+0x1da/0x6d0 [ 246.772295][ C0] __local_bh_enable_ip+0x16f/0x2b0 [ 246.772315][ C0] batadv_tt_local_purge+0x2ed/0x380 [ 246.772338][ C0] ? batadv_tt_local_purge+0x91/0x380 [ 246.772364][ C0] ? process_scheduled_works+0x97a/0x1630 [ 246.772382][ C0] batadv_tt_purge+0x35/0x9f0 [ 246.772407][ C0] ? rcu_is_watching+0x16/0xb0 [ 246.772428][ C0] ? process_scheduled_works+0x97a/0x1630 [ 246.772446][ C0] process_scheduled_works+0xc3d/0x1630 [ 246.772476][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.772496][ C0] ? assign_work+0x3cf/0x5d0 [ 246.772515][ C0] worker_thread+0xa47/0xfb0 [ 246.772544][ C0] kthread+0x38b/0x470 [ 246.772567][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.772585][ C0] ? __pfx_kthread+0x10/0x10 [ 246.772608][ C0] ret_from_fork+0x514/0xb70 [ 246.772632][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 246.772655][ C0] ? __switch_to+0xc89/0x1420 [ 246.772676][ C0] ? __pfx_kthread+0x10/0x10 [ 246.772699][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.772719][ C0] [ 246.778599][ C0] BUG: workqueue leaked atomic, lock or RCU: kworker/u8:12[1171] [ 246.778599][ C0] preempt=0x00000000 lock=5->0 RCU=2->2 workfn=drain_dead_softirq_workfn [ 246.778640][ C0] INFO: lockdep is turned off. [ 246.778650][ C0] CPU: 0 UID: 0 PID: 1171 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.778669][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.778679][ C0] Workqueue: bat_events batadv_tt_purge [ 246.778705][ C0] Call Trace: [ 246.778711][ C0] [ 246.778717][ C0] dump_stack_lvl+0xe8/0x150 [ 246.778741][ C0] process_scheduled_works+0x12c7/0x1630 [ 246.778772][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.778793][ C0] ? assign_work+0x3cf/0x5d0 [ 246.778812][ C0] bh_worker+0x44d/0x890 [ 246.778836][ C0] tasklet_hi_action+0xf/0x70 [ 246.778865][ C0] handle_softirqs+0x1da/0x6d0 [ 246.778887][ C0] __local_bh_enable_ip+0x16f/0x2b0 [ 246.778907][ C0] batadv_tt_local_purge+0x2ed/0x380 [ 246.778931][ C0] ? batadv_tt_local_purge+0x91/0x380 [ 246.778956][ C0] ? process_scheduled_works+0x97a/0x1630 [ 246.778975][ C0] batadv_tt_purge+0x35/0x9f0 [ 246.778999][ C0] ? rcu_is_watching+0x16/0xb0 [ 246.779020][ C0] ? process_scheduled_works+0x97a/0x1630 [ 246.779039][ C0] process_scheduled_works+0xc3d/0x1630 [ 246.779071][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 246.779092][ C0] ? assign_work+0x3cf/0x5d0 [ 246.779111][ C0] worker_thread+0xa47/0xfb0 [ 246.779140][ C0] kthread+0x38b/0x470 [ 246.779163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 246.779181][ C0] ? __pfx_kthread+0x10/0x10 [ 246.779204][ C0] ret_from_fork+0x514/0xb70 [ 246.779228][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 246.779251][ C0] ? __switch_to+0xc89/0x1420 [ 246.779272][ C0] ? __pfx_kthread+0x10/0x10 [ 246.779295][ C0] ret_from_fork_asm+0x1a/0x30 [ 246.779315][ C0] [ 246.789621][ T7391] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 246.791021][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 246.791045][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1