last executing test programs: 6.708209855s ago: executing program 4 (id=659): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001100)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001180), 0x318, 0x0) recvmmsg(r0, &(0x7f00000011c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001200)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) poll(&(0x7f0000001240)=[{r1, 0x2cfc08c20dafc34e}], 0x1, 0x8000007) 5.088629823s ago: executing program 0 (id=676): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000480)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x20, 0x16, 0x6, "3f1c15f2511c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x5, 0x59, "61957b9d3518cb13065a7a4cf6099a1e329c09ba44ace33010fccb9b43a4a0b6bd4704d319ea3e9d269f2b8f78492299bdd44ead54a744d0e17f1c6e2aeb5829c8e91c1118acd4c38c6671c4c6e7452bc9bc86f3255b236fb2"}, 0x0, 0x0}) 4.929562807s ago: executing program 2 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1a7) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000300)='./mnt\x00', 0x40080, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x40286608, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}, 0x10, 0x0, '\x00', @d}) 4.827713908s ago: executing program 1 (id=680): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x10, 0x2}, {0x5, 0x1}, {0x3, 0x4}]}]}}, &(0x7f0000001b80)=""/4090, 0x3e, 0xffa, 0xa}, 0x28) 4.621372013s ago: executing program 4 (id=681): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000) 4.464589721s ago: executing program 2 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xf0, 0x300}]) 4.316644982s ago: executing program 1 (id=683): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f00000005c0)={@empty, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x10000, 0xd2cd, "7f0af6f43d3f4499b5184ab8ba79590e86996b94367a99d74f2623022e4061a4", "6ee41bc2a353fa3723a06109c92227d1", {"a0d29e956a70316425e408a2a8026724", "a74c0a42d3c2176bb02056d535cfa57d"}}}}}}}}, 0x0) 4.267764811s ago: executing program 4 (id=684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x6e) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 4.035947529s ago: executing program 2 (id=685): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/class/input/input0/id/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000000640)=""/100, 0x64) io_uring_enter(0xffffffffffffffff, 0xae, 0x6933, 0x17, 0x0, 0x0) 4.024072233s ago: executing program 1 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x8a) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000300)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='A', 0x1}], 0x1, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0xf96f, 0x7, 0x6, 0x9}}], 0x18, 0x44014}, 0x2c048904) write(r0, &(0x7f0000000400)='2', 0x1) 3.873214324s ago: executing program 2 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004740), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004780)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000047c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000004800)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x0, 0x14, 0xa}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x1a, 0x28, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x105, 0x0, 0xffff}}}}, 0x36) 3.844472249s ago: executing program 3 (id=688): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 3.743936158s ago: executing program 4 (id=689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='veno', 0x4) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000540), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 3.702758929s ago: executing program 1 (id=690): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 3.655060745s ago: executing program 3 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303, 0x38}, '\x00', '\x00', '^\x00\x00F', "cb00000000001000"}, 0x28) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000140)="c1d8c827763ad903", 0x8}, {&(0x7f0000000380)="b1583e08c3023fc787d7ea637dcdfa8b3fb9c3929ccfb635", 0x18}], 0x2) 3.293013524s ago: executing program 2 (id=692): syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x0, 0x1, 0xb, 0xf0, "77f15ef6983d2e9e4cea7f3567bf701fa00d6a39ad4b3eb72544d4c1ba33b030"}) 3.140070263s ago: executing program 3 (id=693): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 3.063969488s ago: executing program 0 (id=694): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000500)={{0xa000, 0xa000, 0x4, 0x9, 0xfd, 0x9, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0xd535c1c88a4e070, 0x10000, 0x3, 0x0, 0x40, 0x34, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0x1c, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0x80a0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0x1e}, {0x10000, 0xe000, 0xb, 0x9, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x0, 0xeeee0000, 0x4, 0x7, 0xb1, 0xb, 0x21, 0x4, 0x80, 0x80, 0x1}, {0x3000, 0x2000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x9, 0x5, 0x5, 0xb, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0xeeee0000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x83, 0xfff]}) 2.863068688s ago: executing program 4 (id=695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000000480)='X', 0xfee4, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='f', 0x7a80, 0x810, 0x0, 0x0) 2.116092734s ago: executing program 1 (id=696): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.852520733s ago: executing program 4 (id=697): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f00000002c0)={0x0, 0x12, 0xb, "f35a246393e38c379f4025"}, 0x0, 0x0}) 1.75383157s ago: executing program 0 (id=698): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000280)={0x0, [[0x2, 0x0, 0x0, 0x0, 0x6d8, 0x0, 0x4, 0x4], [0x0, 0x3ffffffc, 0x5, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x4}, {0x400000, 0xfffffe03}, {}, {}, {0x8000000, 0x8000}, {0x1, 0x9}, {}, {0x8}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.599262074s ago: executing program 0 (id=699): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0xfd}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.528579828s ago: executing program 0 (id=700): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x67}, {0x0, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x8, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb08412757e623d0f}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.144996056s ago: executing program 3 (id=701): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r0, &(0x7f0000001640)=[{&(0x7f0000001680)='4', 0x1}], 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000001700), 0xb) 757.991789ms ago: executing program 3 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='27', 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0xa, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) 392.991946ms ago: executing program 0 (id=703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r1, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1}, &(0x7f0000000140)=0x8) 60.93687ms ago: executing program 1 (id=704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100403, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x8007fffd, 0x0, 0xe, "dce4f0020100000000001b347d5c00010200"}) 60.492084ms ago: executing program 3 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) dup2(r1, r0) 0s ago: executing program 2 (id=706): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f00000004c0)=']', 0x1, 0x4000000, 0x0, 0x0) kernel console output (not intermixed with test programs): ance. Setting the MTU to 1532 would solve the problem. [ 98.529028][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.541129][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.541150][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.541172][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.552537][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.552560][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.552587][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.603269][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.603302][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.603330][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.663302][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.663328][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.663355][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.694603][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.694623][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.694650][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.209440][ T5596] hsr_slave_0: entered promiscuous mode [ 99.211110][ T5596] hsr_slave_1: entered promiscuous mode [ 99.222034][ T5598] hsr_slave_0: entered promiscuous mode [ 99.223503][ T5598] hsr_slave_1: entered promiscuous mode [ 99.225178][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 99.225231][ T5598] Cannot create hsr debugfs directory [ 99.237564][ T5599] hsr_slave_0: entered promiscuous mode [ 99.239153][ T5599] hsr_slave_1: entered promiscuous mode [ 99.240498][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 99.240520][ T5599] Cannot create hsr debugfs directory [ 99.340311][ T5597] hsr_slave_0: entered promiscuous mode [ 99.341304][ T5597] hsr_slave_1: entered promiscuous mode [ 99.341970][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 99.341988][ T5597] Cannot create hsr debugfs directory [ 99.764740][ T5613] Bluetooth: hci2: command tx timeout [ 99.764780][ T5613] Bluetooth: hci1: command tx timeout [ 99.855131][ T62] Bluetooth: hci4: command tx timeout [ 99.924749][ T62] Bluetooth: hci0: command tx timeout [ 99.924797][ T62] Bluetooth: hci3: command tx timeout [ 100.455277][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.456684][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.458642][ T5595] bridge_slave_0: entered allmulticast mode [ 100.461150][ T5595] bridge_slave_0: entered promiscuous mode [ 100.472922][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.473040][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.473228][ T5595] bridge_slave_1: entered allmulticast mode [ 100.479912][ T5595] bridge_slave_1: entered promiscuous mode [ 100.567977][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.607967][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.620870][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.621665][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.683163][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.687754][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.693508][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.718632][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.775396][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.803793][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.842614][ T5595] team0: Port device team_slave_0 added [ 100.866144][ T5595] team0: Port device team_slave_1 added [ 101.070502][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.070523][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.070542][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.122971][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.122997][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.123026][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.224763][ T5599] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.274177][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.305726][ T5599] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.327740][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.366739][ T5599] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.402014][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.456814][ T5595] hsr_slave_0: entered promiscuous mode [ 101.457656][ T5595] hsr_slave_1: entered promiscuous mode [ 101.458242][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 101.458259][ T5595] Cannot create hsr debugfs directory [ 101.460334][ T5599] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.497372][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.719884][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.748934][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.780127][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.808974][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.843824][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.845214][ T5613] Bluetooth: hci2: command tx timeout [ 101.845284][ T62] Bluetooth: hci1: command tx timeout [ 101.879371][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.927418][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.934640][ T62] Bluetooth: hci4: command tx timeout [ 101.968567][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.004921][ T5613] Bluetooth: hci3: command tx timeout [ 102.004981][ T62] Bluetooth: hci0: command tx timeout [ 102.295223][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.318180][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.328274][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.358409][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.362618][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.403803][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.443730][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.468471][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.566654][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.625963][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.677847][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.697032][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.731259][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.742470][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.768003][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.783917][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.809204][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.873000][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.961045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.961347][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.033469][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.047620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.052075][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.158586][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.193071][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.222280][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.222403][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.272166][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.272319][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.344161][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.384188][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.412001][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.412205][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.513901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.514121][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.581365][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.665479][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.670921][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.672360][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.785571][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.785677][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.898967][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.000287][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.005993][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.106526][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.106669][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.582336][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.162186][ T5596] veth0_vlan: entered promiscuous mode [ 105.241269][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.299374][ T5596] veth1_vlan: entered promiscuous mode [ 105.653554][ T5596] veth0_macvtap: entered promiscuous mode [ 105.720798][ T5596] veth1_macvtap: entered promiscuous mode [ 105.780177][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.782398][ T5599] veth0_vlan: entered promiscuous mode [ 105.853107][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.920584][ T5599] veth1_vlan: entered promiscuous mode [ 105.942284][ T5729] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.956581][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.141168][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.399520][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.693347][ T5599] veth0_macvtap: entered promiscuous mode [ 106.815635][ T1052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.937371][ T5597] veth0_vlan: entered promiscuous mode [ 106.976717][ T5599] veth1_macvtap: entered promiscuous mode [ 107.273097][ T5597] veth1_vlan: entered promiscuous mode [ 107.300425][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.338288][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.457253][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.457281][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.457881][ T5595] veth0_vlan: entered promiscuous mode [ 107.611046][ T5595] veth1_vlan: entered promiscuous mode [ 107.627786][ T5598] veth0_vlan: entered promiscuous mode [ 107.646204][ T5597] veth0_macvtap: entered promiscuous mode [ 107.646472][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.646488][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.743740][ T5597] veth1_macvtap: entered promiscuous mode [ 107.881523][ T5598] veth1_vlan: entered promiscuous mode [ 108.119024][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.210299][ T5595] veth0_macvtap: entered promiscuous mode [ 108.226326][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.257862][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.257885][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.326927][ T5595] veth1_macvtap: entered promiscuous mode [ 108.473507][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.473528][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.550466][ T5598] veth0_macvtap: entered promiscuous mode [ 108.555327][ T1052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555572][ T1052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.587660][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.588547][ T5596] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.724071][ T5598] veth1_macvtap: entered promiscuous mode [ 108.742880][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.121729][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.121752][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.125468][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.243844][ T5829] erspan0: entered promiscuous mode [ 109.340867][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.779848][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.779872][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.310357][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.310381][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.722185][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.722207][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.904171][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.904193][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.383258][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.383283][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.558175][ T1182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.805900][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.864526][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 112.867366][ T30] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.112110][ T30] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 113.114270][ T30] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.114307][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.114329][ T30] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.114351][ T30] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.167251][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.306295][ T1182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.306503][ T1182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.306710][ T1182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.306884][ T1182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.307257][ T1182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.341931][ T1182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.342202][ T1182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.354219][ T1182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.357992][ T1182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.383303][ T1182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.387249][ T1182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.387890][ T1182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.388080][ T1182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.388606][ T1182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.389025][ T1182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.411399][ T1182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.898552][ T30] usb 2-1: GET_CAPABILITIES returned 0 [ 113.898603][ T30] usbtmc 2-1:16.0: can't read capabilities [ 114.538220][ T1003] usb 2-1: USB disconnect, device number 2 [ 114.938512][ T5894] phram: illegal device length [ 115.172761][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.865179][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.921830][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 115.947284][ T5912] bridge_slave_0: left allmulticast mode [ 115.947328][ T5912] bridge_slave_0: left promiscuous mode [ 115.947807][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.074552][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 116.075368][ T35] usb 5-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.077251][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.077299][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.203415][ T35] usb 5-1: config 0 descriptor?? [ 116.349340][ T5917] jffs2: notice: (5917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 116.546467][ T201] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.548830][ T35] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.735436][ T201] usb 2-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 116.751575][ T201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.751602][ T201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.755829][ T201] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.755857][ T201] usb 2-1: SerialNumber: syz [ 116.935995][ T5736] usb 5-1: USB disconnect, device number 2 [ 117.371903][ T201] usb 2-1: 0:2 : does not exist [ 117.393624][ T201] usb 2-1: unit 120 not found! [ 117.393650][ T201] usb 2-1: unit 48 not found! [ 117.393666][ T201] usb 2-1: unit 52 not found! [ 117.829361][ T201] usb 2-1: USB disconnect, device number 3 [ 119.122545][ T5971] netlink: 148 bytes leftover after parsing attributes in process `syz.2.48'. [ 119.227356][ T5972] CIFS: Attempting to mount //127.0.0.1/share [ 119.521148][ T12] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 119.521190][ T12] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 119.591208][ T5972] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:5445 failed: -ENODEV [ 119.741029][ T1139] CIFS: VFS: smbdirect_connect_resolve_route:121 rdma_resolve_route() failed -ENODEV [ 119.741067][ T1139] CIFS: VFS: smbdirect_connect_rdma_event_handler:313 smbdirect_socket_schedule_cleanup(-ENODEV) called from smbdirect_connect_rdma_event_handler in line=313 status=RESOLVE_ROUTE_RUNNING [ 119.757301][ T5972] CIFS: VFS: _smbd_get_connection:327 connect to 127.0.0.1:445 failed: -ENODEV [ 119.870527][ T5972] CIFS: VFS: cifs_mount failed w/return code = -2 [ 120.604963][ T6003] Illegal XDP return value 9 on prog (id 9) dev N/A, expect packet loss! [ 121.066876][ T6011] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 121.173851][ T6011] bond1 (unregistering): Released all slaves [ 121.430935][ T6023] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 122.227830][ T6057] warning: `syz.2.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.889382][ T201] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.060749][ T201] usb 3-1: Using ep0 maxpacket: 16 [ 123.067647][ T201] usb 3-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 123.140170][ T201] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 123.140206][ T201] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 123.140231][ T201] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 123.140252][ T201] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.146349][ T201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.146378][ T201] usb 3-1: SerialNumber: syz [ 123.287142][ T201] usb 3-1: config 0 descriptor?? [ 123.545964][ T201] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 123.693532][ T6082] process 'syz.4.93' launched './file0' with NULL argv: empty string added [ 123.771529][ T4950] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 123.882963][ T6081] process '/newroot/10/file0' started with executable stack [ 123.907829][ T4950] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 124.057706][ T201] usb 3-1: USB disconnect, device number 2 [ 124.060142][ T4950] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 124.944552][ T5729] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.999489][ T6120] FAULT_INJECTION: forcing a failure. [ 124.999489][ T6120] name failslab, interval 1, probability 0, space 0, times 0 [ 124.999557][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.3.110 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.999591][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.999609][ T6120] Call Trace: [ 124.999617][ T6120] [ 124.999625][ T6120] dump_stack_lvl+0xe8/0x150 [ 124.999675][ T6120] should_fail_ex+0x447/0x5e0 [ 124.999705][ T6120] should_failslab+0xa8/0x100 [ 124.999729][ T6120] __kmalloc_cache_noprof+0x9c/0x670 [ 124.999749][ T6120] ? alloc_ucounts+0xaa/0x4b0 [ 124.999767][ T6120] ? alloc_ucounts+0xaa/0x4b0 [ 124.999791][ T6120] alloc_ucounts+0xaa/0x4b0 [ 124.999809][ T6120] ? __asan_memset+0x22/0x50 [ 124.999838][ T6120] set_cred_ucounts+0x10d/0x1c0 [ 124.999865][ T6120] __sys_setuid+0x2b2/0x560 [ 124.999905][ T6120] do_syscall_64+0x166/0x520 [ 124.999928][ T6120] ? trace_irq_disable+0x3b/0x140 [ 124.999949][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.999969][ T6120] ? clear_bhb_loop+0x70/0xc0 [ 124.999993][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.000012][ T6120] RIP: 0033:0x7f6c0800f559 [ 125.000041][ T6120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.000059][ T6120] RSP: 002b:00007f6c0625e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 125.000081][ T6120] RAX: ffffffffffffffda RBX: 00007f6c08295fa0 RCX: 00007f6c0800f559 [ 125.000096][ T6120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 125.000107][ T6120] RBP: 00007f6c080a6b50 R08: 0000000000000000 R09: 0000000000000000 [ 125.000119][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.000131][ T6120] R13: 00007f6c08296038 R14: 00007f6c08295fa0 R15: 00007ffc959edc68 [ 125.000159][ T6120] [ 125.054594][ T201] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 125.084507][ T5729] usb 2-1: device descriptor read/64, error -71 [ 125.093780][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 125.093833][ T6126] bond0: Unable to set up delay as MII monitoring is disabled [ 125.215656][ T201] usb 5-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 125.231080][ T201] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.231148][ T201] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 125.236127][ T201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.236154][ T201] usb 5-1: Product: syz [ 125.236172][ T201] usb 5-1: Manufacturer: syz [ 125.236185][ T201] usb 5-1: SerialNumber: syz [ 125.376639][ T5729] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.519550][ T5729] usb 2-1: device descriptor read/64, error -71 [ 125.619308][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.118'. [ 125.623085][ T6134] netlink: 'syz.3.118': attribute type 9 has an invalid length. [ 125.623122][ T6134] netlink: 23 bytes leftover after parsing attributes in process `syz.3.118'. [ 125.668756][ T5729] usb usb2-port1: attempt power cycle [ 125.909641][ C0] usb 5-1: received EP1 urb->status = -2 [ 125.942175][ T201] usb 5-1: unable to init card! (ret=-110) [ 125.943466][ T201] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 126.070633][ T5604] usb 5-1: USB disconnect, device number 3 [ 126.078239][ T5819] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.204543][ T5729] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.225859][ T5729] usb 2-1: device descriptor read/8, error -71 [ 126.226278][ T5819] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 126.228163][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.228220][ T5819] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.228244][ T5819] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.228273][ T5819] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.228325][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.484644][ T5729] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.509453][ T5729] usb 2-1: device descriptor read/8, error -71 [ 126.615192][ T5729] usb usb2-port1: unable to enumerate USB device [ 127.110031][ T5819] gud 4-1:1.0: Failed to get connectors (error=-5) [ 127.110079][ T5819] gud 4-1:1.0: probe with driver gud failed with error -5 [ 127.385280][ T6164] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.385317][ T6164] CIFS: Attempting to mount //127.0.0.1/share [ 127.682434][ T5940] usb 4-1: USB disconnect, device number 2 [ 128.079066][ T6175] syz.1.130 uses obsolete (PF_INET,SOCK_PACKET) [ 128.189317][ T6164] CIFS: VFS: cifs_mount failed w/return code = -112 [ 128.921901][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.137'. [ 128.967746][ T6201] FAULT_INJECTION: forcing a failure. [ 128.967746][ T6201] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.967770][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.4.138 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.967783][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 128.967790][ T6201] Call Trace: [ 128.967796][ T6201] [ 128.967802][ T6201] dump_stack_lvl+0xe8/0x150 [ 128.967825][ T6201] should_fail_ex+0x447/0x5e0 [ 128.967842][ T6201] _copy_from_user+0x2d/0xb0 [ 128.967857][ T6201] __x64_sys_mq_notify+0xf8/0x190 [ 128.967874][ T6201] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 128.967896][ T6201] do_syscall_64+0x166/0x520 [ 128.967908][ T6201] ? trace_irq_disable+0x3b/0x140 [ 128.967919][ T6201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.967930][ T6201] ? clear_bhb_loop+0x70/0xc0 [ 128.967944][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.967954][ T6201] RIP: 0033:0x7f2efbd4f559 [ 128.967965][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.967973][ T6201] RSP: 002b:00007f2ef9fa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 128.967985][ T6201] RAX: ffffffffffffffda RBX: 00007f2efbfd5fa0 RCX: 00007f2efbd4f559 [ 128.967993][ T6201] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffffff [ 128.968000][ T6201] RBP: 00007f2efbde6b50 R08: 0000000000000000 R09: 0000000000000000 [ 128.968006][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.968013][ T6201] R13: 00007f2efbfd6038 R14: 00007f2efbfd5fa0 R15: 00007fffeee6ce58 [ 128.968029][ T6201] [ 129.325248][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.140'. [ 129.325304][ T6206] netlink: 48 bytes leftover after parsing attributes in process `syz.4.140'. [ 130.131692][ T6231] capability: warning: `syz.4.150' uses deprecated v2 capabilities in a way that may be insecure [ 131.016205][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.192042][ T5940] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 131.205235][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.205264][ T5940] usb 2-1: Product: syz [ 131.205277][ T5940] usb 2-1: Manufacturer: syz [ 131.205291][ T5940] usb 2-1: SerialNumber: syz [ 131.246721][ T5940] usb 2-1: config 0 descriptor?? [ 131.265284][ T5940] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 131.459960][ T6228] dvb-usb: bulk message failed: -22 (7/0) [ 131.595614][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.597132][ T5940] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 131.597243][ T5940] usb 2-1: media controller created [ 131.754533][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.772224][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.911665][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 132.247351][ T5940] DVB: Unable to find symbol mt352_attach() [ 132.313300][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.313361][ T5926] usb 1-1: New USB device found: idVendor=041e, idProduct=3263, bcdDevice=0.40 [ 132.332871][ T5926] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 132.332908][ T5926] usb 1-1: can't read configurations, error -71 [ 132.496345][ T5940] DVB: Unable to find symbol nxt6000_attach() [ 132.496362][ T5940] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 132.514354][ T5940] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 132.528318][ T5940] dvb-usb: schedule remote query interval to 1000 msecs. [ 132.528346][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 132.552053][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 132.552081][ T5940] dvb-usb: bulk message failed: -22 (7/0) [ 132.582781][ T5940] usb 2-1: USB disconnect, device number 8 [ 133.151352][ T5940] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 133.287080][ T6293] netlink: 'syz.3.175': attribute type 28 has an invalid length. [ 133.287106][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 133.341722][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341764][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341793][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341817][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341841][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341865][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341888][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341912][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341936][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.341960][ T5819] hid-generic 0005:0B57:0005.0001: unknown main item tag 0x0 [ 133.495829][ T5819] hid-generic 0005:0B57:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 133.619017][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.619127][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.620013][ T6297] FAULT_INJECTION: forcing a failure. [ 133.620013][ T6297] name failslab, interval 1, probability 0, space 0, times 0 [ 133.620042][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.2.176 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 133.620064][ T6297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.620075][ T6297] Call Trace: [ 133.620082][ T6297] [ 133.620090][ T6297] dump_stack_lvl+0xe8/0x150 [ 133.620140][ T6297] should_fail_ex+0x447/0x5e0 [ 133.620173][ T6297] should_failslab+0xa8/0x100 [ 133.620199][ T6297] __kmalloc_noprof+0xf6/0x790 [ 133.620219][ T6297] ? __memcg_list_lru_alloc+0x211/0x830 [ 133.620238][ T6297] ? __memcg_list_lru_alloc+0x211/0x830 [ 133.620263][ T6297] __memcg_list_lru_alloc+0x211/0x830 [ 133.620287][ T6297] ? xa_load+0x60/0x210 [ 133.620308][ T6297] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 133.620342][ T6297] __memcg_slab_post_alloc_hook+0x41b/0xe00 [ 133.620375][ T6297] ? __memcg_slab_post_alloc_hook+0x25f/0xe00 [ 133.620414][ T6297] ? __d_alloc+0x37/0x830 [ 133.620440][ T6297] kmem_cache_alloc_lru_noprof+0x417/0x680 [ 133.620486][ T6297] ? __d_alloc+0x37/0x830 [ 133.620512][ T6297] ? __d_alloc+0x37/0x830 [ 133.620545][ T6297] __d_alloc+0x37/0x830 [ 133.620576][ T6297] d_alloc_pseudo+0x21/0xc0 [ 133.620605][ T6297] alloc_path_pseudo+0x107/0x220 [ 133.620631][ T6297] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 133.620656][ T6297] ? inode_set_ctime_current+0x287/0xb60 [ 133.620684][ T6297] alloc_file_pseudo+0xa8/0x1e0 [ 133.620709][ T6297] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 133.620730][ T6297] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 133.620758][ T6297] create_pipe_files+0x306/0x7b0 [ 133.620782][ T6297] __do_pipe_flags+0x46/0x1f0 [ 133.620803][ T6297] do_pipe2+0xaa/0x190 [ 133.620828][ T6297] ? __pfx_do_pipe2+0x10/0x10 [ 133.620852][ T6297] ? rcu_is_watching+0x16/0xb0 [ 133.620888][ T6297] __x64_sys_pipe2+0x5a/0x70 [ 133.620909][ T6297] do_syscall_64+0x166/0x520 [ 133.620929][ T6297] ? trace_irq_disable+0x3b/0x140 [ 133.620948][ T6297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.620968][ T6297] ? clear_bhb_loop+0x70/0xc0 [ 133.620990][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.621009][ T6297] RIP: 0033:0x7fa1b584f559 [ 133.621028][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.621043][ T6297] RSP: 002b:00007fa1b3aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 133.621064][ T6297] RAX: ffffffffffffffda RBX: 00007fa1b5ad5fa0 RCX: 00007fa1b584f559 [ 133.621077][ T6297] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 133.621089][ T6297] RBP: 00007fa1b58e6b50 R08: 0000000000000000 R09: 0000000000000000 [ 133.621100][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.621111][ T6297] R13: 00007fa1b5ad6038 R14: 00007fa1b5ad5fa0 R15: 00007ffe16755cb8 [ 133.621150][ T6297] [ 133.689633][ T6293] Zero length message leads to an empty skb [ 133.699492][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 133.699529][ T6301] netlink: 'syz.1.178': attribute type 26 has an invalid length. [ 134.265810][ T6299] fido_id[6299]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 134.757969][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd 8[ 134.906592][ T5819] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 134.908976][ T5819] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 134.909005][ T5819] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 134.953680][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.953709][ T5819] usb 4-1: Product: syz [ 134.953723][ T5819] usb 4-1: Manufacturer: syz [ 134.953736][ T5819] usb 4-1: SerialNumber: syz [ 135.021337][ T5819] usb 4-1: config 0 descriptor?? [ 135.054906][ T5819] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 135.274530][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.434540][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 135.437025][ T5940] usb 5-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 135.438573][ T5940] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 135.438598][ T5940] usb 5-1: config 0 has no interface number 0 [ 135.438744][ T5940] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 135.443234][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.443259][ T5940] usb 5-1: Product: syz [ 135.443272][ T5940] usb 5-1: Manufacturer: syz [ 135.443286][ T5940] usb 5-1: SerialNumber: syz [ 135.466791][ T5940] usb 5-1: config 0 descriptor?? [ 135.525466][ T6325] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.768927][ T6325] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 135.893181][ T6343] [ 135.905453][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.109337][ T5926] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 136.135646][ T5819] gspca_sunplus: reg_r err -71 [ 136.135742][ T5819] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 136.257611][ T5819] usb 4-1: USB disconnect, device number 3 [ 136.296070][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.296150][ T5926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 136.296178][ T5926] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 136.296201][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 136.296258][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.403161][ T6339] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 136.494778][ T6339] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 136.661718][ T5926] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected syzkaller syzkaller login: [ 136.755809][ T5926] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 136.756535][ T5926] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 136.846621][ T5940] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 136.846652][ T5940] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 136.847395][ T5940] asix 5-1:0.188: probe with driver asix failed with error -71 [ 136.929567][ T5940] usb 5-1: USB disconnect, device number 4 [ 136.940313][ T5926] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 137.197142][ T5926] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 137.197230][ T5926] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 137.238815][ T5926] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.283700][ T6360] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.402582][ T5940] usb 3-1: USB disconnect, device number 3 [ 137.439276][ T5940] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 137.501880][ T5940] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.502941][ T5940] keyspan 3-1:1.0: device disconnected [ 137.670087][ T73] IPVS: starting estimator thread 0... [ 137.764887][ T6367] IPVS: using max 10 ests per chain, 24000 per kthread [ 138.623042][ T5940] hid_parser_main: 22 callbacks suppressed [ 138.623071][ T5940] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 138.674785][ T30] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 138.741597][ T5940] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.875409][ T30] usb 3-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 138.876236][ T30] usb 3-1: config 0 has no interfaces? [ 138.878137][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.878160][ T30] usb 3-1: Product: syz [ 138.878194][ T30] usb 3-1: Manufacturer: syz [ 138.924630][ T30] usb 3-1: config 0 descriptor?? [ 139.064761][ T5940] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.326772][ T5940] usb 5-1: New USB device found: idVendor=072f, idProduct=2200, bcdDevice=1.00 [ 139.328361][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.512270][ T201] usb 3-1: USB disconnect, device number 4 [ 140.034338][ C1] usb 5-1: NFC: It it not the response to the last command [ 140.085016][ T5940] usb 5-1: NFC: Unable to get FW version [ 140.120205][ T5940] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -5 [ 140.127747][ T5729] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 140.135872][ T201] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.275014][ T1003] usb 5-1: USB disconnect, device number 5 [ 140.277644][ T5729] usb 1-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 140.296237][ T201] usb 4-1: Using ep0 maxpacket: 16 [ 140.297413][ T201] usb 4-1: New USB device found: idVendor=28bd, idProduct=0071, bcdDevice=0.00 [ 140.310935][ T201] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.310971][ T201] usb 4-1: config 0 has no interface number 0 [ 140.311073][ T201] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.311098][ T201] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.311138][ T201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.380657][ T5729] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 140.392865][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.417432][ T5729] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 140.417459][ T5729] usb 1-1: Product: syz [ 140.417467][ T5729] usb 1-1: Manufacturer: syz [ 140.427100][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.541981][ T201] usb 4-1: config 0 descriptor?? [ 140.754640][ T5729] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 140.754753][ T5729] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 140.888852][ T5729] usb 1-1: USB disconnect, device number 4 [ 141.214877][ T201] uclogic 0003:28BD:0071.0003: pen parameters not found [ 141.214934][ T201] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 141.345009][ T5940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.345474][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 141.484578][ T5940] usb 5-1: device descriptor read/64, error -32 [ 141.492038][ T201] usb 4-1: USB disconnect, device number 4 [ 141.683750][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 141.683779][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.233'. [ 141.784618][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.948274][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 141.960089][ T5940] usb 5-1: New USB device found: idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 141.962005][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.962059][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 141.962085][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 141.962109][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 141.962130][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.037174][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 142.037211][ T5940] usb 5-1: Product: syz [ 142.037219][ T5940] usb 5-1: Manufacturer: syz [ 142.037227][ T5940] usb 5-1: SerialNumber: syz [ 142.083614][ T5940] usb 5-1: config 0 descriptor?? [ 142.340041][ T5940] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 142.340069][ T5940] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 142.543389][ T5940] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 142.543416][ T5940] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 142.543435][ T5940] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 142.726579][ T1003] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.749621][ T5940] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 142.749733][ T5940] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 142.750679][ T5940] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 142.751017][ T5940] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 142.818026][ T5940] usb 5-1: USB disconnect, device number 7 [ 142.924702][ T5777] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.949046][ T1003] usb 1-1: New USB device found: idVendor=172f, idProduct=0034, bcdDevice=0.00 [ 142.966676][ T1003] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.966718][ T1003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.042983][ T1003] usb 1-1: config 0 descriptor?? [ 143.088756][ T5777] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 143.094103][ T5777] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.094165][ T5777] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 143.094245][ T5777] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 143.094291][ T5777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.508496][ T1003] hid (null): unknown global tag 0xfd [ 143.707842][ T1003] waltop 0003:172F:0034.0004: unexpected long global item [ 143.708702][ T1003] waltop 0003:172F:0034.0004: probe with driver waltop failed with error -22 [ 143.761249][ T1003] usb 1-1: USB disconnect, device number 5 [ 143.803154][ T6479] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.828660][ T6481] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 143.938210][ T5777] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 143.938318][ T5777] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 143.963386][ T5777] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 143.963472][ T5777] ATM dev 0: poll status: error -71 [ 143.963587][ T5777] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 143.963625][ T5777] ATM dev 0: usbatm_submit_urb: urb 0xffff88802cf7b400 submission failed (-8)! [ 143.963993][ T5777] ATM dev 0: usbatm_submit_urb: urb 0xffff888032be5d00 submission failed (-8)! [ 143.964020][ T5777] ATM dev 0: usbatm_submit_urb: urb 0xffff888032be5700 submission failed (-8)! [ 143.964042][ T5777] ATM dev 0: usbatm_submit_urb: urb 0xffff888032be5500 submission failed (-8)! [ 144.068646][ C1] ATM dev 0: usbatm_submit_urb: urb 0xffff888032be5500 submission failed (-8)! [ 144.096541][ T5777] usb 4-1: USB disconnect, device number 5 [ 144.289568][ T6490] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               8[ 183.195508][ T201] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 183.346460][ T201] usb 2-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 183.350011][ T201] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 183.350029][ T201] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 183.354732][ T201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.355301][ T201] usb 2-1: Product: syz [ 183.355317][ T201] usb 2-1: Manufacturer: syz [ 183.355331][ T201] usb 2-1: SerialNumber: syz [ 183.415113][ T201] usb 2-1: config 0 descriptor?? [ 183.528899][ T201] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 183.705268][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.840056][ T1135] IPVS: starting estimator thread 0... [ 183.854597][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 183.858604][ T5940] usb 4-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 183.863524][ T5940] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 183.863554][ T5940] usb 4-1: config 0 has no interface number 0 [ 183.863602][ T5940] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 183.912917][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.912946][ T5940] usb 4-1: Product: syz [ 183.912960][ T5940] usb 4-1: Manufacturer: syz [ 183.912975][ T5940] usb 4-1: SerialNumber: syz syzkaller [ 183.955422][ T5940] usb 4-1: config 0 descriptor?? [ 183.966258][ T7351] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 183.984581][ T7363] IPVS: using max 11 ests per chain, 26400 per kthread [ 183.995058][ T5602] usb 5-1: new full-speed USB device number 10 using dummy_hcd syzkaller login: [ 184.179010][ T5602] usb 5-1: New USB device found: idVendor=17ef, idProduct=60ee, bcdDevice=0.00 [ 184.208570][ T5602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 184.208678][ T5602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.228172][ T7351] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 184.256977][ T5602] usb 5-1: config 0 descriptor?? [ 184.282412][ T7357] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 184.464743][ T5777] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.547298][ T201] gspca_sunplus: reg_r err -71 [ 184.547478][ T201] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 184.645634][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 184.649507][ T5777] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 184.733053][ T5777] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 184.733084][ T5777] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 184.733167][ T5777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 184.733219][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.733239][ T5777] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.733325][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 184.733366][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.755754][ T201] usb 2-1: USB disconnect, device number 12 [ 184.983169][ T5777] usb 1-1: config 0 descriptor?? [ 185.119386][ T5940] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 185.119426][ T5940] asix 4-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 185.119840][ T5940] asix 4-1:0.188: probe with driver asix failed with error -71 [ 185.296786][ T5940] usb 4-1: USB disconnect, device number 11 [ 185.405616][ T5777] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 185.504079][ T5602] lenovo 0003:17EF:60EE.0007: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.4-1/input0 [ 185.517955][ T5602] lenovo 0003:17EF:60EE.0007: Failed to switch middle button: -71 [ 185.521572][ T5602] lenovo 0003:17EF:60EE.0007: Fn-lock setting failed: -71 [ 185.522113][ T5602] lenovo 0003:17EF:60EE.0007: Sensitivity setting failed: -71 [ 185.577697][ T5602] usb 5-1: USB disconnect, device number 10 [ 185.617469][ T5926] usb 1-1: USB disconnect, device number 9 [ 185.861672][ T7372] fido_id[7372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 186.049873][ T5926] usblp0: removed [ 186.134675][ T5729] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.135044][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 186.264955][ T5729] usb 2-1: device descriptor read/64, error -32 [ 187.204656][ T5729] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.416757][ T5729] usb 2-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 187.422690][ T5729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.422844][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 187.422870][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 187.422895][ T5729] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 187.423037][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.531344][ T7374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.531471][ T7374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.557663][ T5729] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 187.591500][ T5729] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 187.591911][ T5729] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 187.665005][ T5729] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 187.696914][ T5729] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 187.697120][ T5729] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 187.814133][ T5729] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 188.045790][ T7401] batadv_slave_1: entered promiscuous mode [ 188.056536][ T7400] batadv_slave_1: left promiscuous mode [ 188.297242][ T7408] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'. [ 188.308857][ T5940] usb 2-1: USB disconnect, device number 14 [ 188.392691][ T5940] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 188.506019][ T5602] hid_parser_main: 502 callbacks suppressed [ 188.506043][ T5602] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 188.568377][ T5940] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 188.598066][ T5940] keyspan 2-1:1.0: device disconnected [ 188.614562][ T5777] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.694290][ T5602] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.775295][ T5777] usb 4-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 188.777754][ T5777] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 188.803911][ T5777] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 188.803942][ T5777] usb 4-1: Product: syz [ 188.803956][ T5777] usb 4-1: Manufacturer: syz [ 188.949898][ T5777] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 188.949972][ T5777] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 189.166577][ T5602] usb 4-1: USB disconnect, device number 12 [ 189.658346][ T7424] nvme_fabrics: missing parameter 'transport=%s' [ 189.662980][ T7424] nvme_fabrics: missing parameter 'nqn=%s' [ 189.875246][ T5940] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 190.076200][ T5940] usb 5-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00 [ 190.082120][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.099169][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.099197][ T5940] usb 5-1: Product: syz [ 190.099210][ T5940] usb 5-1: Manufacturer: syz [ 190.099223][ T5940] usb 5-1: SerialNumber: syz [ 190.885203][ T5940] speedtch 5-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 191.092863][ T5940] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 191.306520][ T5940] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-71)! [ 191.307448][ T5940] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -71! [ 191.307500][ T5940] speedtch 5-1:1.1: probe with driver speedtch failed with error -71 [ 191.355701][ T5940] usb 5-1: USB disconnect, device number 11 [ 191.604566][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 191.807156][ T7463] FAULT_INJECTION: forcing a failure. [ 191.807156][ T7463] name failslab, interval 1, probability 0, space 0, times 0 [ 191.807192][ T7463] CPU: 1 UID: 0 PID: 7463 Comm: syz.3.638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.807216][ T7463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.807227][ T7463] Call Trace: [ 191.807241][ T7463] [ 191.807249][ T7463] dump_stack_lvl+0xe8/0x150 [ 191.807289][ T7463] should_fail_ex+0x447/0x5e0 [ 191.807317][ T7463] should_failslab+0xa8/0x100 [ 191.807343][ T7463] __kmalloc_cache_noprof+0x9c/0x670 [ 191.807362][ T7463] ? rt_spin_unlock+0x165/0x200 [ 191.807389][ T7463] ? snd_ctl_open+0xe9/0x430 [ 191.807411][ T7463] ? snd_ctl_open+0xe9/0x430 [ 191.807433][ T7463] ? snd_card_file_add+0x20e/0x250 [ 191.807457][ T7463] snd_ctl_open+0xe9/0x430 [ 191.807483][ T7463] chrdev_open+0x4dc/0x600 [ 191.807508][ T7463] ? __pfx_chrdev_open+0x10/0x10 [ 191.807527][ T7463] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 191.807552][ T7463] ? __pfx_chrdev_open+0x10/0x10 [ 191.807572][ T7463] do_dentry_open+0x841/0x1410 [ 191.807607][ T7463] vfs_open_consume+0x4a/0x360 [ 191.807628][ T7463] ? path_openat+0x16e6/0x2100 [ 191.807649][ T7463] path_openat+0x1701/0x2100 [ 191.807686][ T7463] do_file_open+0x23e/0x4a0 [ 191.807702][ T7463] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 191.807727][ T7463] ? __pfx_do_file_open+0x10/0x10 [ 191.807766][ T7463] ? alloc_fd+0x6b2/0x760 [ 191.807797][ T7463] do_sys_openat2+0x115/0x200 [ 191.807824][ T7463] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.807855][ T7463] ? do_user_addr_fault+0xd3f/0x1480 [ 191.807883][ T7463] __x64_sys_openat+0x138/0x170 [ 191.807919][ T7463] do_syscall_64+0x166/0x520 [ 191.807939][ T7463] ? trace_irq_disable+0x3b/0x140 [ 191.807958][ T7463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.807975][ T7463] ? clear_bhb_loop+0x70/0xc0 [ 191.807995][ T7463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.808012][ T7463] RIP: 0033:0x7f6c07fcfd8e [ 191.808031][ T7463] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 191.808050][ T7463] RSP: 002b:00007f6c0625db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.808072][ T7463] RAX: ffffffffffffffda RBX: 00007f6c0625e6c0 RCX: 00007f6c07fcfd8e [ 191.808086][ T7463] RDX: 0000000000000000 RSI: 00007f6c0625dc00 RDI: ffffffffffffff9c [ 191.808100][ T7463] RBP: 00007f6c0625dc00 R08: 0000000000000000 R09: 0000000000000000 [ 191.808113][ T7463] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 191.808125][ T7463] R13: 00007f6c08296038 R14: 00007f6c08295fa0 R15: 00007ffc959edc68 [ 191.808153][ T7463] [ 192.910948][ T7489] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 193.298665][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 193.562990][ T7514] netlink: 64 bytes leftover after parsing attributes in process `syz.1.658'. [ 193.636947][ T7511] syz.2.655 (7511) used greatest stack depth: 18232 bytes left [ 193.768529][ T5819] iguanair 3-1:0.0: failed to get version [ 193.769121][ T5819] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 193.838764][ T7524] FAULT_INJECTION: forcing a failure. [ 193.838764][ T7524] name failslab, interval 1, probability 0, space 0, times 0 [ 193.838801][ T7524] CPU: 0 UID: 0 PID: 7524 Comm: syz.2.660 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.838825][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.838835][ T7524] Call Trace: [ 193.838842][ T7524] [ 193.838851][ T7524] dump_stack_lvl+0xe8/0x150 [ 193.838890][ T7524] should_fail_ex+0x447/0x5e0 [ 193.838920][ T7524] should_failslab+0xa8/0x100 [ 193.838946][ T7524] ? posix_lock_inode+0x356/0x3e80 [ 193.838978][ T7524] kmem_cache_alloc_noprof+0x99/0x680 [ 193.839007][ T7524] ? posix_lock_inode+0x356/0x3e80 [ 193.839034][ T7524] ? __init_waitqueue_head+0xad/0x160 [ 193.839062][ T7524] posix_lock_inode+0x356/0x3e80 [ 193.839087][ T7524] ? smk_tskacc+0x2f6/0x370 [ 193.839128][ T7524] ? __pfx_posix_lock_inode+0x10/0x10 [ 193.839155][ T7524] ? __rt_spin_lock_init+0x3e/0x50 [ 193.839186][ T7524] fcntl_setlk+0x9a6/0x1070 [ 193.839233][ T7524] ? __pfx_fcntl_setlk+0x10/0x10 [ 193.839270][ T7524] do_fcntl+0x9b5/0x1a40 [ 193.839294][ T7524] ? smack_file_fcntl+0x152/0x320 [ 193.839319][ T7524] ? __pfx_do_fcntl+0x10/0x10 [ 193.839338][ T7524] ? __pfx_smack_file_fcntl+0x10/0x10 [ 193.839380][ T7524] ? __fget_files+0x2a/0x420 [ 193.839411][ T7524] ? bpf_lsm_file_fcntl+0x9/0x20 [ 193.839433][ T7524] __se_sys_fcntl+0xcb/0x160 [ 193.839460][ T7524] do_syscall_64+0x166/0x520 [ 193.839479][ T7524] ? trace_irq_disable+0x3b/0x140 [ 193.839497][ T7524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.839514][ T7524] ? clear_bhb_loop+0x70/0xc0 [ 193.839535][ T7524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.839551][ T7524] RIP: 0033:0x7fa1b584f559 [ 193.839569][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.839584][ T7524] RSP: 002b:00007fa1b3aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 193.839603][ T7524] RAX: ffffffffffffffda RBX: 00007fa1b5ad5fa0 RCX: 00007fa1b584f559 [ 193.839616][ T7524] RDX: 0000200000000d80 RSI: 0000000000000026 RDI: 0000000000000003 [ 193.839628][ T7524] RBP: 00007fa1b58e6b50 R08: 0000000000000000 R09: 0000000000000000 [ 193.839638][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.839648][ T7524] R13: 00007fa1b5ad6038 R14: 00007fa1b5ad5fa0 R15: 00007ffe16755cb8 [ 193.839674][ T7524] [ 193.890058][ T5819] usb 3-1: USB disconnect, device number 6 [ 194.579507][ T7537] netlink: 964 bytes leftover after parsing attributes in process `syz.3.666'. [ 195.051134][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.051201][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.172773][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172811][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172836][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172862][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172887][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172912][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172937][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172962][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.172986][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.173011][ T5973] hid-generic 0005:07C0:0005.0009: unknown main item tag 0x0 [ 195.173112][ T5973] hid-generic 0005:07C0:0005.0009: item fetching failed at offset 16/32 [ 195.205328][ T5973] hid-generic 0005:07C0:0005.0009: probe with driver hid-generic failed with error -22 [ 195.441292][ T7565] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 195.574591][ T5926] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.655899][ T7568] FAULT_INJECTION: forcing a failure. [ 195.655899][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.655928][ T7568] CPU: 1 UID: 0 PID: 7568 Comm: syz.1.680 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.655948][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 195.655962][ T7568] Call Trace: [ 195.655970][ T7568] [ 195.655980][ T7568] dump_stack_lvl+0xe8/0x150 [ 195.656021][ T7568] should_fail_ex+0x447/0x5e0 [ 195.656052][ T7568] _copy_to_user+0x31/0xb0 [ 195.656077][ T7568] bpf_verifier_vlog+0x3a2/0x900 [ 195.656120][ T7568] btf_verifier_log+0x11d/0x1a0 [ 195.656155][ T7568] ? __pfx_btf_verifier_log+0x10/0x10 [ 195.656183][ T7568] ? __btf_verifier_log+0xe2/0x140 [ 195.656216][ T7568] ? __pfx___btf_verifier_log+0x10/0x10 [ 195.656249][ T7568] btf_func_proto_log+0x76/0x840 [ 195.656282][ T7568] __btf_verifier_log_type+0x45d/0x6a0 [ 195.656320][ T7568] ? btf_parse_type_sec+0x1b6/0x1a60 [ 195.656344][ T7568] ? trace_kmalloc+0x2a/0xf0 [ 195.656376][ T7568] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 195.656405][ T7568] ? btf_parse_type_sec+0x1b6/0x1a60 [ 195.656434][ T7568] ? btf_parse_type_sec+0x1b6/0x1a60 [ 195.656463][ T7568] btf_parse_type_sec+0x18a7/0x1a60 [ 195.656505][ T7568] btf_new_fd+0x3e0/0x8f0 [ 195.656534][ T7568] __sys_bpf+0xda7/0xe00 [ 195.656572][ T7568] ? __pfx___sys_bpf+0x10/0x10 [ 195.656598][ T7568] ? do_futex+0x3e7/0x4e0 [ 195.656649][ T7568] ? rcu_is_watching+0x16/0xb0 [ 195.656680][ T7568] __x64_sys_bpf+0xba/0xd0 [ 195.656706][ T7568] do_syscall_64+0x166/0x520 [ 195.656728][ T7568] ? trace_irq_disable+0x3b/0x140 [ 195.656751][ T7568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.656773][ T7568] ? clear_bhb_loop+0x70/0xc0 [ 195.656798][ T7568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.656819][ T7568] RIP: 0033:0x7fc87b29f559 [ 195.656839][ T7568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.656871][ T7568] RSP: 002b:00007fc8794ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 195.656892][ T7568] RAX: ffffffffffffffda RBX: 00007fc87b525fa0 RCX: 00007fc87b29f559 [ 195.656905][ T7568] RDX: 0000000000000028 RSI: 0000200000000040 RDI: 0000000000000012 [ 195.656917][ T7568] RBP: 00007fc87b336b50 R08: 0000000000000000 R09: 0000000000000000 [ 195.656930][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.656943][ T7568] R13: 00007fc87b526038 R14: 00007fc87b525fa0 R15: 00007ffd5d21d598 [ 195.656975][ T7568] [ 195.735337][ T5926] usb 1-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 195.778931][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.778960][ T5926] usb 1-1: Product: syz [ 195.779027][ T5926] usb 1-1: Manufacturer: syz [ 195.779041][ T5926] usb 1-1: SerialNumber: syz [ 195.795848][ T5926] usb 1-1: config 0 descriptor?? [ 196.214547][ T5926] usb 1-1: Firmware: major: 63, minor: 28, hardware type: UNKNOWN (21) [ 196.422414][ T5926] usb 1-1: no permanent extended address found, random address set [ 196.422446][ T5926] usb 1-1: atusb_probe: initialization failed, error = -524 [ 196.423095][ T5926] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 196.645104][ T5940] usb 1-1: USB disconnect, device number 10 [ 196.984506][ T5819] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 197.138613][ T5819] usb 2-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 197.171572][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.171602][ T5819] usb 2-1: Product: syz [ 197.171617][ T5819] usb 2-1: Manufacturer: syz [ 197.171630][ T5819] usb 2-1: SerialNumber: syz [ 197.334630][ T5729] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 197.375913][ T5604] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.489531][ T5729] usb 3-1: Using ep0 maxpacket: 8 [ 197.496217][ T5729] usb 3-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 197.517706][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 197.517740][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 197.517765][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 197.521625][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.521652][ T5729] usb 3-1: Product: syz [ 197.521667][ T5729] usb 3-1: Manufacturer: syz [ 197.521680][ T5729] usb 3-1: SerialNumber: syz [ 197.524735][ T5604] usb 4-1: Using ep0 maxpacket: 8 [ 197.527755][ T5604] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.602163][ T5604] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 197.602232][ T5604] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.602255][ T5604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.602278][ T5604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.602302][ T5604] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.602344][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.613979][ T5729] usb 3-1: config 0 descriptor?? [ 197.681801][ T7603] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 197.808784][ T5729] rc_core: IR keymap rc-streamzap not found [ 197.808806][ T5729] Registered IR keymap rc-empty [ 197.885236][ T5819] rtl8150 2-1:1.0: couldn't reset the device [ 197.885628][ T5819] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 197.949602][ T5729] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 197.962632][ T5819] usb 2-1: USB disconnect, device number 15 [ 198.002507][ T5729] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 198.497650][ T7623] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 198.499283][ T5940] usb 4-1: USB disconnect, device number 13 [ 198.645136][ T5819] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 198.694850][ T5729] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 198.804637][ T5819] usb 2-1: Using ep0 maxpacket: 8 [ 198.805718][ T5819] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.835199][ T5819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.835344][ T5819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.862000][ T5819] usb 2-1: config 0 descriptor?? [ 198.982070][ T7632] netlink: 104 bytes leftover after parsing attributes in process `syz.0.700'. [ 198.992656][ T5729] usb 5-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 199.013563][ T5729] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.013615][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.227286][ T5819] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.287881][ T5729] as10x_usb: device has been detected [ 199.296867][ T5729] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 199.546651][ T5940] usb 2-1: USB disconnect, device number 16 [ 199.662572][ T7638] FAULT_INJECTION: forcing a failure. [ 199.662572][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 199.662607][ T7638] CPU: 1 UID: 0 PID: 7638 Comm: syz.3.702 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.662630][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 199.662643][ T7638] Call Trace: [ 199.662650][ T7638] [ 199.662659][ T7638] dump_stack_lvl+0xe8/0x150 [ 199.662698][ T7638] should_fail_ex+0x447/0x5e0 [ 199.662727][ T7638] should_failslab+0xa8/0x100 [ 199.662753][ T7638] kmem_cache_alloc_node_noprof+0xa7/0x660 [ 199.662784][ T7638] ? __alloc_skb+0x1db/0x7a0 [ 199.662809][ T7638] ? __alloc_skb+0x1db/0x7a0 [ 199.662844][ T7638] __alloc_skb+0x1db/0x7a0 [ 199.662875][ T7638] __pfkey_xfrm_state2msg+0x42e/0x3cb0 [ 199.662923][ T7638] pfkey_send_notify+0x1aa/0xde0 [ 199.662949][ T7638] ? km_state_notify+0x101/0x1f0 [ 199.662971][ T7638] ? km_state_notify+0x25/0x1f0 [ 199.662992][ T7638] ? __pfx_pfkey_send_notify+0x10/0x10 [ 199.663030][ T7638] km_state_notify+0x110/0x1f0 [ 199.663059][ T7638] pfkey_add+0x204b/0x2e50 [ 199.663097][ T7638] ? __pfx_pfkey_add+0x10/0x10 [ 199.663131][ T7638] pfkey_sendmsg+0xceb/0x11d0 [ 199.663173][ T7638] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 199.663198][ T7638] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 199.663252][ T7638] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 199.663291][ T7638] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 199.663318][ T7638] sock_sendmsg_nosec+0x14e/0x190 [ 199.663345][ T7638] ____sys_sendmsg+0x565/0x870 [ 199.663374][ T7638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.663404][ T7638] ? import_iovec+0x73/0xa0 [ 199.663432][ T7638] ___sys_sendmsg+0x2a5/0x360 [ 199.663450][ T7638] ? __lock_acquire+0x747/0x2de0 [ 199.663483][ T7638] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.663506][ T7638] ? futex_wait+0x2a2/0x390 [ 199.663567][ T7638] ? __fget_files+0x3a8/0x420 [ 199.663592][ T7638] ? __fget_files+0x2a/0x420 [ 199.663627][ T7638] __x64_sys_sendmsg+0x1b7/0x290 [ 199.663650][ T7638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.663692][ T7638] do_syscall_64+0x166/0x520 [ 199.663714][ T7638] ? trace_irq_disable+0x3b/0x140 [ 199.663734][ T7638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.663754][ T7638] ? clear_bhb_loop+0x70/0xc0 [ 199.663778][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.663798][ T7638] RIP: 0033:0x7f6c0800f559 [ 199.663816][ T7638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.663834][ T7638] RSP: 002b:00007f6c0625e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.663857][ T7638] RAX: ffffffffffffffda RBX: 00007f6c08295fa0 RCX: 00007f6c0800f559 [ 199.663872][ T7638] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 199.663885][ T7638] RBP: 00007f6c080a6b50 R08: 0000000000000000 R09: 0000000000000000 [ 199.663898][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.663911][ T7638] R13: 00007f6c08296038 R14: 00007f6c08295fa0 R15: 00007ffc959edc68 [ 199.663945][ T7638] [ 200.190233][ T5729] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 200.213690][ T5973] usb 3-1: USB disconnect, device number 7 [ 200.429893][ T7650] INFO: trying to register non-static key. [ 200.436350][ T7650] The code is fine but needs lockdep annotation, or maybe [ 200.444554][ T7650] you didn't initialize this object before use? [ 200.451413][ T7650] turning off the locking correctness validator. [ 200.459141][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.4.697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.469816][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.481314][ T7650] Call Trace: [ 200.484963][ T7650] [ 200.488202][ T7650] dump_stack_lvl+0xe8/0x150 [ 200.493686][ T7650] assign_lock_key+0x133/0x150 [ 200.499447][ T7650] register_lock_class+0xcc/0x2e0 [ 200.505482][ T7650] ? __lock_acquire+0x747/0x2de0 [ 200.511233][ T7650] __lock_acquire+0x10c/0x2de0 [ 200.516546][ T7650] ? __lock_acquire+0x747/0x2de0 [ 200.522007][ T7650] ? __lock_acquire+0x747/0x2de0 [ 200.527954][ T7650] lock_acquire+0x115/0x350 [ 200.533143][ T7650] ? as102_stream_ctrl+0x27/0xc0 [ 200.539167][ T7650] ? as102_stream_ctrl+0x27/0xc0 [ 200.545020][ T7650] ? as102_stream_ctrl+0x27/0xc0 [ 200.551009][ T7650] mutex_lock_interruptible_nested+0x55/0x1c0 [ 200.557703][ T7650] ? as102_stream_ctrl+0x27/0xc0 [ 200.563163][ T7650] as102_stream_ctrl+0x27/0xc0 [ 200.568410][ T7650] __dvb_frontend_open+0x2ef/0xcb0 [ 200.574042][ T7650] ? dvb_frontend_open+0x1d4/0x880 [ 200.579682][ T7650] ? mutex_lock_nested+0x14d/0x1d0 [ 200.585321][ T7650] ? __pfx_dvb_frontend_open+0x10/0x10 [ 200.591432][ T7650] dvb_device_open+0x258/0x350 [ 200.596689][ T7650] chrdev_open+0x4dc/0x600 [ 200.601570][ T7650] ? __pfx_chrdev_open+0x10/0x10 [ 200.607024][ T7650] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 200.614016][ T7650] ? __pfx_chrdev_open+0x10/0x10 [ 200.619467][ T7650] do_dentry_open+0x841/0x1410 [ 200.624740][ T7650] vfs_open_consume+0x4a/0x360 [ 200.629996][ T7650] ? path_openat+0x16e6/0x2100 [ 200.635251][ T7650] path_openat+0x1701/0x2100 [ 200.640322][ T7650] do_file_open+0x23e/0x4a0 [ 200.645280][ T7650] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.651689][ T7650] ? __pfx_do_file_open+0x10/0x10 [ 200.657234][ T7650] ? alloc_fd+0x6b2/0x760 [ 200.662030][ T7650] do_sys_openat2+0x115/0x200 [ 200.667196][ T7650] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.673028][ T7650] __x64_sys_openat+0x138/0x170 [ 200.678485][ T7650] do_syscall_64+0x166/0x520 [ 200.683562][ T7650] ? trace_irq_disable+0x3b/0x140 [ 200.689115][ T7650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.695874][ T7650] ? clear_bhb_loop+0x70/0xc0 [ 200.701057][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.707561][ T7650] RIP: 0033:0x7f2efbd0fd8e [ 200.712434][ T7650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.734014][ T7650] RSP: 002b:00007f2ef9b40b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.743277][ T7650] RAX: ffffffffffffffda RBX: 00007f2ef9b416c0 RCX: 00007f2efbd0fd8e [ 200.752070][ T7650] RDX: 0000000000000802 RSI: 00007f2ef9b40c00 RDI: ffffffffffffff9c [ 200.760865][ T7650] RBP: 00007f2ef9b40c00 R08: 0000000000000000 R09: 0000000000000000 [ 200.769647][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 200.778426][ T7650] R13: 00007f2efbfd6308 R14: 00007f2efbfd6270 R15: 00007fffeee6ce58 [ 200.787208][ T7650] [ 200.792850][ T5940] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.839799][ T5729] as10x_usb: error during firmware upload part1 [ 200.840219][ T5729] Registered device Abilis Systems DVB-Titan [ 200.934883][ T7657] Invalid ELF header magic: != ELF [ 200.954445][ T5940] usb 2-1: Using ep0 maxpacket: 16 [ 200.955388][ T5940] usb 2-1: New USB device found: idVendor=056a, idProduct=0059, bcdDevice=0.00 [ 200.956333][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.956364][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.959607][ T5940] usb 2-1: config 0 descriptor?? [ 201.041802][ T5973] usb 5-1: USB disconnect, device number 12 [ 201.059556][ T5973] Unregistered device Abilis Systems DVB-Titan [ 201.062178][ T5973] as10x_usb: device has been disconnected [ 201.168084][ T5940] usbhid 2-1:0.0: can't add hid device: -71 [ 201.168174][ T5940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 201.171393][ T5940] usb 2-1: USB disconnect, device number 17