last executing test programs: 3m29.833672985s ago: executing program 0 (id=101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x5044}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}]}}}]}, 0x38}}, 0x4040000) 3m29.64851111s ago: executing program 0 (id=102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000280)={r1, 0x1, 0x4}, 0x8) 3m29.517672975s ago: executing program 0 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) 3m26.880469037s ago: executing program 0 (id=109): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x14, 0x22, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x80) 3m26.79628561s ago: executing program 0 (id=110): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000c00078008000840000000700500050002030000050001"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3m24.815833125s ago: executing program 0 (id=112): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/79, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3m24.359327304s ago: executing program 4 (id=115): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x28, 0x3, 0x1, 0x389, 0x8, 0x2, 0x4, 0x1, 0x0, 0x7, 0x4, 0x7, 0xfffb, 0x8, 0x5, 0x0, [0x7, 0xff]}}) 3m24.065655235s ago: executing program 4 (id=117): openat$tun(0xffffffffffffff9c, 0x0, 0x131482, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) io_setup(0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x202, 0x686de4acd6620a3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x17, 0x0, &(0x7f0000006680)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendfile(r2, r2, 0x0, 0xffffffff) r3 = socket(0x2, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'lblc\x00', 0x9, 0xfffffffc, 0x1c}, 0x2c) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m22.606651254s ago: executing program 4 (id=124): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) 3m21.31396739s ago: executing program 4 (id=126): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto(r1, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)='a', 0x1}], 0x1}}], 0x1, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000000)=0x401, 0x4) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x4, 0xd, 0x8010, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, 0x0, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) syz_io_uring_submit(0x0, r2, r5, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0xffff, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}) r7 = fcntl$getown(r3, 0x9) timer_create(0x6, &(0x7f0000000240)={0x0, 0x8, 0x0, @tid=r7}, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) 3m17.994114225s ago: executing program 4 (id=137): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4450}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000004340)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000000200)="4a4a4e7aac317e3a48e629edb688a58ffd5b9bacbf80fa42d0a5f6a673efd05f2a148cf6e9f9aa136f89a59dd85e1c638a00901ee2096314ba7f9e3453e480c2b10bfa8ff2bb13e9db47d61a1dfd", 0x4e}, {&(0x7f0000000340)="81c618fe25b67a4b3b6136718a5476d77232034a462ac67b15aef407f30042250da8b6a078bc42a13f82c982ed334cdded341238a8367d2d3d0850fc6e54e0e33873479fd2828a424a50610e793bb88343f29eb88da6dbf90d170ef39e89d1c541b7fbc3461498f3081372584f0b6684899f8ee353230391092d05734d324beed183a36a30181a0089bc4cfa8aaf89eb2863ea2fb0f90285800e4e3ac04a8fbc7895725626737b2945b70422e0247f5380d0c5f73724d2be2fb72791ce86d25edc3e607fc22c562f89f87417a071226709fe7284bda61b24df10103f65b4e505b4d967418cf98017", 0xe8}, {&(0x7f0000000640)="6fd47f19f5e26c81878cb1e9e59ffb52669ef8836a1ef68e5ad8e7b310e365a9048f86682d3c4403dce51a2795bb3ccbcc14c98c9e4d0df5f9543457d44b026cfb79849e2e5a3d812d9bfb5f603d7c7c233611bda3d2e59bba8e782b15fb930d4679884db7e0b7c920283505f12846c06b1d5c01632f41e5915d1bfd207ebd5593e53ae02f5b565606cbda7bc57a5ee0afba1c9f4dac189fa6e7650761105582a310c83e07376f96864f5d4429232e29482e7813f010fcba529088142803956e35510ea9d7ad01fc2ad1adde3677da042b4226db12ea62feda24b8834556c7f589b34aafe07968506e629f70eaafda532f447c3d76236628", 0xf8}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="fe0a24", 0x3}], 0x5, &(0x7f0000002ec0)=ANY=[@ANYBLOB="18000000000000008400000007000000ffffffff06e4ffff17000000000000008400000007000000ac14141000000000"], 0x30}, {&(0x7f0000002f00)=@in6={0xa, 0x4e23, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000002f40)="a793cb8f1c3f3020b4fea6aa748b99e3a33d448e0296c050fec47fa8f4228e926df9fcc304ab1ccc9981d096f12a697edc461293f12c199de8e3eabac55f47b8a4590c1227eedea3c8793b12901bb10d42ea34beaab02952750da2cc4a5c406402fb27e8a587e267a98666857b87dab5260e89b9c70a184eb3a85c5368", 0x7d}, {&(0x7f0000002fc0)="1fbcb8483e93b201a93c08d198ed7692944bb9d8a7860b0ef47600e2290d7d0c6bb92bb35c95b61c93634d5378ae597614d5b2a7d874f969fa02fe32f6147f1112ea453ae96700bc81c037d924a8aaae4564e3651a4c24", 0x57}, {&(0x7f0000003040)="d0255f3a0dfbb83711c355750ae76a91004850cf26138be2ee9f2cdf330735ef71ae0fbaf6af58830bc0dfcb6c7d7c3fd49cb5cd962539c56a4fce6b8fcd2c199f906efddb6eb9f7c16b7b815118fbc73ac819102461725c5ff934e50d0be1f05db3927b3b96d5ff6a21ef36dbf3de8698a2d5bbb65d5859adfdcd4857fc5b570ef3336239fa779c3176e6eec9e50b1f5ca2652ccdc7984ab8fe589ea2d2a004468c6fb27475611aa400d21b3a66b4cf28c91e67a9a6f20b0bd74e40afa83d5b0a5dfb23a36acd97a833eaccf40128004d06eb396dde9813e9fd7dbaef734f12cf003ed33cec41063bcf1568ee2429fc3435afa1bd9126e28f11efab4a7fa43606806868aaf10d779b604d238775745fa00203de864748cdd65209f9a88f10bc3a92f56cdee02ff3ed3470e7dfc7642ba3c6d452eca809000c36117aaff436b3e11cd670a65829fdf2babf1e36d0d02a24c3f58a9c59e5ef1ea99cc8eaa5cb97c318fec08676e6087716080b5bb7a76cc027100a9ecbca774b018c492c12452640b271ea385ef024e8c93dfd690bfa0201827ecd45dc37bb2a340da63fc7aa8ac850c5f3be3bc1940ebca9756a3c54709b38b6d93050bb73ad952decb823499f89ee29661f4e00ff1d33c52de47821796e9a78ad30e554015653e4131f690ecacc98632c9d70d9bffc8f855f2298fab6984b88198963fbcbc002da2db7a1cd85509c70a9f9dc4edf2bcea5a2acf3bbad079e6ddefa3f3cc74f42e758327bec7441c91081ebf201748133e7bf153cf25d10b3414ee3f2b5e19ac6a96951d9c9635e9adb5463fe934f3bf69e123631b56d8d06c5801eebbc0c620c06e4baa9bda15083fd02865590f7b3731fa7b05536ccdf13e824d41258d4a8a3f63c1391a6181ad0e206baf64fd6382bcdf8c7a8521ac3f57f071072235b73b734cccb952599927080593bffd3f826a6b55ebf3a8fe553e161ea553198218e42a2b6804b2cb2232eb4f270065025959dcc08df96a9e2415fa9e0c377a7adfcea7c1c293fd02f6ca1fdb2a8a88285783c41aef92a896b6d32c431f336ba92be552d2732c29d404208fefc8eea7d9fcb931d15946c70f64f6f031a4fece75ab7790f554aea4fc60b03c21048c7d6e5fb3a0fdb595a7c3a7b2d027e5f8306eb71feedd733654ec15e4e877d3b24f9f1b1b02f978e7bd6fe980d3b98e68ae123612ba2e891db67bbedf56e6f722c63586db0308e5a2e085da45461844acf226749bd6cc736c011715fd57fc70503054609188bd50378bc4adeef22cfafc4f75b0c49a57cecfe5c33379965255f396f161533d66b9d9cc0495c87fa1db320eff2a2c36ea0048bd252fe52a2e7603b390f37964efd6d27b8edd9343852be3b7e9c2721e7f81b25bde994b34ae23eb49b90763ae8e5282441d2b2eb6e428edf63adb985e38076a3b551bb3225826cb5cbc84e68ca976487333879f9e22e4d495e2b35f97fd538dd0cfae478d522684feb058d7ca7f3cd6c63bd6184b1f3f69dc82d38e04d2e45682548d2de5aa0ef3943027af75d0f6f2d1be70de76710e037efb9f38bdde7395c01269a09b63575346a0cf106cd4fdc4d896f5a5bd468afaef3b29a5408630946a24a27b5d54c774b43a49a307c8203291e2124a02462babbe4a00db281ddafcddb1ae4ba4386ce42143352ab5bdcada16be93afc1a84111c45d1231c1790145a3d11cc5a8a81724417a365c26b1ff53a57b165e67677fab910e1b32dd2618e1440d3bdbc3af3490d11b6c7f419aea06d4080de13bb5a54620f0e48ab06b37a4ebdd4423344aa4262d88a536fe4a3bb058908331c1c7ab305d6590bf11e4be3903957662dec53359e6ff4c901025f6ce1bf4d5a8d58999a10fce8f00999d1339e9cd05f5e36599b7822416a798e4658ced3927a96104ed7a9cb0258a81f90d20d6e5ef00be4f5fb5ed6bb4c11a07153aa5250969d2406215d8e2186005c183a2b1394731c6b1d308693eeedaa3062be86801d782a3335d07d36b4a28707b0e852ea7d70ac1d5f86b3ac95503c4a105885cc742720532910b065755ef494edb8155d59dea86c8cb07474b28154aa71be1cb7e2652edfd55095ab6160d289a2df07acb687e5ae7c7bffff1afa3f03d6da4a5f1fc2df8be9b841691e006d7006acfda1771a44391b94c37925421e16a34f3b971a5c3d50f8ca31557b4ec210e82e8d58875ad6047cb6ed140eef59ee8c729c7d128b9f7faa8eb33a9615b0f91d8529cb5401a46f974d36a17322d8efc2f575704fbbcda1c539ff25dcc64dfa04ea0d208fc4a0197d03a2721a6a224083170546e757d23a323f5a890cb4cce7d84f5fa436c96bc08c550d631c9d2ef42a849ee97518241061baf8b3ccce3ad875cbe3ce52fcd2ca226e1480b1ac009777de033af865d7bdfe96766ca0212d23846c59ac667ede56c85e7bbd577c2b44703a4184b7b4b2111b3ba4270f078ab7b4b86067df973b7a562093394591dd558dcbfd28d157ab476837609f0dcd7c1cb2a4b66544d90666592ccc74bbc95b491ea818e6dc7335c84a37d9949c4159af2afe8d4c6475e6bec23ce2d4bb3db9e10623863fbd6dd14efe36c7cfc83bc2bb7ca1b36f3acfc693c9b79f69028b2f5f9a8bc5aaaa67bcffc4fa5c44e91e298c6a10b349b2820078e328118a784cabf0b60a731654ace11bcd82d9fb7e0b896d2413515dad1443256fd1ae4e530db62b53ba0fadfec422045a9d52f6532637ff28c8216e48d34f7eacdadc391d465d8131449f7649e90c20a1cc3a16d859cb906a854c612a0349cdb85c6d31b9b1c19f772ebeaa4204a2e47726ec9c4358d8447e9c4ed5f8d420d041a1cf9214b937ed763a387ddf09cb704bd45748dbcd998d3ddfb57b987d750bce1ce4f6ef4a178c7537702a8d652c3077099142d2b05d4902330572c584e0c279beac8c16f1ecca6d47b670b29254bb0e57e744358dc65bc10dd03dc7a21c4dc9fe36e1c9073e9896c701d2321a5aaf4b0a20be6a6ffb350c982c3cc5eea1d793877381870835cddba5a7cda5f0d2f843147d8cd83a5c941f4362fa712bb05ed2ba97e7ebd8fa16e0c09164e94c94eeb4220b45630307d3b17d8563afa334b952903ec6192b15f9f49d38702a167414b7abffb9006b41626c3f642e3bea028a23443f5581fb994ea86fcb34b9fc3e7c0d13e679e585999aefd6d3f473aec52e398589093a724d02c91c85c3ee1de4828a3a559b614e92acb85a098b7ab1d3eedf5f5408f4dc65116b4119aee0703a73a2448984171d6d9cf8cfe4d6a86bbbf58ef2c6e9befef4ce8443b8bc267896fbfe1de5bb94a0a9a183cdae9507ed0daadca2912dd612e35426bf36a19473ea85852a9d43af4623f13c4c2c45ab3880b4db187edb87c6b91ade247e08b0fab7eb0f6d1c10c3e0b75fcb69f20c428bae953526e939ca921c62b8a68320684279af94998a5f23ad9476b89330cc33afe05ea5548c0ed09362a25e76272fcb6ba2f8b4aed528e442b77f09a7e6ebf22b8e573dc9367805ac5cf76cdf56b9da1c05cf0cfc3fbd610a69bd61f9cd7849fd22ad4dbb6139879cb0ec55ff84d2b896b320cc8c7bdc2f717175cbea8bcd973d9b905c677472e2bfd0c4f157d0537586d275ba19762d61bf6dcf96b8a343b22a3ef3d010764236d9bde5cbb77926db4b4f331b7b8e0a419742726bd319b0914748d89dcdb0fa75cb8d1fdcbb4b8e9ed35d597f33eb6dfb6f9f2133dc3acf1f097eb8a169208d8dc6d29828ad77b9aad868f7be6d5a518be50fbb4de396448d90bd31aabbf93201b0ab25a781d9a49e9647bdec1d6a1ec691eedd6f88e34ac3859043adca7b536662462a3eb96562e78e5e2c68c612f67eccc96e3a8bb3ec1e6c43357f27305c3119109325b1758bdbc524d16cbb560fb361407c3bcedac7e48b7ad78aa3e42b965b204a7ef35db6c5deebd7d05901c53d8e6f626adb633375ec5005b00a529507446b6612035bb5e40b52533c5b2074dd23213c0356860b3d7710f5b9fa6ff729fb0d153f62ed5c40f0a64b06b7895bc7cf74adbb9eabedd5a07a89b8a484c87c8e990b8ef19607cd75c9d312f269124908784679e647c54072c13cb8d43cdf4961810b624d8a1a3f5a7c21fd2aee38abfb63cb670d841f2566cdf6e98557194f80b493ff06a0bdbd248cbb4e90778ed3aa512ef35516e191ac4124607e4b4030aae5149ca52a77bdad0a156d4b0d2a9a8a5383766bff119b67423a44e7a29abc37e6a793b99463e7d65853a29b37f33de979dbfd17bdb7178a5a59f755f420a1cfc3f922bfef43095d3b0f71140207d82ad2d8deaebf9065a63c912b5c68d158a031ced8910b2e9f18e404b4863237d7bfc3740ef8ef4ee172628f1d73d326213a1a8d1c590f612842471df2f9b8d10293b96f0f0dda365a639df40768f111f778bcc9ac4071648388c046153481b339ee0364f619bf2d456906253a86654bd119cc699e4939bc4c12e87b562f029e9fb63118c405913d447d4d4d31736d251169e02e82e1335f6a7499e971789098b091f21f6618b7310406fc2a89ff8aed5961c92eea3ee4b5b4ef05c1584beb47b0d0cb18f1d7744a803c65ab7f8dd99af16c237c30ed25aaea035f01a89f382e80ccf3348a2afd21f4a507030f9cce39a3e90e205dd7bc5c4e5f4847776174bab18fad33810509b2c899a1e8d9ed68686a1e5411924411a61fc4d2a5573e53e69d210f6b5a8b7e299be24d642be4e36451e852e8268483cb130543ce4a7382868762b6565cf720f4eca21ad1c0d6244e2c23dd37636dc3a015453a6e4d082d2ea067da26a40f73e751d38e715068c989f7a555156851cfa33997bd43815bfb436ff356cfc0245576345d07a276c6272b99adcc707ab162d12debc95404bbce34f485169ccd2ece0900e5fe518ef5400d274a9d8111fd2085a7ced90e1df211d4f5d2a7431432042427762cbe95942b34a831db2e667cf1b4a4fd5e62d66ec5849655388a89b40d4a10b7fa4986ffb887ae3460f23a2be7bb4580605693872aa1e3f517017674b94e099083a8c5c2a1a56597a44ad9ac7cc75fd2af0e33e61702f2bda2ca7c9155ac0e61ff168cf9d8101e84c8a324eeee66fff436f00063d7214dcbc35000e43b9b556d5f3b243e9423564b5bd8154c3a2a5127b28be6c2defd78fffbbbe623fd294651d765cab5da86cfd136b3b8b03e12ff36d742f883a0a148bb1a640e589fb0159b27dab655811d7d89817329cf857db97b7afa9b2e9729be531ddb7d55e8bc35cbdfd0bcf5ccc6adb14fc3dc3f925291c12b14850fa97afb2aaf949bd02b65eeadf31395823ee3edc13c458d4def503610f283ee9733cbebd949a033f7b93632f24a8fd64393d7ee7683bb6cbd1478bea9a06cc116986919a154c70bf15cecc142abea551e748302ad2302405a296d3d0e51dcf4b009527530b095214df6fd04c57e2f9b0d81096f1539d2b8a13b3faf6e63a8b6c42759dd11b853cd2210e20b07f7458cce9d7b0a5beb2127bc418afa9eb4d69d99f946b3037fdddd1efe03c4f2108b784f2b481ccc108e00f7ca1dee18f72fa31e9c77a8de3c903e37d9d9f54d9a0326dce7f1899ba440e89123b2b6596a714e38dc097f33dfdd6a4ac37220d34d3ad0c07cc44c9c8a814841f5fd026f392dd8ea246c2e87d8f4d25026e3261f327b7c4f98a01f514018e56b7365fdacf1756f91c5add64491fc6ae2c323ad3eb2684915c3cc78b74ac35196c9e721fb464e4aa477885d051251e93bc6145d", 0x1000}, {&(0x7f0000004040)="620224bfb3b72265c52b7603ba9a50c8dd66f26a56aaf13734447f51e46acde6701fe5b283515e161213029bfa6228", 0x2f}], 0x4, 0x0, 0x0, 0x48014}, {&(0x7f00000040c0)=@in6={0xa, 0x4e21, 0x6, @private2, 0x1000}, 0x1c, &(0x7f0000004300)=[{&(0x7f0000004100)="70225d6295e00a4a1a7e467a993f3e5edd574d58895ae65dd67401447290511e06be978d1f56a3d97fed2f83287c2fbafc7181617f2d9ed9ce2c3d9a67fefd34bc4deba424242d792015958fafe25c3255da0bf429a474159ad25e34fdafbef4c4485871a4466a3b4fdad504e3b270f33e653a90a410632619fd622bff1df0e1", 0x80}, {&(0x7f0000004180)="4f70851b89002486a7caf0ae433757b7bacbf05f7c9e27384e96e13e821f9693c8183a52feb201cc0344176b2539adc8ef907c8d58d588d1803e0b7d1fea624bbe36f19165b1aeaee64a1b4ae02b92f07e842394b561d6edbb7ea4ead08cccf2920dcb49348d45f2fe983239808ee2630d7f9b3eaaf598167a003fd76577e2040fe4dba09f980e56b2a9413a722e94249dbdbf4e48596b5a3b2aa291b48f8ded6ea67f57eb2354a49d51f499c1343f91502e5b9653", 0xb5}, {&(0x7f0000004240)="e54750d50cccb4c44e848f10a9e0c571c969047a0890a86e126166ae2718d5eb3229a9281036d4b7e91328a83908aa5dd78329f8dac1d4d658686e635854460979237f2a18d17af679c87eea5973b4018807e60e797c007a9de19437d1e36b95d4e0a6fa2d76173521048f627f50ec62090e13a58b1eaa17dc090e37556dec2fa4ed68849aac12a29a40b760b47708044dd0d7ac9c", 0x95}], 0x3, 0x0, 0x0, 0x4c085}], 0x3, 0x0) r4 = getpid() madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001d00)={0x20000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000001cc0)=[r4], 0x1}, 0x58) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x106, 0xf6, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee", 0xf3}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d4b985a3dd9740bd33848702930cd523b91f0e15f2a4d81f18bcf", 0x12f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m15.310220843s ago: executing program 4 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x24c16a82ae8a2de6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3m9.450867407s ago: executing program 32 (id=112): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/79, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 3m0.230146561s ago: executing program 33 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x24c16a82ae8a2de6) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 11.221747816s ago: executing program 1 (id=517): write$hidraw(0xffffffffffffffff, &(0x7f0000000400)="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", 0x112) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x60, 0x26, 0xf2, 0x20, 0x2040, 0x2011, 0x3a6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x10, 0x60, 0x5, "", [{{0x9, 0x4, 0x0, 0x24, 0x1, 0x8d, 0x24, 0x80, 0x3, [], [{{0x9, 0x5, 0x8, 0x3, 0x1a7, 0x7, 0x6, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000f00)={0x14, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="401505000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x84100) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a400090582"], 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r4, &(0x7f0000000000)='8', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="120110012b5132402404009d2753010203010902120001"], 0x0) 8.217612506s ago: executing program 2 (id=523): r0 = syz_open_dev$video4linux(0x0, 0x100040aa7, 0xc0203) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) r2 = syz_open_dev$video(0x0, 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) getpid() 6.803198132s ago: executing program 1 (id=525): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x815, 0x16, 0x0, 0x0) 6.094762931s ago: executing program 2 (id=526): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x1, 0x6, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2031}, 0x0) 6.045705725s ago: executing program 3 (id=527): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x183200, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000300c8"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BLKOPENZONE(r2, 0x40101286, &(0x7f0000000180)={0x8, 0x9}) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r3 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) r4 = dup2(r3, r3) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000600)={0x38, &(0x7f0000000340)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) unshare(0x22020600) ioctl$KVM_IRQFD(r6, 0x4020ae76, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800030064000000080002"], 0x2c}}, 0x0) 5.748671585s ago: executing program 1 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x2, 0x8000) 5.393333978s ago: executing program 2 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7f, 0xc) 4.277793181s ago: executing program 2 (id=530): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 4.264593006s ago: executing program 2 (id=531): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb48, 0x1005, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x1, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 4.193163269s ago: executing program 1 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='1', 0x1) 2.981342623s ago: executing program 1 (id=533): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000e0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c03209040000"], 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0xaa, 0xc9, 0xb2, 0x8, 0x1660, 0x932, 0x7332, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x10, 0x81, "", [{{0x9, 0x4, 0xff, 0x0, 0x0, 0x1d, 0xd4, 0xf8, 0xfc}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 2.979697532s ago: executing program 3 (id=534): r0 = syz_open_dev$video4linux(0x0, 0x100040aa7, 0xc0203) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa6f81, 0x0) r2 = syz_open_dev$video(0x0, 0x7, 0x20002) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, 0x0) socket$inet6(0xa, 0x80002, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0xc0101) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x2}, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) r5 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000300)='iocharset', &(0x7f00000001c0)='io#(ap\xac\xbesyt\xca\xb6(\xf9\xde\xe7\x82\v\xad\x9c\xf2\xd7+\x9bCN:?\xfd\xedf0\xb3\xb1\xf4\x8c\x15\xf9G+\x7f\x87\x91JQ\x01\x00\x00\x00\xee@\xf0Pbp\x95\x1a\xc2\xde\xad]\x80~\xf9\xbd|!\ta\xaa\xb2p\xee\x8d\xb6\n\x90wx\xd2\xc5\x00'/95, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) getpid() 2.442702754s ago: executing program 3 (id=535): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) writev(r0, &(0x7f00000023c0)=[{&(0x7f0000000e00)="da3c0df6268e31dd9d845d583e62b35da79a039a5af68668c421eb6cf79a473175b048f95b8659a39e0e048cf9eb453bd27ad174c139eb407ef4ccead12f71a9a7fad04fa5692d5bc9c0ff5e6d97f9e21689cae4c8bfc51cd52e58bf3c8c2620f287c6e64be8314d30935363d2882fa4ae272d365d1f68d4b1b7ce693833c8712d630028e1c953ba8d54a502035e", 0x8e}], 0x1) 2.12222448s ago: executing program 3 (id=536): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x815, 0x16, 0x0, 0x0) 1.883585001s ago: executing program 2 (id=537): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2b}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x6, 0x6, 0x4, 0x40, 0xf8}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x6d, 0x6, 0x56d5, 0xf00, 0x101, [0xc0c0, 0xf, 0x3f00, 0x3f00, 0xff0000, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0x6, 0x9}]}, 0x4, [{0x2, &(0x7f0000000200)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc01}}, {0x0, 0x0}, {0xe8, &(0x7f0000000380)=@string={0xe8, 0x3, "0d49f3e598838b6ae81499722f1574f0d866b9879522a856c3c28e66c951d10cb99fb6c1b1cabebd06fd37de0adce28494bbdc6a80f311707057d7fc62745acd35c62fb3e10b702683b99a0da58348f9006adbaf04852fa0a48a40f2c3ff8f838c0e8b65847badaf579497ac300825c177e27a727e587a0b170abe92a6bccc99bea18c6dd4cc635863347025af19a90ce98e5f48dcdcf4c11dcfd8a27c69e77b661a56596e0fdd47525954ad807c2466a9a0fa75cce60a8180c30c180ff365d6eaae747b48714fdb5a09a0903ddf2da2e644bc4ad67f6687775b5b21a6a650e9cb91d8b38461"}}]}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000407d03000000000000000101022400010000000009040000000301000000210000000122000009058103000000800052f3ebd5a6de3edc8863a2b69a1d37ccb17d675d455c4dadba4a3cc861d0546b4c2465bc8d9ea77d307cd0f1a7b642097cf7cad1e6d088fa507158e3ef87511695a76504541df864b75b6e71dbe873cf1ede1c7283f4f9cdf3e53ae89ba1ee788fb25072354438f75a895df71c831f6782b4e0f13987f63abe045b87e5e0beaee4e7"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)=""/231) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000080)={0x53, 0xe1, 0x7, {0xff11, 0xffff}, {0x4, 0x5}, @const={0x4, {0x4, 0x6, 0x4, 0x4}}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000040)=0x7) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x0, 0xa}, 0x0, 0x0}) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f010203010902"], 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040)={0x1, 0xfce1a86b0db46002, 0x3cf3, 0x202000, 0x110001, 0x80000001}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x200) 1.193141488s ago: executing program 3 (id=538): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 963.612µs ago: executing program 3 (id=539): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000400000008000000c00b000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000a80), 0x407f, r1, 0x4}, 0x38) 0s ago: executing program 1 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{0x0}], 0x1}}], 0x2, 0x8000) kernel console output (not intermixed with test programs): q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.129675][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.173800][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.182846][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.212715][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.216693][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.237958][ T5593] Bluetooth: hci0: command tx timeout [ 84.237992][ T5593] Bluetooth: hci1: command tx timeout [ 84.245761][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.283074][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.313530][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.382195][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.398298][ T4904] Bluetooth: hci2: command tx timeout [ 84.398308][ T5593] Bluetooth: hci3: command tx timeout [ 84.458373][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.501036][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.506981][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.552470][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.559211][ T4904] Bluetooth: hci4: command tx timeout [ 84.569820][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.613267][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.619284][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.665664][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.672029][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.722436][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.722662][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.754002][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.795117][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.795293][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.892955][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.940442][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.940601][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.974697][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.001080][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.001251][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.087321][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.175729][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.189471][ T1865] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.189677][ T1865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.257292][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.257419][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.395271][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.437822][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.445471][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.449347][ T3088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.535375][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.536186][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.626059][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.724942][ T1360] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.725164][ T1360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.827203][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.827413][ T3088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.117159][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.318679][ T4904] Bluetooth: hci1: command tx timeout [ 86.318712][ T4904] Bluetooth: hci0: command tx timeout [ 86.478599][ T5593] Bluetooth: hci3: command tx timeout [ 86.478631][ T5593] Bluetooth: hci2: command tx timeout [ 86.638318][ T4904] Bluetooth: hci4: command tx timeout [ 86.667764][ T5589] veth0_vlan: entered promiscuous mode [ 86.716647][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.732186][ T5589] veth1_vlan: entered promiscuous mode [ 86.914040][ T1000] cfg80211: failed to load regulatory.db [ 87.167718][ T5589] veth0_macvtap: entered promiscuous mode [ 87.179216][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.186722][ T5589] veth1_macvtap: entered promiscuous mode [ 87.314141][ T5592] veth0_vlan: entered promiscuous mode [ 87.378145][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.407729][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.416513][ T5592] veth1_vlan: entered promiscuous mode [ 87.504540][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.587463][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.944774][ T5592] veth0_macvtap: entered promiscuous mode [ 88.007668][ T5592] veth1_macvtap: entered promiscuous mode [ 88.067548][ T3376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.067574][ T3376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.114261][ T5591] veth0_vlan: entered promiscuous mode [ 88.180614][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.199402][ T5587] veth0_vlan: entered promiscuous mode [ 88.203835][ T5591] veth1_vlan: entered promiscuous mode [ 88.221188][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221203][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.226624][ T5590] veth0_vlan: entered promiscuous mode [ 88.251533][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.294104][ T5587] veth1_vlan: entered promiscuous mode [ 88.317828][ T5590] veth1_vlan: entered promiscuous mode [ 88.605908][ T5589] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.666445][ T5591] veth0_macvtap: entered promiscuous mode [ 88.744204][ T5591] veth1_macvtap: entered promiscuous mode [ 88.860951][ T5587] veth0_macvtap: entered promiscuous mode [ 88.883429][ T1865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.883451][ T1865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.910106][ T5590] veth0_macvtap: entered promiscuous mode [ 88.939137][ T5587] veth1_macvtap: entered promiscuous mode [ 88.996320][ T5590] veth1_macvtap: entered promiscuous mode [ 89.033187][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.095051][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.097569][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.097588][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.135188][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.174664][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.183622][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.215753][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.862759][ T3405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.862783][ T3405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.032133][ T3376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.032153][ T3376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.148105][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.148127][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.180537][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.437245][ T1824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.437267][ T1824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.686972][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.686990][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.935187][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.935207][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.007768][ T3376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159471][ T3376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529332][ T3405] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.562026][ T1048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.573841][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574024][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574586][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.574753][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.583576][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.746163][ T3405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.746398][ T3405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.746678][ T3405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.759318][ T5797] FAULT_INJECTION: forcing a failure. [ 93.759318][ T5797] name failslab, interval 1, probability 0, space 0, times 1 [ 93.759385][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 93.759409][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.759429][ T5797] Call Trace: [ 93.759436][ T5797] [ 93.759445][ T5797] dump_stack_lvl+0xe8/0x150 [ 93.759492][ T5797] should_fail_ex+0x46b/0x600 [ 93.759525][ T5797] should_failslab+0xa8/0x100 [ 93.759544][ T5797] ? mas_alloc_nodes+0x291/0x350 [ 93.759565][ T5797] kmem_cache_alloc_noprof+0x9e/0x690 [ 93.759593][ T5797] ? mas_alloc_nodes+0x291/0x350 [ 93.759619][ T5797] mas_alloc_nodes+0x291/0x350 [ 93.759642][ T5797] mas_preallocate+0x42d/0x840 [ 93.759668][ T5797] ? __pfx_mas_preallocate+0x10/0x10 [ 93.759702][ T5797] ? __mas_set_range+0x11a/0x3a0 [ 93.759726][ T5797] __split_vma+0x2f3/0xa00 [ 93.759757][ T5797] ? __pfx___split_vma+0x10/0x10 [ 93.759791][ T5797] ? mas_find+0x6d9/0xcb0 [ 93.759816][ T5797] vms_gather_munmap_vmas+0x4e3/0x1370 [ 93.759849][ T5797] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 93.759887][ T5797] do_vmi_align_munmap+0x2c7/0x4d0 [ 93.759924][ T5797] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 93.759979][ T5797] ? mas_walk+0x381/0x490 [ 93.760011][ T5797] ? mas_find+0x645/0xcb0 [ 93.760034][ T5797] do_vmi_munmap+0x252/0x2d0 [ 93.760059][ T5797] __vm_munmap+0x241/0x3e0 [ 93.760079][ T5797] ? up_write+0x5a/0x190 [ 93.760102][ T5797] ? __pfx___vm_munmap+0x10/0x10 [ 93.760121][ T5797] ? vm_mmap_pgoff+0x35d/0x4e0 [ 93.760165][ T5797] __x64_sys_munmap+0x60/0x70 [ 93.760192][ T5797] do_syscall_64+0x166/0x520 [ 93.760212][ T5797] ? trace_irq_disable+0x3b/0x140 [ 93.760238][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.760257][ T5797] ? clear_bhb_loop+0x70/0xc0 [ 93.760284][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.760303][ T5797] RIP: 0033:0x7feac709df87 [ 93.760330][ T5797] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.760347][ T5797] RSP: 002b:00007feac52f4d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 93.760373][ T5797] RAX: ffffffffffffffda RBX: 00007feac0000000 RCX: 00007feac709df87 [ 93.760388][ T5797] RDX: 0000000000000000 RSI: 0000000002d2a000 RDI: 00007feabd2d6000 [ 93.760402][ T5797] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 93.760414][ T5797] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 93.760426][ T5797] R13: 0000000000001000 R14: 00007feac4000000 R15: 0000000002d2a000 [ 93.760455][ T5797] [ 93.924257][ T5800] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 94.173184][ T5705] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 94.373188][ T5705] usb 1-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.00 [ 94.386790][ T5705] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 94.386824][ T5705] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 94.386851][ T5705] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.386875][ T5705] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.386909][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.415252][ T5705] usb 1-1: config 0 descriptor?? [ 94.477810][ T5794] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.167922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.187922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.197942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.207941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.217918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.227923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.237915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.247920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.257916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.267924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.844627][ T47] IPVS: starting estimator thread 0... [ 96.010213][ T5806] IPVS: using max 11 ests per chain, 26400 per kthread [ 96.417389][ T5705] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 96.451864][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.452098][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.452535][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.579862][ T4940] bcm5974 1-1:0.0: could not read from device [ 96.805276][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808285][ T3405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808789][ T3405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.563733][ T5705] usb 1-1: USB disconnect, device number 2 [ 97.617549][ T5680] bcm5974 1-1:0.0: could not read from device [ 97.668546][ T3405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.700287][ T4940] bcm5974 1-1:0.0: could not read from device [ 97.714692][ T5820] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.928423][ T5695] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.141161][ T5695] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 100.151596][ T5695] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 100.151650][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.151676][ T5695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.151697][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 100.158293][ T5695] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 100.158318][ T5695] usb 4-1: Manufacturer: syz [ 100.255305][ T5695] usb 4-1: config 0 descriptor?? [ 100.347192][ T36] audit: type=1326 audit(1790976956.107:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347246][ T36] audit: type=1326 audit(1790976956.127:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347286][ T36] audit: type=1326 audit(1790976956.127:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347331][ T36] audit: type=1326 audit(1790976956.127:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347369][ T36] audit: type=1326 audit(1790976956.127:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347406][ T36] audit: type=1326 audit(1790976956.127:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347442][ T36] audit: type=1326 audit(1790976956.127:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347480][ T36] audit: type=1326 audit(1790976956.127:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347518][ T36] audit: type=1326 audit(1790976956.127:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.347552][ T36] audit: type=1326 audit(1790976956.127:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5850 comm="syz.2.22" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8f7f5de159 code=0x7ffc0000 [ 100.698501][ T5578] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.869533][ T5695] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 100.881622][ T5578] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 100.886398][ T5578] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.886455][ T5578] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 100.886482][ T5578] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 100.886521][ T5578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.406526][ T5695] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 103.476012][ T5864] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 103.476030][ T5864] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 103.613426][ T5866] FAULT_INJECTION: forcing a failure. [ 103.613426][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.613465][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 103.613488][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.613500][ T5866] Call Trace: [ 103.613508][ T5866] [ 103.613518][ T5866] dump_stack_lvl+0xe8/0x150 [ 103.613564][ T5866] should_fail_ex+0x46b/0x600 [ 103.613596][ T5866] _copy_to_user+0x31/0xb0 [ 103.613628][ T5866] put_timespec64+0xc8/0x130 [ 103.613657][ T5866] ? __pfx_put_timespec64+0x10/0x10 [ 103.613692][ T5866] __x64_sys_clock_gettime+0x22a/0x290 [ 103.613717][ T5866] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 103.613750][ T5866] do_syscall_64+0x166/0x520 [ 103.613772][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.613791][ T5866] ? clear_bhb_loop+0x70/0xc0 [ 103.613817][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.613835][ T5866] RIP: 0033:0x7f8f7f5de159 [ 103.613854][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.613872][ T5866] RSP: 002b:00007f8f7d836028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 103.613894][ T5866] RAX: ffffffffffffffda RBX: 00007f8f7f865fa0 RCX: 00007f8f7f5de159 [ 103.613909][ T5866] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.613922][ T5866] RBP: 00007f8f7f67506b R08: 0000000000000000 R09: 0000000000000000 [ 103.613935][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.613946][ T5866] R13: 00007f8f7f866038 R14: 00007f8f7f865fa0 R15: 00007fffa6b20788 [ 103.613974][ T5866] [ 104.107300][ T5578] usb 2-1: USB disconnect, device number 2 [ 104.124134][ T5695] usb 4-1: USB disconnect, device number 2 [ 105.215897][ T5868] fido_id[5868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 107.695987][ T5888] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 107.700128][ T5888] CIFS: Attempting to mount //127.0.0.1/share [ 109.938000][ T5888] CIFS: VFS: cifs_mount failed w/return code = -512 [ 109.938288][ T5888] syz.2.30 (5888) used greatest stack depth: 18264 bytes left [ 113.901480][ T5912] FAULT_INJECTION: forcing a failure. [ 113.901480][ T5912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.901559][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 113.901583][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.901595][ T5912] Call Trace: [ 113.901604][ T5912] [ 113.901617][ T5912] dump_stack_lvl+0xe8/0x150 [ 113.901668][ T5912] should_fail_ex+0x46b/0x600 [ 113.901701][ T5912] _copy_to_user+0x31/0xb0 [ 113.901734][ T5912] put_timespec64+0xc8/0x130 [ 113.901765][ T5912] ? __pfx_put_timespec64+0x10/0x10 [ 113.901805][ T5912] __x64_sys_clock_gettime+0x22a/0x290 [ 113.901832][ T5912] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 113.901866][ T5912] do_syscall_64+0x166/0x520 [ 113.901887][ T5912] ? trace_irq_disable+0x3b/0x140 [ 113.901921][ T5912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.901942][ T5912] ? clear_bhb_loop+0x70/0xc0 [ 113.901967][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.901988][ T5912] RIP: 0033:0x7ff0531ee159 [ 113.902017][ T5912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.902033][ T5912] RSP: 002b:00007ff051446028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 113.902059][ T5912] RAX: ffffffffffffffda RBX: 00007ff053475fa0 RCX: 00007ff0531ee159 [ 113.902074][ T5912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.902086][ T5912] RBP: 00007ff05328506b R08: 0000000000000000 R09: 0000000000000000 [ 113.902099][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.902111][ T5912] R13: 00007ff053476038 R14: 00007ff053475fa0 R15: 00007fff0deb3618 [ 113.902142][ T5912] [ 115.809304][ T5928] vivid-000: disconnect [ 115.810191][ T5927] vivid-000: reconnect [ 116.798077][ T49] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.947931][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 117.949087][ T49] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.951344][ T49] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 117.951400][ T49] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.951422][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.951446][ T49] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.951470][ T49] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.951511][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.272296][ T49] usb 4-1: GET_CAPABILITIES returned 0 [ 118.272338][ T49] usbtmc 4-1:16.0: can't read capabilities [ 118.494227][ T5953] Bluetooth: ISO socket layer initialized [ 118.688475][ T49] usb 4-1: USB disconnect, device number 3 [ 122.219513][ T5965] FAULT_INJECTION: forcing a failure. [ 122.219513][ T5965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.219556][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: syz.3.53 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 122.219581][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.219593][ T5965] Call Trace: [ 122.219601][ T5965] [ 122.219610][ T5965] dump_stack_lvl+0xe8/0x150 [ 122.219647][ T5965] should_fail_ex+0x46b/0x600 [ 122.219681][ T5965] _copy_to_user+0x31/0xb0 [ 122.219715][ T5965] put_timespec64+0xc8/0x130 [ 122.219747][ T5965] ? __pfx_put_timespec64+0x10/0x10 [ 122.219787][ T5965] __x64_sys_clock_gettime+0x22a/0x290 [ 122.219814][ T5965] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 122.219848][ T5965] do_syscall_64+0x166/0x520 [ 122.219870][ T5965] ? trace_irq_disable+0x3b/0x140 [ 122.219907][ T5965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.219927][ T5965] ? clear_bhb_loop+0x70/0xc0 [ 122.219952][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.219972][ T5965] RIP: 0033:0x7f245d97e159 [ 122.219992][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.220010][ T5965] RSP: 002b:00007f245bbd6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 122.220034][ T5965] RAX: ffffffffffffffda RBX: 00007f245dc05fa0 RCX: 00007f245d97e159 [ 122.220050][ T5965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.220062][ T5965] RBP: 00007f245da1506b R08: 0000000000000000 R09: 0000000000000000 [ 122.220074][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.220086][ T5965] R13: 00007f245dc06038 R14: 00007f245dc05fa0 R15: 00007ffe65e90d48 [ 122.220117][ T5965] [ 122.434906][ T5972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.41'. [ 122.673015][ T5974] random: crng reseeded on system resumption [ 127.277774][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 127.278176][ T6005] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.653682][ T5681] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.920628][ T5681] usb 1-1: device descriptor read/64, error -71 [ 130.198055][ T6015] FAULT_INJECTION: forcing a failure. [ 130.198055][ T6015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.198096][ T6015] CPU: 0 UID: 0 PID: 6015 Comm: syz.1.68 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 130.198121][ T6015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.198134][ T6015] Call Trace: [ 130.198142][ T6015] [ 130.198151][ T6015] dump_stack_lvl+0xe8/0x150 [ 130.198187][ T6015] should_fail_ex+0x46b/0x600 [ 130.198220][ T6015] _copy_to_user+0x31/0xb0 [ 130.198253][ T6015] put_timespec64+0xc8/0x130 [ 130.198285][ T6015] ? __pfx_put_timespec64+0x10/0x10 [ 130.198332][ T6015] __x64_sys_clock_gettime+0x22a/0x290 [ 130.198359][ T6015] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 130.198394][ T6015] do_syscall_64+0x166/0x520 [ 130.198414][ T6015] ? trace_irq_disable+0x3b/0x140 [ 130.198441][ T6015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.198462][ T6015] ? clear_bhb_loop+0x70/0xc0 [ 130.198486][ T6015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.198507][ T6015] RIP: 0033:0x7feac709e159 [ 130.198525][ T6015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.198542][ T6015] RSP: 002b:00007feac52f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 130.198564][ T6015] RAX: ffffffffffffffda RBX: 00007feac7325fa0 RCX: 00007feac709e159 [ 130.198579][ T6015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.198591][ T6015] RBP: 00007feac713506b R08: 0000000000000000 R09: 0000000000000000 [ 130.198605][ T6015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.198617][ T6015] R13: 00007feac7326038 R14: 00007feac7325fa0 R15: 00007ffe94ce5368 [ 130.198648][ T6015] [ 132.889265][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.889361][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.298236][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.331690][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 133.449021][ T5843] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 133.450850][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.453596][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 133.453619][ T5843] usb 5-1: Product: syz [ 133.453632][ T5843] usb 5-1: Manufacturer: syz [ 133.500982][ T5843] usb 5-1: selecting invalid altsetting 1 [ 133.502131][ T5843] dvb_ttusb_budget: ttusb_init_controller: error [ 133.502317][ T5843] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 134.913008][ T6062] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 134.938502][ T5843] DVB: Unable to find symbol cx22700_attach() [ 135.895186][ T5843] DVB: Unable to find symbol tda10046_attach() [ 135.895199][ T5843] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 135.930273][ T5843] usb 5-1: USB disconnect, device number 2 [ 138.476968][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 141.077961][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.238865][ T31] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 141.243243][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.245908][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 141.245935][ T31] usb 1-1: Product: syz [ 141.245950][ T31] usb 1-1: Manufacturer: syz [ 141.492998][ T31] usb 1-1: selecting invalid altsetting 1 [ 141.493142][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 141.493157][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 141.690958][ T31] DVB: Unable to find symbol cx22700_attach() [ 141.697291][ T6103] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 142.076900][ T31] DVB: Unable to find symbol tda10046_attach() [ 142.076918][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 142.143127][ T31] usb 1-1: USB disconnect, device number 5 [ 142.635727][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 143.934737][ T4904] Bluetooth: hci3: unexpected event 0x04 length: 4 < 10 [ 146.250908][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.570053][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 146.573961][ T5861] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 146.596600][ T5861] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 146.596629][ T5861] usb 4-1: config 0 has no interface number 0 [ 146.596675][ T5861] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 146.596700][ T5861] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.596723][ T5861] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 146.596746][ T5861] usb 4-1: config 0 interface 196 has no altsetting 0 [ 146.612434][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.612460][ T5861] usb 4-1: Product: syz [ 146.612475][ T5861] usb 4-1: Manufacturer: syz [ 146.612488][ T5861] usb 4-1: SerialNumber: syz [ 146.639492][ T5861] usb 4-1: config 0 descriptor?? [ 146.648524][ T6146] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.369191][ T5861] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 147.904151][ T5861] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 147.933392][ T5861] usb 4-1: USB disconnect, device number 4 [ 148.599202][ T5861] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 149.355487][ T1865] IPVS: starting estimator thread 0... [ 149.448071][ T6177] IPVS: using max 11 ests per chain, 26400 per kthread [ 149.864256][ T6190] syzkaller0: entered promiscuous mode [ 149.864282][ T6190] syzkaller0: entered allmulticast mode [ 153.760092][ T5861] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.899124][ T5861] usb 4-1: device descriptor read/64, error -71 [ 154.248106][ T5861] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.378022][ T5861] usb 4-1: device descriptor read/64, error -71 [ 155.400967][ T5861] usb usb4-port1: attempt power cycle [ 157.232653][ T6247] Bluetooth: MGMT ver 1.23 [ 162.998321][ T49] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 163.149569][ T49] usb 4-1: device descriptor read/64, error -71 [ 163.426446][ T49] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.521088][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.571028][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.573495][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.576362][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.611954][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.708853][ T49] usb 4-1: device descriptor read/64, error -71 [ 163.828494][ T49] usb usb4-port1: attempt power cycle [ 164.208596][ T49] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.257950][ T49] usb 4-1: device descriptor read/8, error -71 [ 164.529564][ T49] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.548770][ T49] usb 4-1: device descriptor read/8, error -71 [ 164.669849][ T49] usb usb4-port1: unable to enumerate USB device [ 165.688026][ T4904] Bluetooth: hci5: command tx timeout [ 165.762850][ T6323] jffs2: notice: (6323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.260424][ T4904] Bluetooth: Wrong link type (-71) [ 167.758136][ T4904] Bluetooth: hci5: command tx timeout [ 169.815709][ T5864] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 169.837943][ T4904] Bluetooth: hci5: command tx timeout [ 170.996934][ T6342] FAULT_INJECTION: forcing a failure. [ 170.996934][ T6342] name fail_futex, interval 1, probability 0, space 0, times 1 [ 170.996972][ T6342] CPU: 0 UID: 0 PID: 6342 Comm: syz.1.164 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.996997][ T6342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.997010][ T6342] Call Trace: [ 170.997018][ T6342] [ 170.997028][ T6342] dump_stack_lvl+0xe8/0x150 [ 170.997066][ T6342] should_fail_ex+0x46b/0x600 [ 170.997098][ T6342] get_futex_key+0x1b4/0x1580 [ 170.997132][ T6342] ? kasan_save_free_info+0x40/0x50 [ 170.997157][ T6342] ? autofs_dev_ioctl+0x6a8/0xab0 [ 170.997182][ T6342] ? do_syscall_64+0x166/0x520 [ 170.997203][ T6342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997226][ T6342] ? __pfx_get_futex_key+0x10/0x10 [ 170.997268][ T6342] futex_wake+0x119/0x600 [ 170.997299][ T6342] ? __pfx_futex_wake+0x10/0x10 [ 170.997340][ T6342] do_futex+0x458/0x4e0 [ 170.997374][ T6342] ? __pfx_do_futex+0x10/0x10 [ 170.997403][ T6342] __se_sys_futex+0x3a8/0x450 [ 170.997428][ T6342] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 170.997453][ T6342] ? __fget_files+0x2a/0x420 [ 170.997475][ T6342] ? __pfx___se_sys_futex+0x10/0x10 [ 170.997493][ T6342] ? __fget_files+0x2a/0x420 [ 170.997522][ T6342] ? __x64_sys_futex+0x21/0xf0 [ 170.997545][ T6342] do_syscall_64+0x166/0x520 [ 170.997566][ T6342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997591][ T6342] ? clear_bhb_loop+0x70/0xc0 [ 170.997614][ T6342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.997635][ T6342] RIP: 0033:0x7feac709e159 [ 170.997654][ T6342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.997672][ T6342] RSP: 002b:00007feac52f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.997695][ T6342] RAX: ffffffffffffffda RBX: 00007feac7325fa8 RCX: 00007feac709e159 [ 170.997710][ T6342] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feac7325fac [ 170.997725][ T6342] RBP: 00007feac7325fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 170.997739][ T6342] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 170.997752][ T6342] R13: 00007feac7326038 R14: 00007ffe94ce5280 R15: 00007ffe94ce5368 [ 170.997784][ T6342] [ 171.524673][ T3088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.691792][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.760174][ T6342] ceph: No mds server is up or the cluster is laggy [ 171.766383][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.774583][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.774787][ T6290] bridge_slave_0: entered allmulticast mode [ 171.794176][ T6290] bridge_slave_0: entered promiscuous mode [ 171.808203][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.851775][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.852531][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.852725][ T6290] bridge_slave_1: entered allmulticast mode [ 171.891738][ T6290] bridge_slave_1: entered promiscuous mode [ 171.918779][ T4904] Bluetooth: hci5: command tx timeout [ 172.072614][ T198] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 172.603822][ T6357] hub 8-0:1.0: USB hub found [ 172.627870][ T6357] hub 8-0:1.0: 1 port detected [ 173.501781][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 173.506863][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 173.524378][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 173.525670][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 173.527477][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.820981][ T3088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.921037][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.928047][ T5695] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 173.971585][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.100006][ T5695] usb 4-1: device descriptor read/64, error -71 [ 174.187507][ T6290] team0: Port device team_slave_0 added [ 174.215935][ T6290] team0: Port device team_slave_1 added [ 174.347930][ T5695] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.428026][ T198] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 174.456450][ T6380] random: crng reseeded on system resumption [ 174.537754][ T5695] usb 4-1: device descriptor read/64, error -71 [ 174.608049][ T198] usb 3-1: Using ep0 maxpacket: 8 [ 174.610338][ T198] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.611870][ T198] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 174.611904][ T198] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.611916][ T198] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.611928][ T198] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.611940][ T198] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.611963][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.658386][ T5695] usb usb4-port1: attempt power cycle [ 174.817579][ T3088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.995240][ T198] usb 3-1: GET_CAPABILITIES returned 0 [ 174.995289][ T198] usbtmc 3-1:16.0: can't read capabilities [ 175.038003][ T5695] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 175.058934][ T5695] usb 4-1: device descriptor read/8, error -71 [ 175.269715][ T198] usb 3-1: USB disconnect, device number 2 [ 175.299893][ T5695] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 175.330459][ T5695] usb 4-1: device descriptor read/8, error -71 [ 175.361362][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.361375][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.361389][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.364203][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.364219][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.364242][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.439231][ T5695] usb usb4-port1: unable to enumerate USB device [ 176.914226][ T4904] Bluetooth: hci1: command tx timeout [ 177.143663][ T3088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.961902][ T4904] Bluetooth: hci1: command tx timeout [ 179.342438][ T6290] hsr_slave_0: entered promiscuous mode [ 179.343859][ T6290] hsr_slave_1: entered promiscuous mode [ 179.344960][ T6290] debugfs: 'hsr0' already exists in 'hsr' [ 179.344983][ T6290] Cannot create hsr debugfs directory [ 180.747969][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 180.878073][ T10] usb 4-1: device descriptor read/64, error -71 [ 181.040810][ T4904] Bluetooth: hci1: command tx timeout [ 181.118798][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.249791][ T10] usb 4-1: device descriptor read/64, error -71 [ 181.358511][ T10] usb usb4-port1: attempt power cycle [ 181.708234][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 181.729907][ T10] usb 4-1: device descriptor read/8, error -71 [ 181.770303][ T5682] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.449412][ T5682] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 182.451906][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.521313][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 183.118069][ T4904] Bluetooth: hci1: command tx timeout [ 184.328321][ T10] usb 4-1: device descriptor read/8, error -71 [ 184.359767][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 184.359795][ T5682] usb 2-1: Product: syz [ 184.359809][ T5682] usb 2-1: Manufacturer: syz [ 184.425559][ T5682] usb 2-1: selecting invalid altsetting 1 [ 184.425716][ T5682] dvb_ttusb_budget: ttusb_init_controller: error [ 184.425729][ T5682] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 184.445866][ T10] usb usb4-port1: unable to enumerate USB device [ 184.521755][ T3088] bridge_slave_1: left allmulticast mode [ 184.548830][ T3088] bridge_slave_1: left promiscuous mode [ 184.574539][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.820655][ T5682] DVB: Unable to find symbol cx22700_attach() [ 184.946067][ T5682] DVB: Unable to find symbol tda10046_attach() [ 184.946080][ T5682] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 185.303221][ T3088] bridge_slave_0: left allmulticast mode [ 185.303260][ T3088] bridge_slave_0: left promiscuous mode [ 185.303498][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.639707][ T5682] usb 2-1: USB disconnect, device number 3 [ 189.078031][ T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 189.688063][ T49] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 189.689398][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.689423][ T49] usb 3-1: config 0 has no interfaces? [ 189.695422][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.695447][ T49] usb 3-1: Product: syz [ 189.695461][ T49] usb 3-1: Manufacturer: syz [ 189.695475][ T49] usb 3-1: SerialNumber: syz [ 189.846755][ T49] usb 3-1: config 0 descriptor?? [ 190.196568][ T49] usb 3-1: USB disconnect, device number 3 [ 190.518013][ T5681] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 190.670041][ T5681] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 190.673259][ T5681] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.674899][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 190.674920][ T5681] usb 4-1: Product: syz [ 190.674927][ T5681] usb 4-1: Manufacturer: syz [ 190.836717][ T5681] usb 4-1: selecting invalid altsetting 1 [ 190.874262][ T5681] dvb_ttusb_budget: ttusb_init_controller: error [ 190.874285][ T5681] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 191.340848][ T5681] DVB: Unable to find symbol cx22700_attach() [ 191.594008][ T5681] DVB: Unable to find symbol tda10046_attach() [ 191.594026][ T5681] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 191.773482][ T5681] usb 4-1: USB disconnect, device number 20 [ 193.473619][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.624233][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.712108][ T3088] bond0 (unregistering): Released all slaves [ 193.737992][ T5861] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 193.904480][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 193.924631][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.924660][ T5861] usb 4-1: config 0 has no interfaces? [ 193.952202][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.952230][ T5861] usb 4-1: Product: syz [ 193.952244][ T5861] usb 4-1: Manufacturer: syz [ 193.952258][ T5861] usb 4-1: SerialNumber: syz [ 193.996809][ T5861] usb 4-1: config 0 descriptor?? [ 194.296453][ T49] usb 4-1: USB disconnect, device number 21 [ 194.330056][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.330121][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.307978][ T49] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 196.709251][ T49] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 196.710592][ T49] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.779138][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 196.779168][ T49] usb 3-1: Product: syz [ 196.779183][ T49] usb 3-1: Manufacturer: syz [ 196.874585][ T49] usb 3-1: selecting invalid altsetting 1 [ 196.874740][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 196.874754][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 197.063558][ T6521] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 197.175025][ T49] DVB: Unable to find symbol cx22700_attach() [ 197.332376][ T49] DVB: Unable to find symbol tda10046_attach() [ 197.332393][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 197.424074][ T49] usb 3-1: USB disconnect, device number 4 [ 197.872118][ T4904] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:200' [ 197.872171][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.872198][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.872211][ T4904] Workqueue: hci3 hci_rx_work [ 197.872242][ T4904] Call Trace: [ 197.872250][ T4904] [ 197.872259][ T4904] dump_stack_lvl+0xe8/0x150 [ 197.872293][ T4904] sysfs_create_dir_ns+0x271/0x2a0 [ 197.872321][ T4904] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 197.872353][ T4904] ? rt_spin_unlock+0x165/0x200 [ 197.872384][ T4904] kobject_add_internal+0x62c/0xce0 [ 197.872418][ T4904] kobject_add+0x163/0x240 [ 197.872441][ T4904] ? rt_spin_unlock+0x159/0x200 [ 197.872474][ T4904] ? __pfx_kobject_add+0x10/0x10 [ 197.872506][ T4904] ? get_device_parent+0x370/0x3a0 [ 197.872541][ T4904] device_add+0x3fa/0xb80 [ 197.872574][ T4904] hci_conn_add_sysfs+0xd5/0x210 [ 197.872603][ T4904] le_conn_complete_evt+0xfe3/0x16d0 [ 197.872637][ T4904] ? le_conn_complete_evt+0x1b1/0x16d0 [ 197.872669][ T4904] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 197.872703][ T4904] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 197.872724][ T4904] ? rt_mutex_slowunlock+0x219/0x460 [ 197.872753][ T4904] ? skb_pull_data+0xf0/0x200 [ 197.872782][ T4904] hci_le_conn_complete_evt+0x187/0x470 [ 197.872814][ T4904] hci_event_packet+0x67a/0xf10 [ 197.872838][ T4904] ? reacquire_held_locks+0x117/0x1a0 [ 197.872870][ T4904] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 197.872896][ T4904] ? __pfx_hci_event_packet+0x10/0x10 [ 197.872917][ T4904] ? rt_spin_unlock+0x159/0x200 [ 197.872950][ T4904] ? hci_send_to_monitor+0xe2/0x590 [ 197.872972][ T4904] hci_rx_work+0x3ee/0x1020 [ 197.873003][ T4904] ? process_scheduled_works+0x97a/0x1630 [ 197.873032][ T4904] process_scheduled_works+0xc3d/0x1630 [ 197.873086][ T4904] ? __pfx_process_scheduled_works+0x10/0x10 [ 197.873119][ T4904] ? assign_work+0x3cf/0x5d0 [ 197.873149][ T4904] worker_thread+0xa47/0xfb0 [ 197.873199][ T4904] ? __kthread_parkme+0x71/0x1f0 [ 197.873235][ T4904] kthread+0x38b/0x470 [ 197.873254][ T4904] ? __pfx_worker_thread+0x10/0x10 [ 197.873278][ T4904] ? __pfx_kthread+0x10/0x10 [ 197.873299][ T4904] ret_from_fork+0x514/0xb70 [ 197.873322][ T4904] ? __pfx_ret_from_fork+0x10/0x10 [ 197.873340][ T4904] ? __switch_to+0xc89/0x1420 [ 197.873370][ T4904] ? __pfx_kthread+0x10/0x10 [ 197.873392][ T4904] ret_from_fork_asm+0x1a/0x30 [ 197.873428][ T4904] [ 197.873461][ T4904] kobject: kobject_add_internal failed for hci3:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 197.873503][ T4904] Bluetooth: hci3: failed to register connection device [ 198.957984][ T5861] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 199.025411][ T6290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.096209][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.148208][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 199.153875][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.153892][ T5861] usb 4-1: config 0 has no interfaces? [ 199.156872][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.156898][ T5861] usb 4-1: Product: syz [ 199.156911][ T5861] usb 4-1: Manufacturer: syz [ 199.156923][ T5861] usb 4-1: SerialNumber: syz [ 199.236533][ T6290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.263893][ T5861] usb 4-1: config 0 descriptor?? [ 199.790474][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.819039][ T198] usb 4-1: USB disconnect, device number 22 [ 199.928394][ T6575] Bluetooth: hci3: command tx timeout [ 199.972601][ T6290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.015900][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.044291][ T6290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.098455][ T6290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.400857][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.401076][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.401275][ T6358] bridge_slave_0: entered allmulticast mode [ 200.415182][ T6358] bridge_slave_0: entered promiscuous mode [ 200.968080][ T3088] hsr_slave_0: left promiscuous mode [ 201.011345][ T3088] hsr_slave_1: left promiscuous mode [ 201.014004][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.065927][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.213780][ T6604] CIFS: Attempting to mount //127.0.0.1/share [ 201.702985][ T6575] Bluetooth: hci0: command 0x0406 tx timeout [ 201.713774][ T6575] Bluetooth: hci4: command 0x0406 tx timeout [ 201.743295][ T5681] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 201.849648][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.849769][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.043835][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 202.225920][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 202.381498][ T5681] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 202.547713][ T5681] usb 3-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.547757][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 202.575971][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.635909][ T6604] CIFS: VFS: cifs_mount failed w/return code = -112 [ 203.154047][ T5681] usb 3-1: config 0 descriptor?? [ 203.829662][ T6608] fuse: Unknown parameter '0xffffffffffffffff' [ 204.157950][ T4904] Bluetooth: hci3: command 0x0406 tx timeout [ 204.293936][ T5681] hid (null): invalid report_count 45596 [ 204.353625][ T5681] logitech-djreceiver 0003:046D:C534.0002: unknown main item tag 0x5 [ 204.353669][ T5681] logitech-djreceiver 0003:046D:C534.0002: invalid report_count 45596 [ 204.353679][ T5681] logitech-djreceiver 0003:046D:C534.0002: item 0 2 1 9 parsing failed [ 204.354075][ T5681] logitech-djreceiver 0003:046D:C534.0002: logi_dj_probe: parse failed [ 204.354116][ T5681] logitech-djreceiver 0003:046D:C534.0002: probe with driver logitech-djreceiver failed with error -22 [ 204.483841][ T3088] veth1_macvtap: left promiscuous mode [ 204.484022][ T3088] veth0_macvtap: left promiscuous mode [ 204.496310][ T3088] veth1_vlan: left promiscuous mode [ 204.496865][ T3088] veth0_vlan: left promiscuous mode [ 204.601304][ T5681] usb 3-1: USB disconnect, device number 5 [ 206.429368][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 206.458827][ T5578] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 206.476151][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 206.608714][ T5578] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 206.610446][ T5578] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 206.610479][ T5578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.610497][ T5578] usb 3-1: config 0 has no interface number 0 [ 206.613911][ T5578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.613936][ T5578] usb 3-1: Product: syz [ 206.613951][ T5578] usb 3-1: Manufacturer: syz [ 206.613965][ T5578] usb 3-1: SerialNumber: syz [ 206.697261][ T5578] usb 3-1: config 0 descriptor?? [ 206.707712][ T5578] yurex 3-1:0.50: Could not find endpoints [ 206.737107][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1 [ 206.746518][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.746742][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.746951][ T6358] bridge_slave_1: entered allmulticast mode [ 206.767466][ T6358] bridge_slave_1: entered promiscuous mode [ 207.023804][ T5861] usb 3-1: USB disconnect, device number 6 [ 207.080453][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.326246][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.423058][ T6358] team0: Port device team_slave_0 added [ 207.436277][ T6358] team0: Port device team_slave_1 added [ 208.316173][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.316192][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.316215][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.387729][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.387748][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.387775][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.750282][ T6358] hsr_slave_0: entered promiscuous mode [ 208.754477][ T6358] hsr_slave_1: entered promiscuous mode [ 208.772355][ T6358] debugfs: 'hsr0' already exists in 'hsr' [ 208.772383][ T6358] Cannot create hsr debugfs directory [ 211.050529][ T47] IPVS: starting estimator thread 0... [ 211.143315][ T6689] IPVS: using max 11 ests per chain, 26400 per kthread [ 211.157207][ T5681] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 211.297714][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2 [ 211.338836][ T5681] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 211.343896][ T5681] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 211.343925][ T5681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.343944][ T5681] usb 4-1: config 0 has no interface number 0 [ 211.360052][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.360079][ T5681] usb 4-1: Product: syz [ 211.360092][ T5681] usb 4-1: Manufacturer: syz [ 211.360105][ T5681] usb 4-1: SerialNumber: syz [ 211.419719][ T5681] usb 4-1: config 0 descriptor?? [ 211.439662][ T5681] yurex 4-1:0.50: Could not find endpoints [ 211.773669][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.852577][ T1237] usb 4-1: USB disconnect, device number 23 [ 212.134826][ T6290] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.308789][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.308933][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.876487][ T3088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.586906][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.587039][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.357600][ T3088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.523381][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3 [ 218.216617][ T3088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.676321][ T5705] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.458891][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 219.590025][ T5705] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 219.591526][ T5705] usb 3-1: config 0 interface 0 has no altsetting 0 [ 219.591566][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.628454][ T5705] usb 3-1: config 0 descriptor?? [ 219.958000][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 220.108070][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 220.108912][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 220.112932][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 220.112987][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 220.113010][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 220.113035][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.113058][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.113098][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.149424][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 220.149469][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 220.372223][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 220.372275][ T10] usbtmc 4-1:16.0: can't read capabilities [ 220.624122][ T5682] usb 4-1: USB disconnect, device number 24 [ 221.847279][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.883287][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.578181][ T10] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 224.599772][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.627966][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.646433][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.657105][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.665946][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.729482][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 224.729523][ T10] usb 4-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 224.730751][ T10] usb 4-1: config index 0 descriptor too short (expected 43, got 25) [ 224.730777][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.732574][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 224.732598][ T10] usb 4-1: Product: syz [ 224.732611][ T10] usb 4-1: Manufacturer: syz [ 224.965803][ T5705] usbhid 3-1:0.0: can't add hid device: -32 [ 224.965920][ T5705] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 225.144650][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.145319][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.419606][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.481509][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.560169][ T10] msi2500 4-1:1.0: Registered as swradio24 [ 225.560193][ T10] msi2500 4-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 226.958294][ T5596] Bluetooth: hci2: command tx timeout [ 227.324053][ T5705] usb 4-1: USB disconnect, device number 25 [ 227.537996][ T47] IPVS: starting estimator thread 0... [ 227.628940][ T6811] IPVS: using max 11 ests per chain, 26400 per kthread [ 229.441047][ T5596] Bluetooth: hci2: command tx timeout [ 229.722673][ T5578] usb 3-1: USB disconnect, device number 7 [ 230.227698][ T3088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.774432][ T6358] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.933806][ T5861] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.019057][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.098160][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 231.099081][ T5861] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 231.101809][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.101871][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 231.101896][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.101921][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.104879][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 231.104906][ T5861] usb 3-1: Product: syz [ 231.104919][ T5861] usb 3-1: Manufacturer: syz [ 231.104933][ T5861] usb 3-1: SerialNumber: syz [ 231.136997][ T5861] usb 3-1: config 0 descriptor?? [ 231.530504][ T5596] Bluetooth: hci2: command tx timeout [ 231.532062][ T5861] rc_core: IR keymap rc-imon-rsc not found [ 231.532097][ T5861] Registered IR keymap rc-empty [ 231.568580][ T5861] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 231.609019][ T5861] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 231.645027][ T5861] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 231.662217][ T6358] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.792630][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.829598][ T6358] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.965509][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.998478][ T6358] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.322524][ T6358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.434745][ T5861] usb 3-1: USB disconnect, device number 8 [ 233.608646][ T5596] Bluetooth: hci2: command tx timeout [ 234.261399][ T3304] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.263406][ T3405] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.263785][ T3405] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.264240][ T3405] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.317070][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.371571][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.376919][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.396888][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.399025][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 234.809308][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4 [ 234.888028][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 235.077965][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 235.078811][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 235.084421][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 235.084476][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.084497][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 235.084519][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.084541][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.084579][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.436981][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 235.437032][ T10] usbtmc 4-1:16.0: can't read capabilities [ 235.697302][ T5682] usb 4-1: USB disconnect, device number 26 [ 236.230750][ T3088] bridge_slave_1: left allmulticast mode [ 236.230788][ T3088] bridge_slave_1: left promiscuous mode [ 236.231055][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.402465][ T3088] bridge_slave_0: left allmulticast mode [ 236.402502][ T3088] bridge_slave_0: left promiscuous mode [ 236.435884][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.568442][ T5596] Bluetooth: hci5: command tx timeout [ 238.656390][ T5596] Bluetooth: hci5: command tx timeout [ 240.718047][ T5596] Bluetooth: hci5: command tx timeout [ 240.718961][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.780474][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.802664][ T3088] bond0 (unregistering): Released all slaves [ 242.557967][ T5695] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.708160][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 242.709084][ T5695] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 242.710676][ T5695] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 242.710735][ T5695] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.710758][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.710783][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.710806][ T5695] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.710897][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.797986][ T5596] Bluetooth: hci5: command tx timeout [ 242.927568][ T5695] usb 3-1: GET_CAPABILITIES returned 0 [ 242.927617][ T5695] usbtmc 3-1:16.0: can't read capabilities [ 243.143928][ T5695] usb 3-1: USB disconnect, device number 9 [ 247.688480][ T5250] 8021q: adding VLAN 0 to HW filter on device eth5 [ 248.272732][ T3088] hsr_slave_0: left promiscuous mode [ 248.448501][ T3088] hsr_slave_1: left promiscuous mode [ 248.449772][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.449798][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.498975][ T3088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.499002][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.731639][ T3088] veth1_macvtap: left promiscuous mode [ 248.731746][ T3088] veth0_macvtap: left promiscuous mode [ 248.732022][ T3088] veth1_vlan: left promiscuous mode [ 248.732197][ T3088] veth0_vlan: left promiscuous mode [ 248.909082][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.018008][ T1237] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 249.071490][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 249.072898][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.074130][ T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 249.074183][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.074196][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.074208][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.074221][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.074243][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.168040][ T1237] usb 2-1: Using ep0 maxpacket: 8 [ 249.169037][ T1237] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.171059][ T1237] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 249.171110][ T1237] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.171130][ T1237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.171152][ T1237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.171175][ T1237] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.171212][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.346083][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 249.346128][ T10] usbtmc 3-1:16.0: can't read capabilities [ 249.427000][ T1237] usb 2-1: GET_CAPABILITIES returned 0 [ 249.427030][ T1237] usbtmc 2-1:16.0: can't read capabilities [ 249.618633][ T1237] usb 3-1: USB disconnect, device number 10 [ 249.653950][ T10] usb 2-1: USB disconnect, device number 4 [ 251.213320][ T7018] capability: warning: `syz.3.334' uses 32-bit capabilities (legacy support in use) [ 251.582465][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 251.690913][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 255.766227][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.766300][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.364724][ T5682] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 256.570706][ T5682] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 256.573792][ T5682] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 256.573834][ T5682] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.573866][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.575452][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.575576][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.575796][ T6799] bridge_slave_0: entered allmulticast mode [ 256.662378][ T6799] bridge_slave_0: entered promiscuous mode [ 256.666538][ T5682] usb 3-1: config 0 descriptor?? [ 256.695554][ T7042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.778930][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.779069][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.779265][ T6799] bridge_slave_1: entered allmulticast mode [ 256.785002][ T6799] bridge_slave_1: entered promiscuous mode [ 257.206349][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.923684][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.038782][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.038968][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.039270][ T6886] bridge_slave_0: entered allmulticast mode [ 259.087765][ T6886] bridge_slave_0: entered promiscuous mode [ 259.113498][ T5682] usbhid 3-1:0.0: can't add hid device: -71 [ 259.113632][ T5682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 259.165306][ T5682] usb 3-1: USB disconnect, device number 11 [ 259.242249][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.242379][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.242549][ T6886] bridge_slave_1: entered allmulticast mode [ 259.247001][ T6886] bridge_slave_1: entered promiscuous mode [ 259.325581][ T6799] team0: Port device team_slave_0 added [ 259.354553][ T6799] team0: Port device team_slave_1 added [ 259.366861][ T6886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.407689][ T6886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.504111][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.504130][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.504153][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.513750][ T3088] IPVS: stop unused estimator thread 0... [ 259.569678][ T6886] team0: Port device team_slave_0 added [ 259.571764][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.571780][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.571804][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.643738][ T6886] team0: Port device team_slave_1 added [ 261.006618][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.006636][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.006660][ T6886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.368957][ T6886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.368975][ T6886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.368999][ T6886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.436599][ T5250] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.481668][ T6799] hsr_slave_0: entered promiscuous mode [ 261.507219][ T6799] hsr_slave_1: entered promiscuous mode [ 262.148139][ T5681] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 262.318745][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 262.319680][ T5681] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.321142][ T5681] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 262.321196][ T5681] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.321227][ T5681] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.321251][ T5681] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.321274][ T5681] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.321315][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.682614][ T5681] usb 2-1: GET_CAPABILITIES returned 0 [ 262.682656][ T5681] usbtmc 2-1:16.0: can't read capabilities [ 262.701348][ T6886] hsr_slave_0: entered promiscuous mode [ 262.721249][ T6886] hsr_slave_1: entered promiscuous mode [ 262.725969][ T6886] debugfs: 'hsr0' already exists in 'hsr' [ 262.726064][ T6886] Cannot create hsr debugfs directory [ 262.925298][ T5681] usb 2-1: USB disconnect, device number 5 [ 267.791163][ T7155] ======================================================= [ 267.791163][ T7155] WARNING: The mand mount option has been deprecated and [ 267.791163][ T7155] and is ignored by this kernel. Remove the mand [ 267.791163][ T7155] option from the mount to silence this warning. [ 267.791163][ T7155] ======================================================= [ 267.820804][ T5682] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 267.967981][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 267.974856][ T5682] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.976390][ T5682] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 267.976444][ T5682] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.976468][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.976492][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.976516][ T5682] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.976556][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.272639][ T5682] usb 4-1: GET_CAPABILITIES returned 0 [ 268.272689][ T5682] usbtmc 4-1:16.0: can't read capabilities [ 268.518762][ T5682] usb 4-1: USB disconnect, device number 27 [ 268.641225][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 268.641321][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 268.781991][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 268.782075][ T7173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 270.043758][ T7188] Zero length message leads to an empty skb [ 270.359267][ T5681] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 270.648855][ T5681] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 270.650362][ T5681] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.650418][ T5681] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.650440][ T5681] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.650479][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.668249][ T7190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.668724][ T7190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.798014][ T5682] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 271.978021][ T5682] usb 3-1: Using ep0 maxpacket: 16 [ 271.979534][ T5682] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 272.009724][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.009751][ T5682] usb 3-1: Product: syz [ 272.009986][ T5682] usb 3-1: Manufacturer: syz [ 272.010004][ T5682] usb 3-1: SerialNumber: syz [ 272.182050][ T5250] 8021q: adding VLAN 0 to HW filter on device eth7 [ 272.201232][ T1048] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.203160][ T1824] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.203206][ T1824] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.203239][ T1824] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.310105][ T5681] cxacru_cm: 13 callbacks suppressed [ 272.310131][ T5681] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 272.310164][ T5681] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 272.310367][ T5681] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 272.314438][ T5682] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 272.399634][ T5681] usb 4-1: USB disconnect, device number 28 [ 272.401408][ T5682] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.401804][ T5682] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 272.405478][ T5682] usb 3-1: media controller created [ 272.524885][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.655662][ T5682] zl10353_read_register: readreg error (reg=127, ret==-71) [ 272.718845][ T5682] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 272.723904][ T5682] usb 3-1: USB disconnect, device number 12 [ 273.328044][ T5682] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 273.478105][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 273.479004][ T5682] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.487410][ T5682] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 273.487463][ T5682] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.487486][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.487511][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.487535][ T5682] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.487574][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.777343][ T7242] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 273.854357][ T5682] usb 4-1: GET_CAPABILITIES returned 0 [ 273.854407][ T5682] usbtmc 4-1:16.0: can't read capabilities [ 274.389727][ T1237] usb 4-1: USB disconnect, device number 29 [ 276.349247][ T5250] 8021q: adding VLAN 0 to HW filter on device eth8 [ 277.435149][ T3088] bridge_slave_1: left allmulticast mode [ 277.435184][ T3088] bridge_slave_1: left promiscuous mode [ 277.435442][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.724064][ T3088] bridge_slave_0: left allmulticast mode [ 277.724102][ T3088] bridge_slave_0: left promiscuous mode [ 277.724368][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.188408][ T3088] bridge_slave_1: left allmulticast mode [ 278.188445][ T3088] bridge_slave_1: left promiscuous mode [ 278.188694][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.350117][ T3088] bridge_slave_0: left allmulticast mode [ 278.350154][ T3088] bridge_slave_0: left promiscuous mode [ 278.350398][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.908660][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.978963][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.060232][ T3088] bond0 (unregistering): Released all slaves [ 281.128876][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.930311][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.971038][ T3088] bond0 (unregistering): Released all slaves [ 282.148413][ T5250] 8021q: adding VLAN 0 to HW filter on device eth9 [ 282.666117][ T5695] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 282.675744][ T5681] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 282.828144][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 282.838010][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 282.864172][ T5695] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.871828][ T5695] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 282.871885][ T5695] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.871906][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.871929][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.871951][ T5695] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.871991][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.948195][ T5681] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.949711][ T5681] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 282.949766][ T5681] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.949788][ T5681] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.949810][ T5681] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.949833][ T5681] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.949873][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.020548][ T3088] hsr_slave_0: left promiscuous mode [ 283.058235][ T3088] hsr_slave_1: left promiscuous mode [ 283.060641][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.099334][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.164358][ T5695] usb 3-1: GET_CAPABILITIES returned 0 [ 283.164398][ T5695] usbtmc 3-1:16.0: can't read capabilities [ 283.248682][ T5681] usb 4-1: GET_CAPABILITIES returned 0 [ 283.248733][ T5681] usbtmc 4-1:16.0: can't read capabilities [ 283.539657][ T5695] usb 4-1: USB disconnect, device number 30 [ 283.563521][ T3088] hsr_slave_0: left promiscuous mode [ 283.638305][ T3088] hsr_slave_1: left promiscuous mode [ 283.641314][ T5578] usb 3-1: USB disconnect, device number 13 [ 283.690829][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.741032][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.564344][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.593792][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.596451][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.637270][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.651146][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.968072][ T5681] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 285.148809][ T5681] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 285.150306][ T5681] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 285.150334][ T5681] usb 4-1: config 0 has no interface number 0 [ 285.150380][ T5681] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.150406][ T5681] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.156712][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.156753][ T5681] usb 4-1: Product: syz [ 285.156768][ T5681] usb 4-1: Manufacturer: syz [ 285.156782][ T5681] usb 4-1: SerialNumber: syz [ 285.167358][ T5681] usb 4-1: config 0 descriptor?? [ 285.184048][ T5681] yurex 4-1:0.50: Could not submitting URB [ 285.184240][ T5681] yurex 4-1:0.50: probe with driver yurex failed with error -5 [ 285.240630][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 285.318704][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 286.719000][ T5596] Bluetooth: hci1: command tx timeout [ 286.870506][ T5578] usb 4-1: USB disconnect, device number 31 [ 287.728270][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 287.960906][ T7373] capability: warning: `syz.2.406' uses deprecated v2 capabilities in a way that may be insecure [ 288.738491][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 288.800934][ T5596] Bluetooth: hci1: command tx timeout [ 289.260453][ T198] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 289.408923][ T198] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 289.413930][ T198] usb 3-1: config 0 has no interfaces? [ 289.413971][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.430123][ T198] usb 3-1: config 0 descriptor?? [ 289.807953][ T5682] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 289.958050][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 289.959002][ T5682] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.964077][ T5682] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 289.964136][ T5682] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.964158][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.964183][ T5682] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.964206][ T5682] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.964246][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.313961][ T5682] usb 4-1: GET_CAPABILITIES returned 0 [ 290.314005][ T5682] usbtmc 4-1:16.0: can't read capabilities [ 290.398578][ T5578] usb 3-1: USB disconnect, device number 14 [ 290.598038][ T5682] usb 4-1: USB disconnect, device number 32 [ 290.882252][ T5596] Bluetooth: hci1: command tx timeout [ 292.497957][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 292.648951][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 292.651516][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 292.651543][ T10] usb 3-1: config 0 has no interface number 0 [ 292.651587][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.653700][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.653724][ T10] usb 3-1: Product: syz [ 292.653738][ T10] usb 3-1: Manufacturer: syz [ 292.653752][ T10] usb 3-1: SerialNumber: syz [ 292.867268][ T10] usb 3-1: config 0 descriptor?? [ 292.958121][ T5596] Bluetooth: hci1: command tx timeout [ 293.094921][ T5593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 293.123349][ T5593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 293.154964][ T5593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 293.207555][ T5593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.221322][ T5593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 293.385989][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 293.467999][ T10] usb 3-1: USB disconnect, device number 15 [ 293.614860][ T10] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 295.518342][ T5596] Bluetooth: hci6: command tx timeout [ 295.931147][ T1237] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 297.301015][ T1237] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 297.318711][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.318739][ T1237] usb 4-1: Product: syz [ 297.318753][ T1237] usb 4-1: Manufacturer: syz [ 297.318767][ T1237] usb 4-1: SerialNumber: syz [ 297.599901][ T5596] Bluetooth: hci6: command tx timeout [ 297.747699][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.748184][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.748367][ T7349] bridge_slave_0: entered allmulticast mode [ 297.752422][ T7349] bridge_slave_0: entered promiscuous mode [ 297.798330][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.798446][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.821240][ T7349] bridge_slave_1: entered allmulticast mode [ 297.837023][ T7349] bridge_slave_1: entered promiscuous mode [ 297.863534][ T1237] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 297.863593][ T1237] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 298.718040][ T5682] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 298.868046][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 298.889252][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.893963][ T5682] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.897524][ T5682] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 298.897581][ T5682] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.897604][ T5682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.897627][ T5682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.897650][ T5682] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.897697][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.950952][ T1237] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 298.951026][ T1237] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 299.042706][ T1237] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 299.121695][ T1237] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 299.160924][ T5682] usb 2-1: GET_CAPABILITIES returned 0 [ 299.160974][ T5682] usbtmc 2-1:16.0: can't read capabilities [ 299.191727][ T1237] usb 4-1: USB disconnect, device number 33 [ 299.306325][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.421053][ T1237] usb 2-1: USB disconnect, device number 6 [ 299.677915][ T5596] Bluetooth: hci6: command tx timeout [ 300.031244][ T7349] team0: Port device team_slave_0 added [ 300.155280][ T7349] team0: Port device team_slave_1 added [ 300.703682][ T5695] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 301.233446][ T5695] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 301.233498][ T5695] usb 3-1: no configurations [ 301.233511][ T5695] usb 3-1: can't read configurations, error -22 [ 301.499671][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.499687][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.499700][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.744197][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.744215][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.744239][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.758102][ T5596] Bluetooth: hci6: command tx timeout [ 303.964323][ T7349] hsr_slave_0: entered promiscuous mode [ 303.967711][ T7349] hsr_slave_1: entered promiscuous mode [ 303.985114][ T7349] debugfs: 'hsr0' already exists in 'hsr' [ 303.985142][ T7349] Cannot create hsr debugfs directory [ 304.127285][ T7558] syzkaller0: entered promiscuous mode [ 304.127322][ T7558] syzkaller0: entered allmulticast mode [ 312.538132][ T3088] bridge_slave_1: left allmulticast mode [ 312.538168][ T3088] bridge_slave_1: left promiscuous mode [ 312.538419][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.566951][ T7646] netlink: 'syz.2.451': attribute type 29 has an invalid length. [ 312.733432][ T3088] bridge_slave_0: left allmulticast mode [ 312.733467][ T3088] bridge_slave_0: left promiscuous mode [ 312.733728][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.083972][ T7659] CIFS: Attempting to mount //127.0.0.1/share [ 314.005577][ T7659] CIFS: VFS: cifs_mount failed w/return code = -112 [ 315.063370][ T7659] syz.3.454 (7659) used greatest stack depth: 17888 bytes left [ 316.068725][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.221705][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.300310][ T3088] bond0 (unregistering): Released all slaves [ 316.972737][ T7684] device-mapper: ioctl: name not supplied when creating device [ 317.193515][ T3088] hsr_slave_0: left promiscuous mode [ 317.216338][ T3088] hsr_slave_1: left promiscuous mode [ 317.217558][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.223877][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.223946][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270178][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.405704][ T7691] netlink: 'syz.1.460': attribute type 29 has an invalid length. [ 319.566362][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 319.671550][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 320.509712][ T7720] device-mapper: ioctl: name not supplied when creating device [ 322.762953][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.763083][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.763279][ T7437] bridge_slave_0: entered allmulticast mode [ 322.766023][ T7437] bridge_slave_0: entered promiscuous mode [ 322.807916][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.808192][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.808387][ T7437] bridge_slave_1: entered allmulticast mode [ 322.823822][ T7437] bridge_slave_1: entered promiscuous mode [ 323.081293][ T7437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.084373][ T5861] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 323.091642][ T7437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.258817][ T5861] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 323.265121][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.265149][ T5861] usb 2-1: Product: syz [ 323.265164][ T5861] usb 2-1: Manufacturer: syz [ 323.265178][ T5861] usb 2-1: SerialNumber: syz [ 323.667652][ T7755] device-mapper: ioctl: name not supplied when creating device [ 323.854009][ T5861] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 324.153506][ T7437] team0: Port device team_slave_0 added [ 324.170997][ T7437] team0: Port device team_slave_1 added [ 324.291647][ T5861] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 324.457779][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.457798][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.458980][ T7437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.502012][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 324.505439][ T5861] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 324.533429][ T5861] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 324.537563][ T7437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.537579][ T7437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.537628][ T7437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.590221][ T198] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 324.612811][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 324.612898][ T5861] usb 4-1: Product: syz [ 324.612914][ T5861] usb 4-1: Manufacturer: syz [ 324.612928][ T5861] usb 4-1: SerialNumber: syz [ 324.722360][ T5861] usb 4-1: config 0 descriptor?? [ 324.755708][ T7767] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 324.762579][ T198] usb 3-1: Using ep0 maxpacket: 32 [ 324.769651][ T198] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 324.781282][ T198] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 324.781315][ T198] usb 3-1: config 0 has no interface number 0 [ 324.781363][ T198] usb 3-1: config 0 interface 184 has no altsetting 0 [ 324.815240][ T5861] hub 4-1:0.0: bad descriptor, ignoring hub [ 324.815274][ T5861] hub 4-1:0.0: probe with driver hub failed with error -5 [ 325.040897][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.040928][ T198] usb 3-1: Product: syz [ 325.040944][ T198] usb 3-1: Manufacturer: syz [ 325.040957][ T198] usb 3-1: SerialNumber: syz [ 325.096589][ T5861] usb 4-1: USB disconnect, device number 34 [ 325.214273][ T198] usb 3-1: config 0 descriptor?? [ 325.861421][ C1] usblp0: nonzero write bulk status received: -71 [ 325.917085][ T5682] usb 2-1: USB disconnect, device number 7 [ 326.072807][ T198] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 326.072840][ T198] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 326.166184][ T5682] usblp0: removed [ 326.322589][ T5861] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 326.489849][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 326.490676][ T5861] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 326.495346][ T5861] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 326.535902][ T5861] usb 4-1: string descriptor 0 read error: -22 [ 326.536034][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 326.584934][ T5861] usb 4-1: config 0 descriptor?? [ 326.589950][ T7778] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 326.612510][ T5861] hub 4-1:0.0: bad descriptor, ignoring hub [ 326.612550][ T5861] hub 4-1:0.0: probe with driver hub failed with error -5 [ 326.732455][ T7437] hsr_slave_0: entered promiscuous mode [ 326.733869][ T7437] hsr_slave_1: entered promiscuous mode [ 326.948397][ T5682] usb 4-1: USB disconnect, device number 35 [ 327.358187][ T5861] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 327.528185][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 327.529099][ T5861] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 327.530307][ T5861] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 327.530367][ T5861] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 327.530390][ T5861] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 327.530413][ T5861] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 327.530436][ T5861] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.530473][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.791435][ T1237] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 327.936953][ T5861] usb 2-1: usb_control_msg returned -71 [ 327.937002][ T5861] usbtmc 2-1:16.0: can't read capabilities [ 328.018851][ T5861] usb 2-1: USB disconnect, device number 8 [ 328.049413][ T1237] usb 4-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 328.051022][ T1237] usb 4-1: config 127 has an invalid interface number: 127 but max is 0 [ 328.051047][ T1237] usb 4-1: config 127 has no interface number 0 [ 328.084002][ T1237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.084032][ T1237] usb 4-1: Product: syz [ 328.084047][ T1237] usb 4-1: Manufacturer: syz [ 328.084061][ T1237] usb 4-1: SerialNumber: syz [ 328.318646][ T7349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 328.403400][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.428885][ T7349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 328.466260][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.493457][ T7349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 328.543593][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.547788][ T7349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.591635][ T7349] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 329.144966][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 329.299448][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 329.312256][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 329.337498][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.337582][ T10] usb 2-1: Product: syz [ 329.337598][ T10] usb 2-1: Manufacturer: syz [ 329.337612][ T10] usb 2-1: SerialNumber: syz [ 329.379777][ T198] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000003c: -71 [ 329.379813][ T198] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write BULK_IN_DLY: -71 [ 329.379832][ T198] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 329.381072][ T198] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 329.382757][ T10] usb 2-1: config 0 descriptor?? [ 329.443111][ T198] usb 3-1: USB disconnect, device number 18 [ 329.596992][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 329.923254][ T7821] device-mapper: ioctl: name not supplied when creating device [ 330.611557][ T5705] usb 4-1: USB disconnect, device number 36 [ 330.611557][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.611885][ T10] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 330.611953][ T10] usb 2-1: media controller created [ 330.645300][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.861896][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.307641][ T10] i2c i2c-1: Added multiplexed i2c bus 2 [ 331.307666][ T10] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 331.315216][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 331.316192][ T10] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 331.415905][ T10] DVB: Unable to find symbol mxl5005s_attach() [ 331.475766][ T3088] bridge_slave_1: left allmulticast mode [ 331.475799][ T3088] bridge_slave_1: left promiscuous mode [ 331.476039][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.652714][ T3088] bridge_slave_0: left allmulticast mode [ 331.652752][ T3088] bridge_slave_0: left promiscuous mode [ 331.653014][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.808608][ T10] usb 2-1: USB disconnect, device number 9 [ 332.009585][ T5695] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 332.128076][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 332.158190][ T5695] usb 3-1: Using ep0 maxpacket: 8 [ 332.159162][ T5695] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.160722][ T5695] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 332.160771][ T5695] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.160784][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.160797][ T5695] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.160809][ T5695] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.160833][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.278019][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 332.280547][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 332.280608][ T10] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 332.281783][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 50, changing to 7 [ 332.281816][ T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 332.284314][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.284340][ T10] usb 2-1: Product: syz [ 332.284355][ T10] usb 2-1: Manufacturer: syz [ 332.284370][ T10] usb 2-1: SerialNumber: syz [ 332.426958][ T5695] usb 3-1: usb_control_msg returned -71 [ 332.426990][ T5695] usbtmc 3-1:16.0: can't read capabilities [ 332.445659][ T5695] usb 3-1: USB disconnect, device number 19 [ 332.446289][ T3088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.536598][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.537618][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.556367][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.557157][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.587443][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.598402][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.639157][ T3088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.664654][ T10] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 332.703652][ T3088] bond0 (unregistering): Released all slaves [ 332.845671][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.870238][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.870374][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.006679][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.006821][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.896692][ T10] usb 2-1: USB disconnect, device number 10 [ 335.265912][ T7768] udevd[7768]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.333653][ T3088] hsr_slave_0: left promiscuous mode [ 335.368447][ T3088] hsr_slave_1: left promiscuous mode [ 335.369759][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.410522][ T3088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.738021][ T1237] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 335.899940][ T1237] usb 2-1: Using ep0 maxpacket: 8 [ 335.901067][ T1237] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.903410][ T1237] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 335.903447][ T1237] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.903460][ T1237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.903473][ T1237] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.903485][ T1237] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 335.903507][ T1237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.281264][ T1237] usb 2-1: usb_control_msg returned -71 [ 336.281314][ T1237] usbtmc 2-1:16.0: can't read capabilities [ 336.351961][ T3088] team0 (unregistering): Port device team_slave_1 removed [ 336.429907][ T1237] usb 2-1: USB disconnect, device number 11 [ 336.454576][ T3088] team0 (unregistering): Port device team_slave_0 removed [ 340.077944][ T5681] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 340.230469][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 340.231357][ T5681] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 340.232622][ T5681] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 340.232646][ T5681] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.232664][ T5681] usb 3-1: config 0 has no interface number 0 [ 340.232704][ T5681] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 340.232731][ T5681] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 340.232754][ T5681] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 340.232774][ T5681] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 340.232797][ T5681] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 340.237388][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.237415][ T5681] usb 3-1: Product: syz [ 340.237430][ T5681] usb 3-1: Manufacturer: syz [ 340.237444][ T5681] usb 3-1: SerialNumber: syz [ 340.368802][ T5681] usb 3-1: config 0 descriptor?? [ 340.370158][ T7932] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 340.655216][ T5681] usb 3-1: NFC: intf ffff8880212ff000 id ffffffff8ebd4ee0 [ 340.830952][ T5681] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 340.885024][ T5681] usb 3-1: USB disconnect, device number 20 [ 340.898263][ T5681] usb 3-1: NFC: intf ffff8880212ff000 [ 341.492025][ T198] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 341.492301][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 341.620955][ T198] usb 2-1: device descriptor read/64, error -32 [ 341.864587][ T198] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.009220][ T198] usb 2-1: Using ep0 maxpacket: 16 [ 342.017188][ T198] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.036574][ T198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.036631][ T198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.036660][ T198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.036682][ T198] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 342.036704][ T198] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.062484][ T198] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.062512][ T198] usb 2-1: Manufacturer: syz [ 342.360263][ T198] usb 2-1: config 0 descriptor?? [ 342.441113][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.634103][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.634681][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.714672][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.715254][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.739136][ T198] rc_core: IR keymap rc-hauppauge not found [ 343.739158][ T198] Registered IR keymap rc-empty [ 343.739309][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.754984][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.755549][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.759016][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.835834][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.836457][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.837692][ T198] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 343.866567][ T198] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 343.917309][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.949414][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 343.980391][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.000298][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.019608][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.038197][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.058232][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.079976][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.098381][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.169900][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 344.188028][ T198] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 345.086079][ T198] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 345.086106][ T198] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 345.113313][ T198] usb 2-1: USB disconnect, device number 13 [ 345.865621][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.917019][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.934088][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.936120][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.938858][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.348882][ T7437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.388400][ T7437] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.391339][ T7437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.442865][ T7437] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.463464][ T7437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.627283][ T7437] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.742691][ T7437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.915842][ T7437] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.158509][ T5593] Bluetooth: hci2: command tx timeout [ 348.517381][ T5695] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 349.452455][ T5695] usb 3-1: not running at top speed; connect to a high speed hub [ 349.452550][ T5695] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 349.453943][ T5695] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 349.453968][ T5695] usb 3-1: config 1 has no interface number 0 [ 349.457202][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.457229][ T5695] usb 3-1: Product: syz [ 349.457244][ T5695] usb 3-1: Manufacturer: syz [ 349.457257][ T5695] usb 3-1: SerialNumber: syz [ 349.536215][ T5695] usb 3-1: selecting invalid altsetting 1 [ 349.687945][ T5843] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 349.792768][ T5695] dvb_ttusb_budget: ttusb_init_controller: error [ 349.792848][ T5695] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 349.842176][ T5843] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 349.843453][ T5843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 349.843470][ T5843] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 349.843493][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.968831][ T5843] usb 2-1: probing VID:PID(0424:012C) [ 349.971895][ T5843] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 349.971928][ T5843] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 349.971946][ T5843] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 349.971964][ T5843] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 349.971981][ T5843] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 350.164140][ T5695] DVB: Unable to find symbol cx22700_attach() [ 350.229991][ T5695] DVB: Unable to find symbol tda10046_attach() [ 350.230009][ T5695] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 350.238057][ T5593] Bluetooth: hci2: command tx timeout [ 350.256686][ T5695] usb 3-1: USB disconnect, device number 21 [ 350.365576][ T5843] usb 2-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 350.566650][ T5843] usb 2-1: USB vub300 remote SDIO host controller[0]connected with no SD/SDIO card inserted [ 350.779852][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.780416][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.948255][ T5695] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 351.102307][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 351.130271][ T5695] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 351.189748][ T5695] usb 3-1: config 123 interface 0 has no altsetting 0 [ 351.219323][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.219351][ T5695] usb 3-1: Product: syz [ 351.219364][ T5695] usb 3-1: Manufacturer: syz [ 351.219377][ T5695] usb 3-1: SerialNumber: syz [ 351.470403][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.484271][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.489290][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.492945][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.504230][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.512383][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.653652][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.657632][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.742753][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.744609][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.747979][ T5843] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 351.786439][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.884799][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.899969][ T5843] usb 2-1: USB disconnect, device number 14 [ 351.920671][ T5682] usb 2-1: SET_CLOCK_SPEED 200kHz failed with retval=-71 [ 352.129940][ T5843] USB vub300 remote SDIO host controller[0] now disconnected [ 352.327948][ T5593] Bluetooth: hci2: command tx timeout [ 352.718021][ C0] BUG: sleeping function called from invalid context at kernel/workqueue.c:4561 [ 352.718049][ C0] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 16, name: ktimers/0 [ 352.718068][ C0] preempt_count: 0, expected: 0 [ 352.718079][ C0] RCU nest depth: 2, expected: 0 [ 352.718104][ C0] locks held by ktimers/0/16: 5, last CPU#0: [ 352.718235][ C0] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 352.718499][ C0] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 352.718537][ C0] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 352.718649][ C0] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 352.718726][ C0] #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 352.718792][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 352.718819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.718836][ C0] Call Trace: [ 352.718876][ C0] [ 352.718940][ C0] dump_stack_lvl+0xe8/0x150 [ 352.719037][ C0] __might_resched+0x31b/0x470 [ 352.719086][ C0] __cancel_work_sync+0x6d/0x110 [ 352.719127][ C0] mmc_free_host+0x19/0x40 [ 352.719212][ C0] call_timer_fn+0x18d/0x5f0 [ 352.719237][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 352.719348][ C0] ? call_timer_fn+0xd5/0x5f0 [ 352.719359][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 352.719378][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.719406][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 352.719438][ C0] __run_timer_base+0x67b/0x9b0 [ 352.719489][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 352.719532][ C0] ? lock_acquire+0x115/0x350 [ 352.719577][ C0] run_timer_softirq+0xb7/0x170 [ 352.719613][ C0] handle_softirqs+0x1da/0x6d0 [ 352.719658][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 352.719681][ C0] run_ktimerd+0x6a/0x100 [ 352.719699][ C0] smpboot_thread_fn+0x565/0xa70 [ 352.719719][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 352.719763][ C0] kthread+0x38b/0x470 [ 352.719788][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 352.719823][ C0] ? __pfx_kthread+0x10/0x10 [ 352.719843][ C0] ret_from_fork+0x514/0xb70 [ 352.719868][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 352.719880][ C0] ? __switch_to+0xc89/0x1420 [ 352.719924][ C0] ? __pfx_kthread+0x10/0x10 [ 352.719951][ C0] ret_from_fork_asm+0x1a/0x30 [ 352.719993][ C0] [ 352.720163][ C0] [ 352.973103][ C0] ============================= [ 352.977999][ C0] WARNING: suspicious RCU usage [ 352.982949][ C0] syzkaller #0 Tainted: G W [ 352.989003][ C0] ----------------------------- [ 352.993956][ C0] kernel/rcu/srcutree.c:1468 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section! [ 353.006006][ C0] [ 353.006006][ C0] other info that might help us debug this: [ 353.006006][ C0] [ 353.016396][ C0] [ 353.016396][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 353.024536][ C0] locks held by ktimers/0/16: 5, last CPU#0: [ 353.030589][ C0] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 353.040201][ C0] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 353.050260][ C0] #2: ffff8880b8626360 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 353.060567][ C0] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 353.069896][ C0] #4: ffffc90000157a80 ((&vub300->inactivity_timer)){+...}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 353.080544][ C0] [ 353.080544][ C0] stack backtrace: [ 353.086601][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 353.097920][ C0] Tainted: [W]=WARN [ 353.101746][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 353.111870][ C0] Call Trace: [ 353.115181][ C0] [ 353.118136][ C0] dump_stack_lvl+0xe8/0x150 [ 353.122785][ C0] lockdep_rcu_suspicious+0x140/0x1d0 [ 353.128227][ C0] __synchronize_srcu+0x157/0x2f0 [ 353.133294][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 353.138943][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.144782][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 353.150393][ C0] ? synchronize_srcu+0x20a/0x260 [ 353.155489][ C0] wakeup_source_unregister+0x127/0x3d0 [ 353.161237][ C0] mmc_host_classdev_release+0x47/0x100 [ 353.166919][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 353.173190][ C0] device_release+0xc4/0x1f0 [ 353.177953][ C0] kobject_put+0x222/0x550 [ 353.182404][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 353.187211][ C0] call_timer_fn+0x18d/0x5f0 [ 353.191839][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 353.198552][ C0] ? call_timer_fn+0xd5/0x5f0 [ 353.203342][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 353.208598][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.213835][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 353.220540][ C0] __run_timer_base+0x67b/0x9b0 [ 353.225443][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 353.230874][ C0] ? lock_acquire+0x115/0x350 [ 353.235591][ C0] run_timer_softirq+0xb7/0x170 [ 353.240505][ C0] handle_softirqs+0x1da/0x6d0 [ 353.245320][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 353.250380][ C0] run_ktimerd+0x6a/0x100 [ 353.254801][ C0] smpboot_thread_fn+0x565/0xa70 [ 353.259791][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 353.265066][ C0] kthread+0x38b/0x470 [ 353.269189][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 353.274696][ C0] ? __pfx_kthread+0x10/0x10 [ 353.279333][ C0] ret_from_fork+0x514/0xb70 [ 353.283968][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 353.289191][ C0] ? __switch_to+0xc89/0x1420 [ 353.293921][ C0] ? __pfx_kthread+0x10/0x10 [ 353.298602][ C0] ret_from_fork_asm+0x1a/0x30 [ 353.303411][ C0] [ 353.313647][ C0] ------------[ cut here ]------------ [ 353.313664][ C0] Voluntary context switch within RCU read-side critical section! [ 353.313674][ C0] WARNING: kernel/rcu/tree_plugin.h:332 at rcu_note_context_switch+0xc1d/0xe70, CPU#0: ktimers/0/16 [ 353.337914][ C0] Modules linked in: [ 353.341939][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 353.353175][ C0] Tainted: [W]=WARN [ 353.356998][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 353.367072][ C0] RIP: 0010:rcu_note_context_switch+0xc1d/0xe70 [ 353.373428][ C0] Code: 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 30 02 00 00 41 80 3f 00 0f 84 18 f5 ff ff 90 0f 0b 90 e9 0f f5 ff ff 48 8d 3d 33 76 09 0e <67> 48 0f b9 3a e9 ab f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 79 f4 ff [ 353.393059][ C0] RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 [ 353.399207][ C0] RAX: 0000000000000000 RBX: ffff88801cab8018 RCX: 8000000000000002 [ 353.407175][ C0] RDX: 0000000000000000 RSI: ffffffff8bcc4b60 RDI: ffffffff8fb57d30 [ 353.415143][ C0] RBP: dffffc0000000000 R08: ffffffff8fb22a7f R09: 1ffffffff1f6454f [ 353.423199][ C0] R10: dffffc0000000000 R11: fffffbfff1f64550 R12: ffff88801cab8000 [ 353.431169][ C0] R13: 0000000000000000 R14: ffff8880b863d340 R15: ffff88801cab84c4 [ 353.439148][ C0] FS: 0000000000000000(0000) GS:ffff888125bc3000(0000) knlGS:0000000000000000 [ 353.448268][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.454848][ C0] CR2: 00007f69017ef010 CR3: 00000000736d2000 CR4: 00000000003526f0 [ 353.462849][ C0] Call Trace: [ 353.466147][ C0] [ 353.469100][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.473904][ C0] __schedule+0x28f/0x5700 [ 353.478340][ C0] ? finish_task_switch+0x40e/0xc60 [ 353.483544][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.488311][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 353.493538][ C0] ? __schedule+0x16ef/0x5700 [ 353.498231][ C0] ? __pfx___schedule+0x10/0x10 [ 353.503099][ C0] ? __lock_acquire+0x1511/0x2de0 [ 353.508158][ C0] schedule+0x164/0x2b0 [ 353.512440][ C0] schedule_timeout+0xc0/0x2c0 [ 353.517250][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 353.522624][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 353.527996][ C0] ? wait_for_completion+0x272/0x5e0 [ 353.533303][ C0] ? preempt_schedule_common+0x7f/0xd0 [ 353.538871][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 353.544338][ C0] ? wait_for_completion+0x272/0x5e0 [ 353.549616][ C0] wait_for_completion+0x2ca/0x5e0 [ 353.554845][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 353.560509][ C0] __synchronize_srcu+0x23b/0x2f0 [ 353.565558][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 353.571191][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 353.576568][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 353.582118][ C0] ? synchronize_srcu+0x20a/0x260 [ 353.587149][ C0] wakeup_source_unregister+0x127/0x3d0 [ 353.592800][ C0] mmc_host_classdev_release+0x47/0x100 [ 353.598382][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 353.604656][ C0] device_release+0xc4/0x1f0 [ 353.609249][ C0] kobject_put+0x222/0x550 [ 353.613753][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 353.618541][ C0] call_timer_fn+0x18d/0x5f0 [ 353.623220][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 353.629916][ C0] ? call_timer_fn+0xd5/0x5f0 [ 353.634591][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 353.639703][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.644917][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 353.651611][ C0] __run_timer_base+0x67b/0x9b0 [ 353.656484][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 353.661881][ C0] ? lock_acquire+0x115/0x350 [ 353.666566][ C0] run_timer_softirq+0xb7/0x170 [ 353.671433][ C0] handle_softirqs+0x1da/0x6d0 [ 353.676208][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 353.681246][ C0] run_ktimerd+0x6a/0x100 [ 353.685580][ C0] smpboot_thread_fn+0x565/0xa70 [ 353.690524][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 353.695573][ C0] kthread+0x38b/0x470 [ 353.699639][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 353.705100][ C0] ? __pfx_kthread+0x10/0x10 [ 353.709709][ C0] ret_from_fork+0x514/0xb70 [ 353.714298][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 353.719403][ C0] ? __switch_to+0xc89/0x1420 [ 353.724082][ C0] ? __pfx_kthread+0x10/0x10 [ 353.728667][ C0] ret_from_fork_asm+0x1a/0x30 [ 353.733440][ C0] [ 353.736452][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 353.743740][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G W syzkaller #0 PREEMPT_{RT,(full)} [ 353.754933][ C0] Tainted: [W]=WARN [ 353.758739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 353.768800][ C0] Call Trace: [ 353.772073][ C0] [ 353.774994][ C0] vpanic+0x56d/0xa60 [ 353.779007][ C0] ? __pfx__printk+0x10/0x10 [ 353.783609][ C0] ? __pfx_vpanic+0x10/0x10 [ 353.788102][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 353.793408][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 353.798610][ C0] panic+0xc5/0xd0 [ 353.802351][ C0] ? __pfx_panic+0x10/0x10 [ 353.806770][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 353.811716][ C0] __warn+0x315/0x4c0 [ 353.815795][ C0] ? rcu_note_context_switch+0xc1d/0xe70 [ 353.821783][ C0] ? rcu_note_context_switch+0xc1d/0xe70 [ 353.827417][ C0] __report_bug+0x276/0x570 [ 353.831991][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.836762][ C0] ? __kasan_check_byte+0x12/0x40 [ 353.841828][ C0] ? rcu_note_context_switch+0xc1d/0xe70 [ 353.847466][ C0] ? __pfx___report_bug+0x10/0x10 [ 353.852524][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.857294][ C0] ? trace_contention_end+0x3b/0x160 [ 353.862577][ C0] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 353.869012][ C0] report_bug_entry+0x19b/0x290 [ 353.873866][ C0] ? rcu_note_context_switch+0xc1d/0xe70 [ 353.879519][ C0] ? rcu_note_context_switch+0xc22/0xe70 [ 353.885182][ C0] handle_bug+0xce/0x200 [ 353.889435][ C0] exc_invalid_op+0x1a/0x50 [ 353.893938][ C0] asm_exc_invalid_op+0x1a/0x20 [ 353.898815][ C0] RIP: 0010:rcu_note_context_switch+0xc1d/0xe70 [ 353.905063][ C0] Code: 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 30 02 00 00 41 80 3f 00 0f 84 18 f5 ff ff 90 0f 0b 90 e9 0f f5 ff ff 48 8d 3d 33 76 09 0e <67> 48 0f b9 3a e9 ab f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 79 f4 ff [ 353.924666][ C0] RSP: 0018:ffffc900001572c0 EFLAGS: 00010002 [ 353.930845][ C0] RAX: 0000000000000000 RBX: ffff88801cab8018 RCX: 8000000000000002 [ 353.938813][ C0] RDX: 0000000000000000 RSI: ffffffff8bcc4b60 RDI: ffffffff8fb57d30 [ 353.946795][ C0] RBP: dffffc0000000000 R08: ffffffff8fb22a7f R09: 1ffffffff1f6454f [ 353.954784][ C0] R10: dffffc0000000000 R11: fffffbfff1f64550 R12: ffff88801cab8000 [ 353.962913][ C0] R13: 0000000000000000 R14: ffff8880b863d340 R15: ffff88801cab84c4 [ 353.970919][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.975698][ C0] __schedule+0x28f/0x5700 [ 353.980131][ C0] ? finish_task_switch+0x40e/0xc60 [ 353.985353][ C0] ? rcu_is_watching+0x16/0xb0 [ 353.990140][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 353.995340][ C0] ? __schedule+0x16ef/0x5700 [ 354.000042][ C0] ? __pfx___schedule+0x10/0x10 [ 354.004896][ C0] ? __lock_acquire+0x1511/0x2de0 [ 354.009945][ C0] schedule+0x164/0x2b0 [ 354.014144][ C0] schedule_timeout+0xc0/0x2c0 [ 354.019001][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 354.024472][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 354.029894][ C0] ? wait_for_completion+0x272/0x5e0 [ 354.035207][ C0] ? preempt_schedule_common+0x7f/0xd0 [ 354.040657][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 354.046031][ C0] ? wait_for_completion+0x272/0x5e0 [ 354.051318][ C0] wait_for_completion+0x2ca/0x5e0 [ 354.056452][ C0] ? __pfx_wait_for_completion+0x10/0x10 [ 354.062087][ C0] __synchronize_srcu+0x23b/0x2f0 [ 354.067123][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 354.072753][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 354.078132][ C0] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 354.083686][ C0] ? synchronize_srcu+0x20a/0x260 [ 354.088720][ C0] wakeup_source_unregister+0x127/0x3d0 [ 354.094271][ C0] mmc_host_classdev_release+0x47/0x100 [ 354.099820][ C0] ? __pfx_mmc_host_classdev_release+0x10/0x10 [ 354.105973][ C0] device_release+0xc4/0x1f0 [ 354.110561][ C0] kobject_put+0x222/0x550 [ 354.114974][ C0] ? mmc_pwrseq_free+0x86/0xa0 [ 354.119832][ C0] call_timer_fn+0x18d/0x5f0 [ 354.124420][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 354.131090][ C0] ? call_timer_fn+0xd5/0x5f0 [ 354.135785][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 354.140922][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.146126][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 354.152808][ C0] __run_timer_base+0x67b/0x9b0 [ 354.157681][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 354.163100][ C0] ? lock_acquire+0x115/0x350 [ 354.167789][ C0] run_timer_softirq+0xb7/0x170 [ 354.172645][ C0] handle_softirqs+0x1da/0x6d0 [ 354.177433][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 354.182472][ C0] run_ktimerd+0x6a/0x100 [ 354.186818][ C0] smpboot_thread_fn+0x565/0xa70 [ 354.191861][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 354.196918][ C0] kthread+0x38b/0x470 [ 354.200985][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 354.206446][ C0] ? __pfx_kthread+0x10/0x10 [ 354.211050][ C0] ret_from_fork+0x514/0xb70 [ 354.215640][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 354.220759][ C0] ? __switch_to+0xc89/0x1420 [ 354.225975][ C0] ? __pfx_kthread+0x10/0x10 [ 354.230655][ C0] ret_from_fork_asm+0x1a/0x30 [ 354.235431][ C0] [ 354.238812][ C0] Kernel Offset: disabled [ 354.243138][ C0] Rebooting in 86400 seconds..