last executing test programs: 3m13.426565105s ago: executing program 4 (id=263): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m13.094917697s ago: executing program 4 (id=266): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000280)=0x264, 0x23b) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000740), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 3m12.605105383s ago: executing program 4 (id=268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002980)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000029c0)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_tracing={0x1a, 0x2, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1df9f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002a40)={r1, 0x0, 0x0}, 0x20) 3m12.286698341s ago: executing program 4 (id=269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x34000, 0x0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xff00, 0x0, 0x54, 0x4, 0x73}, 0x9c) 3m11.555071196s ago: executing program 4 (id=273): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x101002, 0x0) write(r0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000540)=r1, 0x12) fsetxattr$trusted_overlay_redirect(r0, 0x0, &(0x7f0000000040)='./sys\x00', 0x6, 0x3) 3m11.163993011s ago: executing program 4 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000019300)={0x8000000000000002, 0x4, 0x100000001, 0x3, 0x22, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 2m55.701149505s ago: executing program 32 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000019300)={0x8000000000000002, 0x4, 0x100000001, 0x3, 0x22, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 17.993873213s ago: executing program 5 (id=2576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x3004c8b9}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xb}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c080) 17.451068884s ago: executing program 3 (id=2584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000072000000"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x6b, 0x2f, &(0x7f0000000a80)="c1188e99141d4d29420f858986dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.382865733s ago: executing program 2 (id=2586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000680)) 17.310050211s ago: executing program 3 (id=2587): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000004000000", @ANYRES32], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'erspan0\x00', @random='\x00\x00\x00\x00\x00 '}) 17.307994766s ago: executing program 5 (id=2588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 17.211085427s ago: executing program 0 (id=2589): syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) 17.204453069s ago: executing program 2 (id=2590): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x1, 0x70bd27, 0x25dfdbff, {{'cbc-serpent-avx2\x00'}, '\x00', '\x00', 0x600, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) 17.193637466s ago: executing program 3 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) 17.159880026s ago: executing program 1 (id=2592): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80402, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x3ff, 0x1, 0xfffffffe, 0xfff, 0x4001000, 0xfffffffd, 0x20000004, 0x2, 0xa, 0x800, 0x6, 0x5, 0xffffffff, 0x9, 0xffffffff, 0xfffffff8, 0x10009, 0xfe9, 0x6, 0xa, 0x5, 0x8004, 0x9, 0x44, 0x4, 0x7d, 0x0, 0x7e, 0x5, 0x1]}) r1 = openat$comedi(0xffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x183000, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000200)={0x2000000, 0x0, 0x0, 0xfffffff9, 0x10001}) 17.148009011s ago: executing program 0 (id=2593): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000240)={0x0, 0x2, "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"}) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./debug\x00', &(0x7f0000000840)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./debug/dynamic_debug/control\x00', 0x2, 0xc0) write(r1, &(0x7f00000008c0)='+p', 0x2) mount$overlay(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x8, &(0x7f00000009c0)) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x3, 0x4a243) 17.063321482s ago: executing program 5 (id=2594): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x2f, 0xb, 0x0, &(0x7f0000000c80)="e0b9547ed387dbe9abc89b", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.046677306s ago: executing program 2 (id=2595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000680)={0x6c, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {0x6}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0xff3}}, 0x0, @random=0x7ff, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x6c}}, 0x0) 17.035600097s ago: executing program 3 (id=2596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x3, 0x5, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r0, 0x0, 0x6, 0x8, &(0x7f0000001100)='\x00\x00\x00\x00\x00\x00', &(0x7f0000001140)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.93915454s ago: executing program 1 (id=2597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000072000000"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x6b, 0x2f, &(0x7f0000000a80)="c1188e99141d4d29420f858986dd", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.938958913s ago: executing program 3 (id=2598): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000ff0f000085200000d948"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 16.913013931s ago: executing program 2 (id=2599): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0) 16.892768673s ago: executing program 5 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmsg(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000e80)=""/259, 0x103}, {&(0x7f00000024c0)=""/4105, 0x1009}, {&(0x7f0000003500)=""/114, 0x72}, {&(0x7f0000003580)=""/4094, 0xffe}, {&(0x7f0000004580)=""/196, 0xc4}, {&(0x7f0000004680)=""/119, 0x77}, {&(0x7f0000004700)=""/107, 0x6b}, {&(0x7f0000004780)=""/4084, 0xff4}, {&(0x7f00000057c0)=""/246, 0xf6}, {&(0x7f00000058c0)=""/142, 0x8e}, {&(0x7f0000005980)=""/24, 0x18}, {&(0x7f00000059c0)=""/55, 0x37}, {&(0x7f0000000000)=""/214, 0xd6}], 0xd}, 0x40000180) 16.843134838s ago: executing program 1 (id=2601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d40)=@newqdisc={0x160, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x130, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xffff, 0xa, 0x41e8, 0x3, 0x3, 0x20, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x4c, 0x1, {0xfffffffb, 0x1, 0x9, 0xe, 0x11, 0xf, 0x1}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000101}, 0x0) 16.833716087s ago: executing program 3 (id=2602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f00)={'vxcan1\x00', 0x0}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) bind$can_j1939(r1, &(0x7f0000000f80)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000fc0)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000001040)=[{&(0x7f0000001080)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 16.796483613s ago: executing program 2 (id=2603): syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @empty, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@private}, {@broadcast}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) 16.767825974s ago: executing program 1 (id=2604): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000040)={0x7, 0x9, 0x380000, 0x8, 0x5, 0xfffffffffffffff7, 0x1000000d, 0x0, 0xae, 0x6, 0x7, 0x0, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x102, 0x4, 0x2, 0x5, 0x3, 0x3ff, 0x8}) clock_adjtime(0x0, &(0x7f00000004c0)={0x6, 0x7, 0x6, 0x195, 0x1, 0x9, 0x4, 0xe7, 0x72a, 0x80000001, 0x400, 0x7, 0x1a, 0xaed8, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x6, 0x0, 0x8, 0x9, 0xfffffffffffff800}) 16.679188687s ago: executing program 2 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 16.480782583s ago: executing program 0 (id=2606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4c8d0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESOCT], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4000050) 16.420749064s ago: executing program 0 (id=2607): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000240)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000280)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f00000002c0)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000300)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, 0x0, 0x0, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x1e800c) pwrite64(r0, &(0x7f00000004c0)='\x00\x00\x00\x00', 0x4, 0x1e8123) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 16.32299958s ago: executing program 0 (id=2608): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019ac0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 16.307314787s ago: executing program 0 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000680)={0x6c, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {0x6}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0xff3}}, 0x0, @random=0x7ff, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x6c}}, 0x0) 15.980938401s ago: executing program 5 (id=2610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x2f, 0xb, 0x0, &(0x7f0000000c80)="e0b9547ed387dbe9abc89b", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.863135612s ago: executing program 5 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff8}]}}]}, 0x60}}, 0x20008000) 15.723977173s ago: executing program 1 (id=2612): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000ff0f000085200000d948"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 15.660487766s ago: executing program 1 (id=2613): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0) 1.410622445s ago: executing program 33 (id=2605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) 1.32347923s ago: executing program 34 (id=2602): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000f00)={'vxcan1\x00', 0x0}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) bind$can_j1939(r1, &(0x7f0000000f80)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000fc0)=0x1, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0xff}}, 0x18) sendmmsg(r1, &(0x7f0000001000)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000001040)=[{&(0x7f0000001080)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xf, 0xa}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 673.641923ms ago: executing program 35 (id=2609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000680)={0x6c, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {0x6}, @device_b, @device_b, @from_mac=@device_b, {0x0, 0xff3}}, 0x0, @random=0x7ff, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x3}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x6c}}, 0x0) 256.155204ms ago: executing program 36 (id=2613): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x400c0c0) 0s ago: executing program 37 (id=2611): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff8}]}}]}, 0x60}}, 0x20008000) kernel console output (not intermixed with test programs): pan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 144.693105][ T1001] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 144.719863][ T1001] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 144.901688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.197755][ T5734] usb 4-1: USB disconnect, device number 3 [ 145.213010][ T5734] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 145.221803][ T1001] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.269034][ T5734] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 145.278192][ T5734] keyspan 4-1:1.0: device disconnected [ 145.433159][ T1001] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 145.458750][ T1001] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 145.458778][ T1001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.458795][ T1001] usb 2-1: config 0 has no interface number 0 [ 145.458838][ T1001] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 145.458859][ T1001] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.576117][ T1001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.576134][ T1001] usb 2-1: Product: syz [ 145.576141][ T1001] usb 2-1: Manufacturer: syz [ 145.576148][ T1001] usb 2-1: SerialNumber: syz [ 145.626867][ T1001] usb 2-1: config 0 descriptor?? [ 145.656730][ T6540] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 145.698171][ T1001] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 145.734762][ T1001] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 145.753553][ T1001] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 146.154541][ T198] usb 2-1: USB disconnect, device number 5 [ 146.211276][ T6563] ptp ptp0: max value is 20 [ 146.284811][ T198] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 146.285629][ T198] cyberjack 2-1:0.69: device disconnected [ 147.493042][ T198] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 147.624476][ T198] usb 1-1: device descriptor read/64, error -71 [ 147.863254][ T198] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.991790][ T198] usb 1-1: device descriptor read/64, error -71 [ 148.102119][ T198] usb usb1-port1: attempt power cycle [ 148.484626][ T198] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.512843][ T198] usb 1-1: device descriptor read/8, error -71 [ 148.562232][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 148.676571][ T6619] 9pnet_virtio: no channels available for device syz [ 148.751828][ T198] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.776036][ T198] usb 1-1: device descriptor read/8, error -71 [ 148.882623][ T198] usb usb1-port1: unable to enumerate USB device [ 148.959723][ T6613] bond0: (slave bond_slave_0): Releasing backup interface [ 149.401766][ T198] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.552527][ T198] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 149.553755][ T198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.553803][ T198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.553823][ T198] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 149.553844][ T198] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.558548][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.558573][ T198] usb 4-1: Product: syz [ 149.558586][ T198] usb 4-1: Manufacturer: syz [ 149.558599][ T198] usb 4-1: SerialNumber: syz [ 149.692562][ T198] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 149.692587][ T198] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 149.692630][ T198] usbserial_generic 4-1:1.0: generic converter detected [ 149.749153][ T198] usb 4-1: generic converter now attached to ttyUSB0 [ 149.898567][ T198] usb 4-1: USB disconnect, device number 4 [ 149.928158][ T198] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 149.930408][ T198] usbserial_generic 4-1:1.0: device disconnected [ 151.652637][ T198] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 151.782591][ T198] usb 3-1: device descriptor read/64, error -71 [ 152.021763][ T198] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 152.221837][ T198] usb 3-1: device descriptor read/64, error -71 [ 152.378982][ T198] usb usb3-port1: attempt power cycle [ 152.712097][ T198] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.732643][ T198] usb 3-1: device descriptor read/8, error -71 [ 152.938954][ T1001] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 152.971781][ T198] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.992983][ T198] usb 3-1: device descriptor read/8, error -71 [ 153.102199][ T198] usb usb3-port1: unable to enumerate USB device [ 153.122647][ T1001] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 153.123973][ T1001] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.124023][ T1001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.124044][ T1001] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 153.124065][ T1001] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.172655][ T1001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.172680][ T1001] usb 4-1: Product: syz [ 153.172693][ T1001] usb 4-1: Manufacturer: syz [ 153.172706][ T1001] usb 4-1: SerialNumber: syz [ 153.226169][ T1001] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 153.226193][ T1001] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 153.226234][ T1001] usbserial_generic 4-1:1.0: generic converter detected [ 153.320637][ T1001] usb 4-1: generic converter now attached to ttyUSB0 [ 153.433563][ T1001] usb 4-1: USB disconnect, device number 5 [ 153.553104][ T1001] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 153.556059][ T1001] usbserial_generic 4-1:1.0: device disconnected [ 155.221856][ T1001] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 155.382680][ T1001] usb 3-1: Using ep0 maxpacket: 8 [ 155.383552][ T1001] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 155.384924][ T1001] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.384943][ T1001] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.387794][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.387814][ T1001] usb 3-1: Product: syz [ 155.387826][ T1001] usb 3-1: Manufacturer: syz [ 155.387838][ T1001] usb 3-1: SerialNumber: syz [ 155.592475][ T198] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 155.631810][ T5317] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.718837][ T1001] usb 3-1: 1:1 : bogus bTerminalLink 7 [ 155.743172][ T198] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.743229][ T198] usb 1-1: no configurations [ 155.743241][ T198] usb 1-1: can't read configurations, error -22 [ 155.771551][ T1001] usb 3-1: 0:2 : does not exist [ 155.772147][ T1001] usb 3-1: unit 119 not found! [ 155.814315][ T5317] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 155.816160][ T5317] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.816210][ T5317] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.816230][ T5317] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 155.816251][ T5317] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.859541][ T5317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.859568][ T5317] usb 2-1: Product: syz [ 155.859581][ T5317] usb 2-1: Manufacturer: syz [ 155.859594][ T5317] usb 2-1: SerialNumber: syz [ 155.899616][ T198] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.927129][ T5317] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 155.927154][ T5317] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 155.927196][ T5317] usbserial_generic 2-1:1.0: generic converter detected [ 155.937736][ T5317] usb 2-1: generic converter now attached to ttyUSB0 [ 156.052555][ T198] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.052606][ T198] usb 1-1: no configurations [ 156.052616][ T198] usb 1-1: can't read configurations, error -22 [ 156.053012][ T198] usb usb1-port1: attempt power cycle [ 156.108863][ T1001] usb 3-1: USB disconnect, device number 18 [ 156.205087][ T5317] usb 2-1: USB disconnect, device number 6 [ 156.393510][ T198] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 156.396918][ T5317] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 156.397706][ T5317] usbserial_generic 2-1:1.0: device disconnected [ 156.425780][ T198] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.425839][ T198] usb 1-1: no configurations [ 156.425851][ T198] usb 1-1: can't read configurations, error -22 [ 156.524449][ T5588] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 156.551775][ T198] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 156.573090][ T198] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.573139][ T198] usb 1-1: no configurations [ 156.573151][ T198] usb 1-1: can't read configurations, error -22 [ 156.573462][ T198] usb usb1-port1: unable to enumerate USB device [ 156.840951][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.156442][ T6771] jffs2: notice: (6771) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 157.211760][ T198] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.361731][ T198] usb 2-1: Using ep0 maxpacket: 16 [ 157.362805][ T198] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 157.390540][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.390567][ T198] usb 2-1: Product: syz [ 157.390580][ T198] usb 2-1: Manufacturer: syz [ 157.390594][ T198] usb 2-1: SerialNumber: syz [ 157.445634][ T198] usb 2-1: config 0 descriptor?? [ 157.515089][ T198] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 157.779220][ T6780] loop6: detected capacity change from 0 to 1 [ 157.882474][ T198] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 157.882642][ T198] visor 2-1:0.0: probe with driver visor failed with error -5 [ 157.924669][ T6780] Dev loop6: unable to read RDB block 1 [ 157.924757][ T6780] loop6: unable to read partition table [ 157.924887][ T6780] loop6: partition table beyond EOD, truncated [ 157.924910][ T6780] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 158.081517][ T4951] Dev loop6: unable to read RDB block 1 [ 158.081551][ T4951] loop6: unable to read partition table [ 158.081831][ T4951] loop6: partition table beyond EOD, truncated [ 158.105360][ T1001] usb 2-1: USB disconnect, device number 7 [ 158.761832][ T198] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 158.914408][ T198] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 158.916046][ T198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.918011][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 158.918032][ T198] usb 3-1: Product: syz [ 158.918044][ T198] usb 3-1: Manufacturer: syz [ 158.924792][ T1001] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 159.041129][ T198] usb 3-1: selecting invalid altsetting 1 [ 159.061801][ T1001] usb 1-1: device descriptor read/64, error -71 [ 159.063070][ T198] dvb_ttusb_budget: ttusb_init_controller: error [ 159.066228][ T198] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 159.226439][ T198] DVB: Unable to find symbol cx22700_attach() [ 159.329599][ T198] DVB: Unable to find symbol tda10046_attach() [ 159.329615][ T198] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 159.330925][ T1001] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.359028][ T198] usb 3-1: USB disconnect, device number 19 [ 159.481807][ T1001] usb 1-1: device descriptor read/64, error -71 [ 159.609678][ T1001] usb usb1-port1: attempt power cycle [ 159.985107][ T1001] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 160.002449][ T1001] usb 1-1: device descriptor read/8, error -71 [ 160.251782][ T1001] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 160.275265][ T1001] usb 1-1: device descriptor read/8, error -71 [ 160.311758][ T198] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 160.384573][ T1001] usb usb1-port1: unable to enumerate USB device [ 160.462511][ T198] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.462562][ T198] usb 3-1: no configurations [ 160.462575][ T198] usb 3-1: can't read configurations, error -22 [ 160.591815][ T198] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 160.742760][ T198] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.742819][ T198] usb 3-1: no configurations [ 160.742831][ T198] usb 3-1: can't read configurations, error -22 [ 160.743620][ T198] usb usb3-port1: attempt power cycle [ 160.970555][ T6828] 9pnet_virtio: no channels available for device syz [ 161.136689][ T198] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 161.153541][ T198] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.153597][ T198] usb 3-1: no configurations [ 161.153609][ T198] usb 3-1: can't read configurations, error -22 [ 161.281803][ T198] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 161.301777][ T5317] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.303769][ T198] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.303824][ T198] usb 3-1: no configurations [ 161.303836][ T198] usb 3-1: can't read configurations, error -22 [ 161.304390][ T198] usb usb3-port1: unable to enumerate USB device [ 161.421794][ T5732] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.473062][ T5317] usb 2-1: Using ep0 maxpacket: 32 [ 161.474885][ T5317] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 161.476847][ T5317] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 161.476871][ T5317] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.478987][ T5317] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.479010][ T5317] usb 2-1: Product: syz [ 161.479023][ T5317] usb 2-1: Manufacturer: syz [ 161.479035][ T5317] usb 2-1: SerialNumber: syz [ 161.488971][ T5317] usb 2-1: config 0 descriptor?? [ 161.542308][ T5317] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 161.611757][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 161.616768][ T5732] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 161.637365][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.637399][ T5732] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.665067][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.665094][ T5732] usb 4-1: Product: syz [ 161.665107][ T5732] usb 4-1: Manufacturer: syz [ 161.665120][ T5732] usb 4-1: SerialNumber: syz [ 161.711876][ T5732] usb 4-1: config 0 descriptor?? [ 161.761854][ T5317] gspca_sunplus: reg_r err -32 [ 161.917730][ T198] usb 4-1: USB disconnect, device number 6 [ 162.174450][ T5595] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.241144][ T5595] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.252805][ T5595] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.254017][ T5595] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.254807][ T5595] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.935206][ T5317] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 163.006265][ T6859] program syz.3.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.145465][ T6862] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.575025][ T6841] rxe_eth0 speed is unknown, defaulting to 1000 [ 163.581520][ T6856] nvme nvme0: rdma connection establishment failed (-512) [ 163.876545][ T5317] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 164.022846][ T5317] usb 3-1: device descriptor read/64, error -71 [ 164.191264][ T6370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.292462][ T5573] usb 2-1: USB disconnect, device number 8 [ 164.323951][ T5317] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 164.461860][ T5588] Bluetooth: hci5: command tx timeout [ 164.462460][ T5317] usb 3-1: device descriptor read/64, error -71 [ 164.578577][ T5317] usb usb3-port1: attempt power cycle [ 164.774080][ T1001] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 164.922685][ T1001] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 164.922742][ T1001] usb 4-1: no configurations [ 164.922754][ T1001] usb 4-1: can't read configurations, error -22 [ 164.951863][ T5317] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 164.973207][ T5317] usb 3-1: device descriptor read/8, error -71 [ 165.057462][ T1001] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.069327][ T6370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.214303][ T1001] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.214362][ T1001] usb 4-1: no configurations [ 165.214375][ T1001] usb 4-1: can't read configurations, error -22 [ 165.219870][ T1001] usb usb4-port1: attempt power cycle [ 165.233456][ T5317] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 165.263055][ T5317] usb 3-1: device descriptor read/8, error -71 [ 165.382746][ T5317] usb usb3-port1: unable to enumerate USB device [ 165.551007][ T6370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.576357][ T1001] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 165.597472][ T1001] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.597523][ T1001] usb 4-1: no configurations [ 165.597535][ T1001] usb 4-1: can't read configurations, error -22 [ 165.782938][ T1001] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.804313][ T1001] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.804352][ T1001] usb 4-1: no configurations [ 165.804363][ T1001] usb 4-1: can't read configurations, error -22 [ 165.804680][ T1001] usb usb4-port1: unable to enumerate USB device [ 166.110002][ T6370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.531727][ T5588] Bluetooth: hci5: command tx timeout [ 166.975320][ T6962] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 167.175309][ T5732] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 167.322466][ T5732] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 167.323687][ T5732] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.323715][ T5732] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 167.323737][ T5732] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.323760][ T5732] usb 1-1: config 0 interface 0 has no altsetting 0 [ 167.323799][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.326359][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.326470][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.326672][ T6841] bridge_slave_0: entered allmulticast mode [ 167.333925][ T6841] bridge_slave_0: entered promiscuous mode [ 167.341345][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.341466][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.343910][ T6841] bridge_slave_1: entered allmulticast mode [ 167.346635][ T6841] bridge_slave_1: entered promiscuous mode [ 167.497792][ T5732] usb 1-1: config 0 descriptor?? [ 167.506744][ T6960] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.511528][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.600827][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.831742][ T5594] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 167.877052][ T6370] bridge_slave_1: left allmulticast mode [ 167.877204][ T6370] bridge_slave_1: left promiscuous mode [ 167.926891][ T6370] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.951587][ T5732] usbhid 1-1:0.0: can't add hid device: -71 [ 167.960056][ T5732] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 167.984590][ T5594] usb 3-1: device descriptor read/64, error -71 [ 167.986745][ T1001] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.036736][ T5732] usb 1-1: USB disconnect, device number 19 [ 168.176931][ T1001] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 168.179607][ T1001] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 168.179632][ T1001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.179647][ T1001] usb 2-1: config 0 has no interface number 0 [ 168.179692][ T1001] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 168.179714][ T1001] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.241915][ T5594] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 168.319082][ T1001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.319100][ T1001] usb 2-1: Product: syz [ 168.319107][ T1001] usb 2-1: Manufacturer: syz [ 168.319114][ T1001] usb 2-1: SerialNumber: syz [ 168.334710][ T1001] usb 2-1: config 0 descriptor?? [ 168.336383][ T6976] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 168.386590][ T1001] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 168.387714][ T1001] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 168.432758][ T1001] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 168.451843][ T5594] usb 3-1: device descriptor read/64, error -71 [ 168.562360][ T5594] usb usb3-port1: attempt power cycle [ 168.589291][ T6370] bridge_slave_0: left allmulticast mode [ 168.589317][ T6370] bridge_slave_0: left promiscuous mode [ 168.590051][ T6370] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.614092][ T5588] Bluetooth: hci5: command tx timeout [ 168.745951][ T5734] usb 2-1: USB disconnect, device number 9 [ 168.793957][ T5734] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 168.794469][ T5734] cyberjack 2-1:0.69: device disconnected [ 168.954182][ T5594] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 168.979578][ T5594] usb 3-1: device descriptor read/8, error -71 [ 169.257328][ T5594] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 169.272893][ T5594] usb 3-1: device descriptor read/8, error -71 [ 169.386642][ T5594] usb usb3-port1: unable to enumerate USB device [ 170.291909][ T5594] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 170.454452][ T5594] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.455615][ T5594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.455639][ T5594] usb 1-1: config 0 has no interfaces? [ 170.455668][ T5594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.460639][ T5594] usb 1-1: config 0 descriptor?? [ 170.672599][ T6370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.701909][ T5588] Bluetooth: hci5: command tx timeout [ 170.752555][ T6370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.794076][ T6370] bond0 (unregistering): Released all slaves [ 170.954248][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 170.989295][ T6841] team0: Port device team_slave_0 added [ 170.990058][ T5594] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 171.151808][ T5594] usb 3-1: Using ep0 maxpacket: 8 [ 171.152509][ T5594] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 171.153735][ T5594] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.153767][ T5594] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 171.156009][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.156023][ T5594] usb 3-1: Product: syz [ 171.156031][ T5594] usb 3-1: Manufacturer: syz [ 171.156038][ T5594] usb 3-1: SerialNumber: syz [ 171.386314][ T5594] usb 3-1: 1:1 : bogus bTerminalLink 7 [ 171.387582][ T5594] usb 3-1: 0:2 : does not exist [ 171.387677][ T5594] usb 3-1: unit 119 not found! [ 171.463726][ T6841] team0: Port device team_slave_1 added [ 171.569341][ T5594] usb 3-1: USB disconnect, device number 32 [ 171.699208][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 171.759875][ T6023] udevd[6023]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.282986][ T7035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.478644][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.813642][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.813657][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.813677][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.826763][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.826781][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.826804][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.951773][ T5573] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.101761][ T5573] usb 4-1: Using ep0 maxpacket: 16 [ 173.102687][ T5573] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 173.106141][ T5573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.106164][ T5573] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 173.106199][ T5573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.125674][ T5594] usb 1-1: USB disconnect, device number 20 [ 173.247334][ T5573] usb 4-1: config 0 descriptor?? [ 173.771874][ T5589] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 173.895505][ T6841] hsr_slave_0: entered promiscuous mode [ 173.900488][ T6841] hsr_slave_1: entered promiscuous mode [ 173.907142][ T6841] debugfs: 'hsr0' already exists in 'hsr' [ 173.907170][ T6841] Cannot create hsr debugfs directory [ 173.952340][ T5589] usb 1-1: Using ep0 maxpacket: 16 [ 173.958172][ T5589] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 173.980673][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.980700][ T5589] usb 1-1: Product: syz [ 173.980713][ T5589] usb 1-1: Manufacturer: syz [ 173.980725][ T5589] usb 1-1: SerialNumber: syz [ 174.018885][ T5589] usb 1-1: config 0 descriptor?? [ 174.030850][ T5589] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 174.445444][ T7077] FAULT_INJECTION: forcing a failure. [ 174.445444][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 174.445499][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.445522][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 174.445533][ T7077] Call Trace: [ 174.445541][ T7077] [ 174.445550][ T7077] dump_stack_lvl+0xe8/0x150 [ 174.445596][ T7077] should_fail_ex+0x46b/0x600 [ 174.445619][ T7077] ? __d_alloc+0x37/0x830 [ 174.445642][ T7077] should_failslab+0xa8/0x100 [ 174.445670][ T7077] kmem_cache_alloc_lru_noprof+0x9d/0x680 [ 174.445692][ T7077] ? __d_lookup+0x66/0x790 [ 174.445715][ T7077] ? __d_alloc+0x37/0x830 [ 174.445742][ T7077] __d_alloc+0x37/0x830 [ 174.445765][ T7077] d_alloc+0x4b/0x190 [ 174.445783][ T7077] ? lookup_one_qstr_excl+0xc4/0x360 [ 174.445807][ T7077] lookup_one_qstr_excl+0xd8/0x360 [ 174.445835][ T7077] start_dirop+0x5c/0x90 [ 174.445854][ T7077] simple_start_creating+0xcc/0x110 [ 174.445873][ T7077] ? __pfx_simple_start_creating+0x10/0x10 [ 174.445896][ T7077] ? mntput+0x65/0xc0 [ 174.445924][ T7077] debugfs_start_creating+0xca/0x1b0 [ 174.445952][ T7077] __debugfs_create_file+0x6f/0x400 [ 174.445976][ T7077] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 174.446003][ T7077] debugfs_create_file_full+0x3f/0x60 [ 174.446029][ T7077] kvm_create_vm_debugfs+0x471/0x8f0 [ 174.446056][ T7077] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 174.446074][ T7077] ? alloc_pages_mpol+0x11b/0x280 [ 174.446097][ T7077] ? __rt_spin_lock_init+0x3e/0x50 [ 174.446138][ T7077] kvm_dev_ioctl+0x13ca/0x17e0 [ 174.446168][ T7077] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 174.446197][ T7077] ? bpf_lsm_file_ioctl+0x9/0x20 [ 174.446219][ T7077] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 174.446239][ T7077] __se_sys_ioctl+0xff/0x170 [ 174.446266][ T7077] do_syscall_64+0x166/0x520 [ 174.446292][ T7077] ? trace_irq_disable+0x3b/0x140 [ 174.446317][ T7077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.446336][ T7077] ? clear_bhb_loop+0x70/0xc0 [ 174.446359][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.446378][ T7077] RIP: 0033:0x7f3e1de9f559 [ 174.446405][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.446420][ T7077] RSP: 002b:00007f3e1c0ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 174.446441][ T7077] RAX: ffffffffffffffda RBX: 00007f3e1e125fa0 RCX: 00007f3e1de9f559 [ 174.446455][ T7077] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 174.446466][ T7077] RBP: 00007f3e1df36b20 R08: 0000000000000000 R09: 0000000000000000 [ 174.446477][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.446488][ T7077] R13: 00007f3e1e126038 R14: 00007f3e1e125fa0 R15: 00007fffb96fb808 [ 174.446519][ T7077] [ 174.561787][ T5589] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 174.561947][ T5589] visor 1-1:0.0: probe with driver visor failed with error -71 [ 174.779934][ T5589] usb 1-1: USB disconnect, device number 21 [ 175.212582][ T7088] UHID_CREATE from different security context by process 235 (syz.2.437), this is not allowed. [ 175.230636][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 175.673747][ T5734] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 175.797986][ T5594] usb 4-1: USB disconnect, device number 11 [ 175.839930][ T5734] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.851557][ T5734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.851580][ T5734] usb 3-1: config 0 has no interfaces? [ 175.851833][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.936486][ T5734] usb 3-1: config 0 descriptor?? [ 176.080401][ T7106] jffs2: notice: (7106) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.094726][ T6370] hsr_slave_0: left promiscuous mode [ 176.131041][ T6370] hsr_slave_1: left promiscuous mode [ 176.151415][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.151540][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.199165][ T6370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.199193][ T6370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.330588][ T7116] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 176.347079][ T6370] veth1_macvtap: left promiscuous mode [ 176.347397][ T6370] veth0_macvtap: left promiscuous mode [ 176.361579][ T6370] veth1_vlan: left promiscuous mode [ 176.372428][ T6370] veth0_vlan: left promiscuous mode [ 176.615148][ T5588] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 176.702089][ T5573] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 176.853137][ T5573] usb 1-1: device descriptor read/64, error -71 [ 177.091832][ T5573] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 177.218977][ T7135] 9pnet_virtio: no channels available for device syz [ 177.228539][ T5573] usb 1-1: device descriptor read/64, error -71 [ 177.332146][ T5573] usb usb1-port1: attempt power cycle [ 177.392553][ T6370] team0 (unregistering): Port device team_slave_1 removed [ 177.453661][ T6370] team0 (unregistering): Port device team_slave_0 removed [ 177.674904][ T5573] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 177.674995][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 177.699898][ T5573] usb 1-1: device descriptor read/8, error -71 [ 177.931840][ T5573] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 177.961143][ T5573] usb 1-1: device descriptor read/8, error -71 [ 178.062076][ T5573] usb usb1-port1: unable to enumerate USB device [ 178.141792][ T6841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.210787][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.408284][ T5589] usb 3-1: USB disconnect, device number 33 [ 178.545376][ T5594] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.684433][ T6841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.701760][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 178.702680][ T5594] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 178.703738][ T5594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.703759][ T5594] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.703793][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.721951][ T5594] usb 4-1: config 0 descriptor?? [ 178.782544][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.787726][ T6841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.840906][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.849474][ T6841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.029403][ T7165] 9pnet_virtio: no channels available for device syz [ 179.029744][ T6841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.114261][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 179.229206][ T7178] loop5: detected capacity change from 0 to 4095 [ 179.339761][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 179.807791][ T7169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.807967][ T7169] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 179.811426][ T5896] Buffer I/O error on dev loop5, logical block 511, async page read [ 179.866046][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.980687][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.038027][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.040606][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.126174][ T6372] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.126309][ T6372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.351536][ T7169] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.441199][ T7169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 180.441343][ T7169] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.544538][ T7169] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 180.618847][ T7169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 180.618950][ T7169] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.706719][ T7169] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 180.776381][ T7169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 180.776521][ T7169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.900635][ T7169] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 180.991773][ T7169] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 180.991918][ T7169] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 181.100027][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.117353][ T7169] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 181.186722][ T7216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.465'. [ 181.444429][ T35] usb 4-1: USB disconnect, device number 12 [ 181.651807][ T5588] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.726811][ T6841] veth0_vlan: entered promiscuous mode [ 181.768969][ T6841] veth1_vlan: entered promiscuous mode [ 181.916319][ T6841] veth0_macvtap: entered promiscuous mode [ 181.931761][ T35] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.947483][ T6841] veth1_macvtap: entered promiscuous mode [ 182.012066][ T7243] lo: entered allmulticast mode [ 182.013549][ T7243] bond0: entered allmulticast mode [ 182.017565][ T7243] dummy0: entered allmulticast mode [ 182.070042][ T35] usb 4-1: device descriptor read/64, error -71 [ 182.081183][ T7243] eql: entered allmulticast mode [ 182.081446][ T7243] ifb0: entered allmulticast mode [ 182.084415][ T7243] ifb1: entered allmulticast mode [ 182.087060][ T7243] virtio_net virtio1 eth0: entered allmulticast mode [ 182.087527][ T7243] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 182.088265][ T7243] hwsim0: entered allmulticast mode [ 182.088530][ T7243] ieee802154 phy0 wpan0: entered allmulticast mode [ 182.088770][ T7243] ieee802154 phy1 wpan1: entered allmulticast mode [ 182.089001][ T7243] teql0: entered allmulticast mode [ 182.089149][ T7243] tunl0: entered allmulticast mode [ 182.089297][ T7243] gre0: entered allmulticast mode [ 182.089405][ T7243] gretap0: entered allmulticast mode [ 182.089509][ T7243] erspan0: entered allmulticast mode [ 182.089619][ T7243] ip_vti0: entered allmulticast mode [ 182.089752][ T7243] ip6_vti0: entered allmulticast mode [ 182.089860][ T7243] sit0: entered allmulticast mode [ 182.089962][ T7243] ip6tnl0: entered allmulticast mode [ 182.090083][ T7243] ip6gre0: entered allmulticast mode [ 182.091360][ T7247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 182.091567][ T7243] lapb0: entered allmulticast mode [ 182.096393][ T7243] lapb1: entered allmulticast mode [ 182.101044][ T7243] lapb2: entered allmulticast mode [ 182.101478][ T7243] lapb3: entered allmulticast mode [ 182.102620][ T7243] lapb5: entered allmulticast mode [ 182.103306][ T7243] lowpan0: entered allmulticast mode [ 182.112612][ T7243] rxe_eth0: entered allmulticast mode [ 182.113218][ T7243] netdevsim netdevsim4 eth1: entered allmulticast mode [ 182.114019][ T7243] netdevsim netdevsim4 eth2: entered allmulticast mode [ 182.114700][ T7243] netdevsim netdevsim4 eth3: entered allmulticast mode [ 182.115313][ T7243] netdevsim netdevsim4 eth4: entered allmulticast mode [ 182.194158][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.354425][ T35] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.387347][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.451853][ T5588] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.481831][ T35] usb 4-1: device descriptor read/64, error -71 [ 182.602280][ T35] usb usb4-port1: attempt power cycle [ 182.698680][ T5588] Bluetooth: hci0: command 0x0c1a tx timeout [ 182.761967][ T3348] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.762519][ T3348] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.762660][ T3348] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.762784][ T3348] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.851858][ T5588] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.023085][ T5588] Bluetooth: hci5: command 0x0c1a tx timeout [ 183.023329][ T35] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 183.046583][ T35] usb 4-1: device descriptor read/8, error -71 [ 183.302365][ T35] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 183.327382][ T35] usb 4-1: device descriptor read/8, error -71 [ 183.514475][ T35] usb usb4-port1: unable to enumerate USB device [ 183.759084][ T5588] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.943205][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.943226][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.067637][ T7281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 184.234413][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.234428][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.541805][ T5588] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.774412][ T5745] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 184.781913][ T5588] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.901817][ T198] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 184.923454][ T5745] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 184.926031][ T5745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.926083][ T5745] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 184.926106][ T5745] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 184.926126][ T5745] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 184.926165][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.931837][ T5588] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.004492][ T7299] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 185.004780][ T7299] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 185.009510][ T5745] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 185.037565][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 185.037655][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 185.057559][ T5745] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 185.070344][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 185.070431][ T5745] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 185.088147][ T198] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 185.089785][ T198] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 185.089834][ T198] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.089864][ T198] usb 1-1: config 2 interface 0 has no altsetting 0 [ 185.092142][ T5588] Bluetooth: hci5: command 0x0c1a tx timeout [ 185.142472][ T5745] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 185.144591][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.144616][ T198] usb 1-1: Product: syz [ 185.144630][ T198] usb 1-1: Manufacturer: syz [ 185.144643][ T198] usb 1-1: SerialNumber: syz [ 185.365319][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 185.471295][ T10] usb 6-1: USB disconnect, device number 2 [ 185.498845][ T198] usb 1-1: USB disconnect, device number 26 [ 185.527036][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 185.554061][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 185.578715][ T10] keyspan 6-1:1.0: device disconnected [ 185.812322][ T5588] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.611860][ T5588] Bluetooth: hci1: command 0x0c1a tx timeout [ 186.744296][ T7365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.511'. [ 186.851952][ T5588] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.968701][ T7369] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #1262: comm syz.5.513: No space for directory leaf checksum. Please run e2fsck -D. [ 186.968733][ T7369] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #1262: comm syz.5.513: checksumming directory block 0 [ 187.012750][ T5588] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.189058][ T5588] Bluetooth: hci5: command 0x0c1a tx timeout [ 187.588293][ T5745] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.724962][ T7394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 187.728770][ T7395] program syz.3.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.750167][ T5745] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 187.751418][ T5745] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 187.751462][ T5745] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.751485][ T5745] usb 2-1: config 2 interface 0 has no altsetting 0 [ 187.798390][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.798418][ T5745] usb 2-1: Product: syz [ 187.798431][ T5745] usb 2-1: Manufacturer: syz [ 187.798445][ T5745] usb 2-1: SerialNumber: syz [ 188.383112][ T5745] usb 2-1: USB disconnect, device number 10 [ 188.501206][ T7423] openvswitch: netlink: Invalid VLAN frame [ 188.598169][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.538'. [ 188.931897][ T5594] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 189.091876][ T5594] usb 6-1: Using ep0 maxpacket: 8 [ 189.094171][ T5594] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.098218][ T5594] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 189.098270][ T5594] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.098289][ T5594] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.098309][ T5594] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.098330][ T5594] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.098369][ T5594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.340913][ T5594] usb 6-1: GET_CAPABILITIES returned 0 [ 189.340943][ T5594] usbtmc 6-1:16.0: can't read capabilities [ 189.505373][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 189.583160][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.587455][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.587536][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.587940][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.588011][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.588073][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.588749][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589098][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589171][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589243][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589517][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589596][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589667][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.589964][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.590037][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.590105][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 189.687857][ T5734] usb 6-1: USB disconnect, device number 3 [ 189.795269][ T7458] 9pnet_virtio: no channels available for device syz [ 190.351738][ T5734] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 190.503592][ T5734] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 190.505231][ T5734] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 190.505280][ T5734] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.505305][ T5734] usb 2-1: config 2 interface 0 has no altsetting 0 [ 190.513033][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.513056][ T5734] usb 2-1: Product: syz [ 190.513068][ T5734] usb 2-1: Manufacturer: syz [ 190.513080][ T5734] usb 2-1: SerialNumber: syz [ 190.604052][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.562'. [ 190.864911][ T5734] usb 2-1: USB disconnect, device number 11 [ 191.551594][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'. [ 191.852567][ T5594] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 191.993609][ T5594] usb 3-1: device descriptor read/64, error -71 [ 192.231759][ T5594] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 192.365222][ T5594] usb 3-1: device descriptor read/64, error -71 [ 192.486737][ T5594] usb usb3-port1: attempt power cycle [ 192.861906][ T5594] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 192.867629][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.585'. [ 192.883737][ T5594] usb 3-1: device descriptor read/8, error -71 [ 192.939997][ T7570] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.144637][ T5594] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 193.162625][ T5594] usb 3-1: device descriptor read/8, error -71 [ 193.282821][ T5594] usb usb3-port1: unable to enumerate USB device [ 193.478120][ T1001] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 193.683977][ T1001] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 193.704450][ T1001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.704479][ T1001] usb 6-1: Product: syz [ 193.704492][ T1001] usb 6-1: Manufacturer: syz [ 193.704505][ T1001] usb 6-1: SerialNumber: syz [ 193.711304][ T1001] usb 6-1: config 0 descriptor?? [ 194.067058][ T1001] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 004 [ 194.261848][ T198] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 194.297429][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.297499][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.413150][ T198] usb 1-1: device descriptor read/64, error -71 [ 194.652326][ T198] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 194.782662][ T198] usb 1-1: device descriptor read/64, error -71 [ 194.891000][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.598'. [ 194.901270][ T198] usb usb1-port1: attempt power cycle [ 195.081844][ T1001] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.090584][ T7545] syz.3.577 (7545) used greatest stack depth: 18720 bytes left [ 195.241922][ T1001] usb 2-1: Using ep0 maxpacket: 16 [ 195.242144][ T198] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 195.242714][ T1001] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 195.247681][ T1001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.247732][ T1001] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.247745][ T1001] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.247756][ T1001] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.247769][ T1001] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.247787][ T1001] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.300140][ T1001] usb 2-1: config 0 descriptor?? [ 195.305909][ T198] usb 1-1: device descriptor read/8, error -71 [ 195.552703][ T198] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 195.624280][ T198] usb 1-1: device descriptor read/8, error -71 [ 195.734265][ T198] usb usb1-port1: unable to enumerate USB device [ 196.177593][ T1001] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 196.349457][ T7635] udevd[7635]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 196.394499][ T1001] usb 2-1: USB disconnect, device number 12 [ 196.477637][ T198] usb 6-1: USB disconnect, device number 4 [ 196.852127][ T5595] Bluetooth: hci5: command 0x0c1a tx timeout [ 197.048326][ T7652] device-mapper: table: 248:5: crypt: Error decoding and setting key (-EINVAL) [ 197.048355][ T7652] device-mapper: ioctl: error adding target to table [ 197.148008][ T5595] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 197.298749][ T7676] random: crng reseeded on system resumption [ 197.430774][ T7678] 9pnet_virtio: no channels available for device syz [ 197.807472][ T7678] syz.2.615 (7678) used greatest stack depth: 17720 bytes left [ 197.811931][ T5589] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 197.992435][ T5589] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 197.996865][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.996894][ T5589] usb 1-1: Product: syz [ 197.996902][ T5589] usb 1-1: Manufacturer: syz [ 197.996909][ T5589] usb 1-1: SerialNumber: syz [ 198.019763][ T5589] usb 1-1: config 0 descriptor?? [ 198.111804][ T5594] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 198.263437][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 198.264505][ T5594] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 198.266697][ T5594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.266748][ T5594] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.266771][ T5594] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.266790][ T5594] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 198.266814][ T5594] usb 4-1: config 0 interface 0 has no altsetting 0 [ 198.266844][ T5594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.339382][ T5589] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 031 [ 198.378912][ T5594] usb 4-1: config 0 descriptor?? [ 198.964397][ T5594] logitech-djreceiver 0003:046D:C53A.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 199.004756][ T7728] udevd[7728]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 199.108884][ T5589] usb 4-1: USB disconnect, device number 17 [ 199.558073][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 199.786361][ T7758] Bluetooth: MGMT ver 1.23 [ 199.805176][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 200.409149][ T7778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.655'. [ 200.669141][ T5589] usb 1-1: USB disconnect, device number 31 [ 200.949422][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.660'. [ 201.065637][ T7792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 201.481775][ T5589] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 201.646769][ T5589] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 201.647346][ T5589] usb 1-1: config 0 has no interfaces? [ 201.649558][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.649579][ T5589] usb 1-1: Product: syz [ 201.649586][ T5589] usb 1-1: Manufacturer: syz [ 201.649593][ T5589] usb 1-1: SerialNumber: syz [ 201.668574][ T5589] usb 1-1: config 0 descriptor?? [ 201.832519][ T35] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 201.910030][ T5589] usb 1-1: USB disconnect, device number 32 [ 201.982634][ T35] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 201.990023][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.990049][ T35] usb 2-1: Product: syz [ 201.990063][ T35] usb 2-1: Manufacturer: syz [ 201.990076][ T35] usb 2-1: SerialNumber: syz [ 202.030975][ T35] usb 2-1: config 0 descriptor?? [ 202.264706][ T35] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 013 [ 202.706437][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 202.834852][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.673'. [ 203.371814][ T35] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 203.450972][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.695'. [ 203.521762][ T5734] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.533965][ T35] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 203.546797][ T35] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.551759][ T1001] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 203.568825][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.568861][ T35] usb 1-1: Product: syz [ 203.568875][ T35] usb 1-1: Manufacturer: syz [ 203.568888][ T35] usb 1-1: SerialNumber: syz [ 203.596961][ T35] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 203.596976][ T35] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 203.597005][ T35] usbserial_generic 1-1:1.0: device has no bulk endpoints [ 203.631923][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.5.695'. [ 203.671868][ T5734] usb 4-1: Using ep0 maxpacket: 16 [ 203.673228][ T5734] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 203.674464][ T5734] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.674538][ T5734] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.674562][ T5734] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.674583][ T5734] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 203.674607][ T5734] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.674639][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.681166][ T5734] usb 4-1: config 0 descriptor?? [ 203.763577][ T1001] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 203.765439][ T1001] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 203.765463][ T1001] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.765480][ T1001] usb 3-1: config 0 has no interface number 0 [ 203.765534][ T1001] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 203.765557][ T1001] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.804062][ T5573] usb 1-1: USB disconnect, device number 33 [ 203.824871][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.824899][ T1001] usb 3-1: Product: syz [ 203.824913][ T1001] usb 3-1: Manufacturer: syz [ 203.824926][ T1001] usb 3-1: SerialNumber: syz [ 203.937032][ T1001] usb 3-1: config 0 descriptor?? [ 203.948281][ T7867] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 203.965389][ T1001] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 203.990375][ T1001] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 204.019798][ T1001] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 204.244014][ T1001] usb 3-1: USB disconnect, device number 38 [ 204.304658][ T5734] logitech-djreceiver 0003:046D:C53A.0006: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 204.306281][ T1001] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 204.307063][ T1001] cyberjack 3-1:0.69: device disconnected [ 204.359304][ T7883] udevd[7883]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 204.400307][ T5734] usb 4-1: USB disconnect, device number 18 [ 204.639213][ T5589] usb 2-1: USB disconnect, device number 13 [ 205.161937][ T7903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.706'. [ 205.321803][ T5589] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 205.451816][ T5589] usb 4-1: device descriptor read/64, error -71 [ 205.472946][ T5734] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 205.551783][ T1001] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 205.622844][ T5734] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 205.628377][ T5734] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.628408][ T5734] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 205.628421][ T5734] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.628434][ T5734] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.628452][ T5734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.701793][ T5589] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 205.720198][ T1001] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 205.730872][ T1001] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 205.730900][ T1001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.730916][ T1001] usb 2-1: config 0 has no interface number 0 [ 205.730968][ T1001] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 205.730989][ T1001] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.775981][ T1001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.776008][ T1001] usb 2-1: Product: syz [ 205.776022][ T1001] usb 2-1: Manufacturer: syz [ 205.776035][ T1001] usb 2-1: SerialNumber: syz [ 205.809599][ T5734] usb 3-1: config 0 descriptor?? [ 205.813172][ T7909] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.832699][ T5589] usb 4-1: device descriptor read/64, error -71 [ 205.868641][ T1001] usb 2-1: config 0 descriptor?? [ 205.885294][ T7915] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 205.906245][ T1001] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 205.924521][ T1001] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 205.945597][ T1001] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 205.953407][ T5589] usb usb4-port1: attempt power cycle [ 206.137851][ T5573] usb 2-1: USB disconnect, device number 14 [ 206.157925][ T5573] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 206.160282][ T5573] cyberjack 2-1:0.69: device disconnected [ 206.238225][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 206.238636][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 206.239499][ T5734] usbhid 3-1:0.0: can't add hid device: -71 [ 206.239600][ T5734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 206.288481][ T5734] usb 3-1: USB disconnect, device number 39 [ 206.289209][ T5595] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 206.291833][ T5589] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 206.312688][ T5589] usb 4-1: device descriptor read/8, error -71 [ 206.561803][ T5589] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 206.583570][ T5589] usb 4-1: device descriptor read/8, error -71 [ 206.693924][ T5589] usb usb4-port1: unable to enumerate USB device [ 207.303473][ T7978] Bluetooth: MGMT ver 1.23 [ 207.835350][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.749'. [ 208.472336][ T5588] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 208.990631][ T8045] loop6: detected capacity change from 0 to 1 [ 209.117964][ T8045] Dev loop6: unable to read RDB block 1 [ 209.118021][ T8045] loop6: unable to read partition table [ 209.118234][ T8045] loop6: partition table beyond EOD, truncated [ 209.118266][ T8045] loop_reread_partitions: partition scan of loop6 ( 6tPΪŔA8*V^3c) failed (rc=-5) [ 209.331820][ T5588] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.381978][ T5595] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 209.550854][ T8056] 0x000000000003-0x000000010001 : "" [ 209.680077][ T8056] ftl_cs: FTL header corrupt! [ 209.802472][ T8056] FAULT_INJECTION: forcing a failure. [ 209.802472][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 209.802510][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.3.769 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.802532][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.802551][ T8056] Call Trace: [ 209.802559][ T8056] [ 209.802569][ T8056] dump_stack_lvl+0xe8/0x150 [ 209.802604][ T8056] should_fail_ex+0x46b/0x600 [ 209.802633][ T8056] should_failslab+0xa8/0x100 [ 209.802663][ T8056] ? __kernfs_new_node+0xe7/0xa70 [ 209.802689][ T8056] kmem_cache_alloc_noprof+0x99/0x680 [ 209.802716][ T8056] ? __kernfs_new_node+0xe7/0xa70 [ 209.802749][ T8056] __kernfs_new_node+0xe7/0xa70 [ 209.802777][ T8056] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.802813][ T8056] ? __pfx___kernfs_new_node+0x10/0x10 [ 209.802836][ T8056] ? lock_acquire+0x115/0x350 [ 209.802860][ T8056] ? kernfs_root+0x1c/0x230 [ 209.802890][ T8056] ? kernfs_root+0x1c/0x230 [ 209.802913][ T8056] ? kernfs_root+0x1c/0x230 [ 209.802934][ T8056] ? kernfs_root+0x1c/0x230 [ 209.802962][ T8056] kernfs_new_node+0xeb/0x140 [ 209.802991][ T8056] __kernfs_create_file+0x4b/0x2e0 [ 209.803063][ T8056] sysfs_add_file_mode_ns+0x237/0x300 [ 209.803095][ T8056] internal_create_group+0x679/0x1180 [ 209.803131][ T8056] ? kernfs_create_dir_ns+0x1c0/0x220 [ 209.803162][ T8056] ? __pfx_internal_create_group+0x10/0x10 [ 209.803185][ T8056] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 209.803208][ T8056] ? sysfs_create_dir_ns+0x16a/0x2a0 [ 209.803230][ T8056] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 209.803260][ T8056] sysfs_create_groups+0x59/0x120 [ 209.803287][ T8056] kobject_add_internal+0x673/0xce0 [ 209.803317][ T8056] kobject_add+0x163/0x240 [ 209.803340][ T8056] ? kobject_add+0x163/0x240 [ 209.803364][ T8056] ? __pfx_kobject_add+0x10/0x10 [ 209.803386][ T8056] ? __kasan_kmalloc+0x93/0xb0 [ 209.803416][ T8056] ? kobject_create_and_add+0x58/0x230 [ 209.803443][ T8056] blk_register_queue+0x83/0x4e0 [ 209.803470][ T8056] ? kobject_create_and_add+0x16f/0x230 [ 209.803497][ T8056] __add_disk+0x6b8/0xdb0 [ 209.803534][ T8056] add_disk_fwnode+0x100/0x3a0 [ 209.803575][ T8056] add_mtd_blktrans_dev+0xe81/0x14c0 [ 209.803616][ T8056] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 209.803664][ T8056] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 209.803690][ T8056] ? mtdblock_add_mtd+0x57/0x240 [ 209.803722][ T8056] mtdblock_add_mtd+0x18a/0x240 [ 209.803750][ T8056] blktrans_notify_add+0x9f/0xf0 [ 209.803774][ T8056] add_mtd_device+0x117f/0x17b0 [ 209.803811][ T8056] ? __pfx_add_mtd_device+0x10/0x10 [ 209.803843][ T8056] ? __pfx_mtd_nvmem_reg_read+0x10/0x10 [ 209.803868][ T8056] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 209.803905][ T8056] mtd_add_partition+0x388/0x590 [ 209.803933][ T8056] ? __pfx_mtd_add_partition+0x10/0x10 [ 209.803972][ T8056] mtdchar_blkpg_ioctl+0x28a/0x2c0 [ 209.803999][ T8056] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 209.804053][ T8056] mtdchar_ioctl+0x14fd/0x1bc0 [ 209.804082][ T8056] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 209.804122][ T8056] ? kasan_quarantine_put+0xbb/0x1f0 [ 209.804157][ T8056] ? tomoyo_path_number_perm+0x219/0x5f0 [ 209.804185][ T8056] ? tomoyo_path_number_perm+0x219/0x5f0 [ 209.804218][ T8056] ? __lock_acquire+0x747/0x2de0 [ 209.804259][ T8056] ? do_futex+0x3e7/0x4e0 [ 209.804312][ T8056] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.804340][ T8056] ? mutex_lock_nested+0x14d/0x1d0 [ 209.804361][ T8056] ? mtdchar_unlocked_ioctl+0xa4/0xd0 [ 209.804387][ T8056] mtdchar_unlocked_ioctl+0xb1/0xd0 [ 209.804419][ T8056] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 209.804444][ T8056] __se_sys_ioctl+0xff/0x170 [ 209.804474][ T8056] do_syscall_64+0x166/0x520 [ 209.804501][ T8056] ? trace_irq_disable+0x3b/0x140 [ 209.804524][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.804550][ T8056] ? clear_bhb_loop+0x70/0xc0 [ 209.804573][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.804592][ T8056] RIP: 0033:0x7f975826f559 [ 209.804611][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.804627][ T8056] RSP: 002b:00007f97564be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.804649][ T8056] RAX: ffffffffffffffda RBX: 00007f97584f5fa0 RCX: 00007f975826f559 [ 209.804669][ T8056] RDX: 0000200000001500 RSI: 0000000000001269 RDI: 0000000000000004 [ 209.804682][ T8056] RBP: 00007f9758306b20 R08: 0000000000000000 R09: 0000000000000000 [ 209.804695][ T8056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.804706][ T8056] R13: 00007f97584f6038 R14: 00007f97584f5fa0 R15: 00007ffe3157da48 [ 209.804739][ T8056] [ 209.940384][ T8056] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock1) [ 210.874224][ T8083] FAULT_INJECTION: forcing a failure. [ 210.874224][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 210.874260][ T8083] CPU: 1 UID: 0 PID: 8083 Comm: syz.3.775 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 210.874283][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 210.874295][ T8083] Call Trace: [ 210.874303][ T8083] [ 210.874312][ T8083] dump_stack_lvl+0xe8/0x150 [ 210.874347][ T8083] should_fail_ex+0x46b/0x600 [ 210.874375][ T8083] should_failslab+0xa8/0x100 [ 210.874404][ T8083] ? __proc_create+0x560/0xae0 [ 210.874433][ T8083] kmem_cache_alloc_noprof+0x99/0x680 [ 210.874459][ T8083] ? __proc_create+0x560/0xae0 [ 210.874492][ T8083] __proc_create+0x560/0xae0 [ 210.874522][ T8083] ? lock_acquire+0x115/0x350 [ 210.874543][ T8083] ? __pfx___proc_create+0x10/0x10 [ 210.874568][ T8083] ? net_generic+0x1e/0x240 [ 210.874601][ T8083] proc_mkdir+0x3e/0x120 [ 210.874622][ T8083] bond_create_proc_dir+0x8b/0xe0 [ 210.874645][ T8083] bond_net_init+0x8b/0xb0 [ 210.874672][ T8083] ops_init+0x35d/0x5d0 [ 210.874707][ T8083] setup_net+0x118/0x350 [ 210.874731][ T8083] ? __pfx_setup_net+0x10/0x10 [ 210.874759][ T8083] ? __ns_common_init+0x384/0x590 [ 210.874786][ T8083] copy_net_ns+0x536/0x770 [ 210.874810][ T8083] create_new_namespaces+0x3f0/0x6b0 [ 210.874834][ T8083] ? security_capable+0x7e/0x2c0 [ 210.874862][ T8083] unshare_nsproxy_namespaces+0x144/0x190 [ 210.874889][ T8083] ksys_unshare+0x532/0x890 [ 210.874916][ T8083] ? __pfx_ksys_unshare+0x10/0x10 [ 210.874944][ T8083] ? rcu_is_watching+0x16/0xb0 [ 210.874981][ T8083] __x64_sys_unshare+0x38/0x50 [ 210.875012][ T8083] do_syscall_64+0x166/0x520 [ 210.875041][ T8083] ? trace_irq_disable+0x3b/0x140 [ 210.875064][ T8083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.875082][ T8083] ? clear_bhb_loop+0x70/0xc0 [ 210.875106][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.875125][ T8083] RIP: 0033:0x7f975826f559 [ 210.875144][ T8083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.875160][ T8083] RSP: 002b:00007f97564be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 210.875181][ T8083] RAX: ffffffffffffffda RBX: 00007f97584f5fa0 RCX: 00007f975826f559 [ 210.875195][ T8083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 210.875207][ T8083] RBP: 00007f9758306b20 R08: 0000000000000000 R09: 0000000000000000 [ 210.875219][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.875231][ T8083] R13: 00007f97584f6038 R14: 00007f97584f5fa0 R15: 00007ffe3157da48 [ 210.875263][ T8083] [ 210.878666][ T8083] Warning: Cannot create /proc/net/bonding [ 211.240687][ T8083] rxe_eth0 speed is unknown, defaulting to 1000 [ 211.241799][ T5589] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 211.301470][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.782'. [ 211.406169][ T5589] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 211.408219][ T5589] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.408250][ T5589] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 211.408276][ T5589] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.408301][ T5589] usb 3-1: config 0 interface 0 has no altsetting 0 [ 211.408332][ T5589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.564579][ T5589] usb 3-1: config 0 descriptor?? [ 211.565794][ T8089] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.088660][ T5589] usbhid 3-1:0.0: can't add hid device: -71 [ 212.088788][ T5589] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 212.110676][ T5589] usb 3-1: USB disconnect, device number 40 [ 212.684025][ T8120] syzkaller0: entered promiscuous mode [ 212.684051][ T8120] syzkaller0: entered allmulticast mode [ 213.278234][ T8139] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 213.399672][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 213.553862][ T8155] overlayfs: missing 'lowerdir' [ 213.739520][ T8160] FAULT_INJECTION: forcing a failure. [ 213.739520][ T8160] name failslab, interval 1, probability 0, space 0, times 0 [ 213.739559][ T8160] CPU: 1 UID: 0 PID: 8160 Comm: syz.0.800 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 213.739582][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 213.739594][ T8160] Call Trace: [ 213.739608][ T8160] [ 213.739617][ T8160] dump_stack_lvl+0xe8/0x150 [ 213.739652][ T8160] should_fail_ex+0x46b/0x600 [ 213.739680][ T8160] should_failslab+0xa8/0x100 [ 213.739715][ T8160] __kmalloc_cache_noprof+0x9c/0x670 [ 213.739742][ T8160] ? rfkill_fop_open+0x187/0x560 [ 213.739769][ T8160] ? rfkill_fop_open+0x187/0x560 [ 213.739796][ T8160] ? rfkill_fill_event+0x2a0/0x3f0 [ 213.739827][ T8160] rfkill_fop_open+0x187/0x560 [ 213.739872][ T8160] ? __pfx_rfkill_fop_open+0x10/0x10 [ 213.739899][ T8160] misc_open+0x2de/0x350 [ 213.739927][ T8160] chrdev_open+0x4dc/0x600 [ 213.739954][ T8160] ? __pfx_chrdev_open+0x10/0x10 [ 213.739975][ T8160] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 213.740004][ T8160] ? __pfx_chrdev_open+0x10/0x10 [ 213.740026][ T8160] do_dentry_open+0x841/0x1410 [ 213.740054][ T8160] vfs_open_consume+0x4a/0x360 [ 213.740072][ T8160] ? path_openat+0x16e6/0x2100 [ 213.740095][ T8160] path_openat+0x1701/0x2100 [ 213.740131][ T8160] do_file_open+0x23e/0x4a0 [ 213.740149][ T8160] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 213.740181][ T8160] ? __pfx_do_file_open+0x10/0x10 [ 213.740223][ T8160] ? alloc_fd+0x6b2/0x760 [ 213.740250][ T8160] do_sys_openat2+0x115/0x200 [ 213.740276][ T8160] ? __se_sys_futex+0x3a8/0x450 [ 213.740302][ T8160] ? __pfx_do_sys_openat2+0x10/0x10 [ 213.740334][ T8160] ? rcu_is_watching+0x16/0xb0 [ 213.740361][ T8160] __x64_sys_openat+0x138/0x170 [ 213.740384][ T8160] do_syscall_64+0x166/0x520 [ 213.740413][ T8160] ? trace_irq_disable+0x3b/0x140 [ 213.740436][ T8160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.740454][ T8160] ? clear_bhb_loop+0x70/0xc0 [ 213.740476][ T8160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.740493][ T8160] RIP: 0033:0x7f739481f559 [ 213.740510][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.740527][ T8160] RSP: 002b:00007f7392a6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 213.740547][ T8160] RAX: ffffffffffffffda RBX: 00007f7394aa5fa0 RCX: 00007f739481f559 [ 213.740562][ T8160] RDX: 0000000000000801 RSI: 00002000000005c0 RDI: ffffffffffffff9c [ 213.740576][ T8160] RBP: 00007f73948b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 213.740588][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.740599][ T8160] R13: 00007f7394aa6038 R14: 00007f7394aa5fa0 R15: 00007ffd4c891b68 [ 213.740630][ T8160] [ 213.963595][ T35] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 214.168172][ T8170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.805'. [ 214.183846][ T35] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 214.188539][ T35] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.188593][ T35] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 214.226773][ T35] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 214.226802][ T35] usb 2-1: Manufacturer: syz [ 214.330767][ T35] usb 2-1: config 0 descriptor?? [ 214.411400][ T35] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 214.490006][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 214.518183][ T8180] overlayfs: missing 'lowerdir' [ 214.861765][ T1001] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 214.919903][ T8201] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 215.017013][ T1001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 215.046342][ T1001] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 215.046402][ T1001] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 215.046426][ T1001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.052118][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 215.052148][ T1001] usb 3-1: Product: syz [ 215.052161][ T1001] usb 3-1: Manufacturer: syz [ 215.052175][ T1001] usb 3-1: SerialNumber: syz [ 215.104589][ T1001] usb 3-1: config 0 descriptor?? [ 215.111081][ T1001] hub 3-1:0.0: bad descriptor, ignoring hub [ 215.111122][ T1001] hub 3-1:0.0: probe with driver hub failed with error -5 [ 215.155091][ T1001] usb 3-1: selecting invalid altsetting 0 [ 215.500004][ T1001] usb 3-1: USB disconnect, device number 41 [ 216.132054][ T1001] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 216.282378][ T1001] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 216.283812][ T1001] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 216.283864][ T1001] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 216.283885][ T1001] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.287887][ T1001] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 216.287902][ T1001] usb 3-1: Product: syz [ 216.287909][ T1001] usb 3-1: Manufacturer: syz [ 216.287917][ T1001] usb 3-1: SerialNumber: syz [ 216.363056][ T1001] usb 3-1: config 0 descriptor?? [ 216.377107][ T1001] hub 3-1:0.0: bad descriptor, ignoring hub [ 216.377146][ T1001] hub 3-1:0.0: probe with driver hub failed with error -5 [ 216.387926][ T1001] usb 3-1: selecting invalid altsetting 0 [ 216.551324][ T8249] FAULT_INJECTION: forcing a failure. [ 216.551324][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 216.551359][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.3.836 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 216.551381][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 216.551392][ T8249] Call Trace: [ 216.551400][ T8249] [ 216.551409][ T8249] dump_stack_lvl+0xe8/0x150 [ 216.551453][ T8249] should_fail_ex+0x46b/0x600 [ 216.551488][ T8249] should_failslab+0xa8/0x100 [ 216.551516][ T8249] ? do_getname+0x2e/0x250 [ 216.551546][ T8249] kmem_cache_alloc_noprof+0x99/0x680 [ 216.551570][ T8249] ? do_getname+0x2e/0x250 [ 216.551601][ T8249] do_getname+0x2e/0x250 [ 216.551625][ T8249] ? getname_flags+0x11/0x20 [ 216.551650][ T8249] do_sys_openat2+0xce/0x200 [ 216.551675][ T8249] ? __se_sys_futex+0x3a8/0x450 [ 216.551701][ T8249] ? __pfx_do_sys_openat2+0x10/0x10 [ 216.551731][ T8249] ? rcu_is_watching+0x16/0xb0 [ 216.551760][ T8249] __x64_sys_openat+0x138/0x170 [ 216.551780][ T8249] do_syscall_64+0x166/0x520 [ 216.551805][ T8249] ? trace_irq_disable+0x3b/0x140 [ 216.551825][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.551843][ T8249] ? clear_bhb_loop+0x70/0xc0 [ 216.551865][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.551883][ T8249] RIP: 0033:0x7f975826f559 [ 216.551900][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.551915][ T8249] RSP: 002b:00007f97564be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 216.551933][ T8249] RAX: ffffffffffffffda RBX: 00007f97584f5fa0 RCX: 00007f975826f559 [ 216.551946][ T8249] RDX: 0000000000028100 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 216.551958][ T8249] RBP: 00007f9758306b20 R08: 0000000000000000 R09: 0000000000000000 [ 216.551970][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.551983][ T8249] R13: 00007f97584f6038 R14: 00007f97584f5fa0 R15: 00007ffe3157da48 [ 216.552012][ T8249] [ 216.741409][ T8254] overlayfs: missing 'lowerdir' [ 216.792868][ T1001] usb 3-1: USB disconnect, device number 42 [ 217.118716][ T5589] usb 2-1: USB disconnect, device number 15 [ 217.466735][ T8284] FAULT_INJECTION: forcing a failure. [ 217.466735][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 217.466768][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.1.848 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.466789][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 217.466800][ T8284] Call Trace: [ 217.466808][ T8284] [ 217.466817][ T8284] dump_stack_lvl+0xe8/0x150 [ 217.466850][ T8284] should_fail_ex+0x46b/0x600 [ 217.466885][ T8284] should_failslab+0xa8/0x100 [ 217.466911][ T8284] ? do_getname+0x2e/0x250 [ 217.466938][ T8284] kmem_cache_alloc_noprof+0x99/0x680 [ 217.466962][ T8284] ? do_getname+0x2e/0x250 [ 217.466993][ T8284] do_getname+0x2e/0x250 [ 217.467010][ T8284] ? getname_flags+0x11/0x20 [ 217.467025][ T8284] do_sys_openat2+0xce/0x200 [ 217.467039][ T8284] ? __se_sys_futex+0x3a8/0x450 [ 217.467053][ T8284] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.467070][ T8284] ? rcu_is_watching+0x16/0xb0 [ 217.467087][ T8284] __x64_sys_openat+0x138/0x170 [ 217.467099][ T8284] do_syscall_64+0x166/0x520 [ 217.467113][ T8284] ? trace_irq_disable+0x3b/0x140 [ 217.467125][ T8284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.467136][ T8284] ? clear_bhb_loop+0x70/0xc0 [ 217.467148][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.467158][ T8284] RIP: 0033:0x7ff47c7cf559 [ 217.467169][ T8284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.467177][ T8284] RSP: 002b:00007ff47aa26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 217.467189][ T8284] RAX: ffffffffffffffda RBX: 00007ff47ca55fa0 RCX: 00007ff47c7cf559 [ 217.467196][ T8284] RDX: 0000000000028100 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 217.467203][ T8284] RBP: 00007ff47c866b20 R08: 0000000000000000 R09: 0000000000000000 [ 217.467209][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.467215][ T8284] R13: 00007ff47ca56038 R14: 00007ff47ca55fa0 R15: 00007ffe66d8aed8 [ 217.467232][ T8284] [ 217.819861][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 218.158070][ T8312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 218.158098][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 218.159242][ T8315] vhci_hcd: xmit failed -107 [ 218.220560][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 218.237895][ T6376] vhci_hcd vhci_hcd.0: stop threads [ 218.237915][ T6376] vhci_hcd vhci_hcd.0: release socket [ 218.238022][ T6376] vhci_hcd vhci_hcd.0: disconnect device [ 218.645667][ T8330] overlayfs: failed to clone upperpath [ 219.351759][ T5594] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 219.522878][ T5594] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 219.524542][ T5594] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.524592][ T5594] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.527543][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.527567][ T5594] usb 4-1: Product: syz [ 219.527580][ T5594] usb 4-1: Manufacturer: syz [ 219.527592][ T5594] usb 4-1: SerialNumber: syz [ 219.607233][ T5594] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 219.607259][ T5594] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 219.607305][ T5594] usbserial_generic 4-1:1.0: device has no bulk endpoints [ 219.805697][ T5594] usb 4-1: USB disconnect, device number 23 [ 219.954118][ T8384] netlink: 64 bytes leftover after parsing attributes in process `syz.5.880'. [ 220.096753][ T8389] evm: overlay not supported [ 221.108719][ T8444] 9pnet_virtio: no channels available for device syz [ 221.259425][ T8454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.907'. [ 221.404237][ T5745] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 221.572659][ T5745] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 221.574767][ T5745] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.574815][ T5745] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.574834][ T5745] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.584111][ T5745] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.584135][ T5745] usb 1-1: Product: syz [ 221.584149][ T5745] usb 1-1: Manufacturer: syz [ 221.584162][ T5745] usb 1-1: SerialNumber: syz [ 221.610570][ T5745] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 221.610595][ T5745] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 221.610636][ T5745] usbserial_generic 1-1:1.0: device has no bulk endpoints [ 221.844250][ T5594] usb 1-1: USB disconnect, device number 34 [ 222.551792][ T5594] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 222.704493][ T5594] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 222.708085][ T5594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.708136][ T5594] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.710946][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.710970][ T5594] usb 2-1: Product: syz [ 222.710983][ T5594] usb 2-1: Manufacturer: syz [ 222.710997][ T5594] usb 2-1: SerialNumber: syz [ 222.811936][ T5745] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 222.972056][ T5745] usb 4-1: Using ep0 maxpacket: 32 [ 222.972913][ T5745] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 222.974507][ T5745] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 222.977964][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 222.977991][ T5745] usb 4-1: Product: syz [ 222.978003][ T5745] usb 4-1: Manufacturer: syz [ 222.978016][ T5745] usb 4-1: SerialNumber: syz [ 222.996033][ T5745] usb 4-1: config 0 descriptor?? [ 222.997821][ T8519] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 223.031984][ T5745] hub 4-1:0.0: bad descriptor, ignoring hub [ 223.032026][ T5745] hub 4-1:0.0: probe with driver hub failed with error -5 [ 223.099705][ T5745] chaoskey 4-1:0.0: Unable to register with hwrng [ 223.393553][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.5.945'. [ 223.432135][ T5594] usb 4-1: USB disconnect, device number 24 [ 223.771777][ T5594] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 223.801859][ T1001] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 223.921770][ T5594] usb 4-1: Using ep0 maxpacket: 32 [ 223.922604][ T5594] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 223.924300][ T5594] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 223.956125][ T5594] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 223.960472][ T5594] usb 4-1: Product: syz [ 223.960497][ T5594] usb 4-1: Manufacturer: syz [ 223.960511][ T5594] usb 4-1: SerialNumber: syz [ 223.980535][ T1001] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.984304][ T1001] usb 1-1: not running at top speed; connect to a high speed hub [ 223.984344][ T1001] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 223.989307][ T1001] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 223.989333][ T1001] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 2 [ 224.026893][ T1001] usb 1-1: string descriptor 0 read error: -22 [ 224.027030][ T1001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.053131][ T5594] usb 4-1: config 0 descriptor?? [ 224.055043][ T8552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 224.058632][ T5594] hub 4-1:0.0: bad descriptor, ignoring hub [ 224.058670][ T5594] hub 4-1:0.0: probe with driver hub failed with error -5 [ 224.100586][ T5594] chaoskey 4-1:0.0: Unable to register with hwrng [ 225.330113][ T5594] usb 2-1: USB disconnect, device number 16 [ 225.712118][ T5594] usb 4-1: USB disconnect, device number 25 [ 226.141784][ T5573] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 226.185162][ T8634] 9pnet_virtio: no channels available for device syz [ 226.301380][ T8639] 9pnet_virtio: no channels available for device syz [ 226.301786][ T5573] usb 2-1: Using ep0 maxpacket: 16 [ 226.305159][ T5573] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 226.328419][ T5573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.328447][ T5573] usb 2-1: config 0 has no interfaces? [ 226.330992][ T5573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.331101][ T5573] usb 2-1: Product: syz [ 226.331115][ T5573] usb 2-1: Manufacturer: syz [ 226.331128][ T5573] usb 2-1: SerialNumber: syz [ 226.350064][ T5573] usb 2-1: config 0 descriptor?? [ 226.597561][ T5594] usb 1-1: USB disconnect, device number 35 [ 227.491811][ T5573] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 227.657193][ T5573] usb 1-1: unable to get BOS descriptor or descriptor too short [ 227.657874][ T5573] usb 1-1: not running at top speed; connect to a high speed hub [ 227.657912][ T5573] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 227.659274][ T5573] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 227.659296][ T5573] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 2 [ 227.703778][ T5573] usb 1-1: string descriptor 0 read error: -22 [ 227.703912][ T5573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.510063][ T3348] IPVS: starting estimator thread 0... [ 228.634353][ T8723] IPVS: using max 10 ests per chain, 24000 per kthread [ 228.658687][ T5595] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 228.907015][ T5594] usb 2-1: USB disconnect, device number 17 [ 229.102076][ T8750] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8750] [ 230.259639][ T5594] usb 1-1: USB disconnect, device number 36 [ 230.619597][ T8807] jffs2: notice: (8807) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 231.002685][ T5589] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 231.192618][ T5589] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 231.194788][ T5589] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.194820][ T5589] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 231.194902][ T5589] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.194927][ T5589] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.194956][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.211288][ T5589] usb 2-1: config 0 descriptor?? [ 231.217042][ T8818] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.473840][ T8847] overlayfs: failed to clone upperpath [ 231.663451][ T5589] dragonrise 0003:0079:0006.0007: unknown main item tag 0x5 [ 231.663489][ T5589] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 231.663516][ T5589] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 231.663541][ T5589] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 231.663566][ T5589] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0 [ 231.663591][ T5589] dragonrise 0003:0079:0006.0007: unbalanced collection at end of report description [ 231.664496][ T5589] dragonrise 0003:0079:0006.0007: probe with driver dragonrise failed with error -22 [ 231.847515][ T5589] usb 2-1: USB disconnect, device number 18 [ 232.191848][ T5594] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 232.327997][ T8888] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.328025][ T8888] block device autoloading is deprecated and will be removed. [ 232.364766][ T5594] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.366028][ T5594] usb 1-1: not running at top speed; connect to a high speed hub [ 232.366066][ T5594] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 232.375240][ T5594] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 232.375265][ T5594] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 2 [ 232.421870][ T5594] usb 1-1: string descriptor 0 read error: -22 [ 232.421995][ T5594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.600525][ T8889] md: could not open device unknown-block(1,6). [ 232.600590][ T8889] md: error, md_import_device() returned -16 [ 232.873705][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1100'. [ 234.041743][ T35] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 234.151314][ T8965] warning: `syz.2.1123' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 234.282702][ T35] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 234.286683][ T35] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 234.286716][ T35] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 234.286731][ T35] usb 2-1: config 2 interface 0 has no altsetting 0 [ 234.289873][ T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.289899][ T35] usb 2-1: Product: syz [ 234.289913][ T35] usb 2-1: Manufacturer: syz [ 234.289926][ T35] usb 2-1: SerialNumber: syz [ 234.629475][ T35] usb 2-1: USB disconnect, device number 19 [ 234.968544][ T35] usb 1-1: USB disconnect, device number 37 [ 236.971960][ T1001] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 237.101848][ T1001] usb 2-1: device descriptor read/64, error -71 [ 237.140956][ T9023] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 237.296471][ T9023] team0 (unregistering): Port device team_slave_0 removed [ 237.347301][ T9023] team0 (unregistering): Port device team_slave_1 removed [ 237.351801][ T1001] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 237.482589][ T1001] usb 2-1: device descriptor read/64, error -71 [ 237.549765][ T9033] rxe_eth0 speed is unknown, defaulting to 1000 [ 237.594492][ T1001] usb usb2-port1: attempt power cycle [ 237.811778][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 237.811856][ T5595] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 237.933291][ T1001] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.954993][ T1001] usb 2-1: device descriptor read/8, error -71 [ 238.192524][ T1001] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 238.220288][ T1001] usb 2-1: device descriptor read/8, error -71 [ 238.323160][ T1001] usb usb2-port1: unable to enumerate USB device [ 240.291960][ T5595] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 240.292262][ T5595] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.077537][ T9120] jffs2: notice: (9120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.537344][ T9131] uprobe: syz.2.1193:9131 failed to unregister, leaking uprobe [ 242.136881][ T9160] openvswitch: netlink: Missing key (keys=d0, expected=40300) [ 242.681924][ T9189] netlink: 'syz.2.1218': attribute type 10 has an invalid length. [ 242.681948][ T9189] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1218'. [ 243.096675][ T9204] binder: BINDER_SET_CONTEXT_MGR already set [ 243.096692][ T9204] binder: 9203:9204 ioctl 4018620d 200000000400 returned -16 [ 243.892051][ T35] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 244.027506][ T9230] binder: 9228:9230 ioctl c0306201 0 returned -14 [ 244.042032][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 244.042716][ T35] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.044861][ T35] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 244.044914][ T35] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.044936][ T35] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.044959][ T35] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.044979][ T35] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.045013][ T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.293994][ T9239] process 'syz.5.1239' launched './file2' with NULL argv: empty string added [ 244.369548][ T35] usb 2-1: GET_CAPABILITIES returned 0 [ 244.369596][ T35] usbtmc 2-1:16.0: can't read capabilities [ 244.376024][ T9242] jffs2: notice: (9242) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 244.472944][ T9248] jffs2: notice: (9248) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 244.637608][ T9218] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 244.638288][ T1001] usb 2-1: USB disconnect, device number 24 [ 246.463536][ T9304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.689501][ T9315] 9pnet_virtio: no channels available for device syz [ 246.782934][ T3325] IPVS: starting estimator thread 0... [ 246.871847][ T9322] IPVS: using max 8 ests per chain, 19200 per kthread [ 247.571526][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1288'. [ 247.665342][ T9373] macvlan0: entered allmulticast mode [ 248.046180][ T9387] openvswitch: netlink: Missing key (keys=d0, expected=500) [ 248.113672][ T5588] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 248.585761][ T3325] IPVS: starting estimator thread 0... [ 248.671845][ T9413] IPVS: using max 9 ests per chain, 21600 per kthread [ 249.926279][ T5588] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 250.351995][ T9498] netlink: 'syz.3.1326': attribute type 1 has an invalid length. [ 250.433790][ T9501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1326'. [ 250.458285][ T9498] bond1: entered promiscuous mode [ 250.479700][ T9498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.480187][ T9501] bond1: entered allmulticast mode [ 250.588009][ T9498] bond1: (slave bridge1): making interface the new active one [ 250.588034][ T9498] bridge1: entered promiscuous mode [ 250.588386][ T9498] bridge1: entered allmulticast mode [ 250.621347][ T9498] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 251.526161][ T9490] Set syz1 is full, maxelem 6117 reached [ 252.138197][ T9574] fuse: fd is not a fuse device [ 252.385278][ T9580] tipc: Started in network mode [ 252.385310][ T9580] tipc: Node identity d2aef398441b, cluster identity 4711 [ 252.385797][ T9580] tipc: Enabled bearer , priority 0 [ 252.390008][ T9580] syzkaller0: entered promiscuous mode [ 252.390030][ T9580] syzkaller0: entered allmulticast mode [ 252.472943][ T9580] tipc: Resetting bearer [ 252.560670][ T9578] tipc: Resetting bearer [ 252.667712][ T9602] fuse: fd is not a fuse device [ 252.725650][ T9578] tipc: Disabling bearer [ 253.327949][ T9624] openvswitch: netlink: Key type 30 is not supported [ 255.553851][ T9735] overlayfs: failed to clone upperpath [ 255.739073][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.739143][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.854057][ T9749] 9pnet_virtio: no channels available for device syz [ 255.890943][ T9752] C: renamed from veth1_to_team (while UP) [ 255.916882][ T9752] netlink: 'syz.5.1420': attribute type 3 has an invalid length. [ 255.916906][ T9752] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1420'. [ 255.918971][ T9752] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 256.094077][ T9761] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1424'. [ 256.098580][ T9761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.839837][ T36] audit: type=1800 audit(1792642483.531:2): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1375" name="/" dev="fuse" ino=1 res=0 errno=0 [ 257.226199][ T9814] netlink: 'syz.0.1444': attribute type 3 has an invalid length. [ 257.364308][ T9819] fuse: fd is not a fuse device [ 257.582590][ T35] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 257.790241][ T35] usb 2-1: Using ep0 maxpacket: 8 [ 257.793908][ T35] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 257.795208][ T35] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 257.795232][ T35] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 257.795276][ T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.263609][ T9858] fuse: fd is not a fuse device [ 259.043669][ T9892] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1470'. [ 259.076924][ T9894] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1471'. [ 259.196386][ T9901] netlink: 'syz.3.1475': attribute type 29 has an invalid length. [ 259.197515][ T9901] netlink: 'syz.3.1475': attribute type 29 has an invalid length. [ 259.198390][ T9901] netlink: 'syz.3.1475': attribute type 29 has an invalid length. [ 259.695216][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 259.726165][ T9926] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6841] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[9926] [ 259.954673][ T9936] 9pnet_virtio: no channels available for device syz [ 260.266392][ T5745] usb 2-1: USB disconnect, device number 25 [ 260.418352][ T9959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'. [ 260.533252][ T9962] 9pnet_virtio: no channels available for device syz [ 260.934655][ T9989] random: crng reseeded on system resumption [ 261.057954][ T9994] netlink: 'syz.2.1511': attribute type 23 has an invalid length. [ 261.058241][ T9994] netlink: 'syz.2.1511': attribute type 11 has an invalid length. [ 261.813446][T10034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.840174][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 262.180916][T10059] netlink: 'syz.5.1538': attribute type 29 has an invalid length. [ 262.188894][T10059] netlink: 'syz.5.1538': attribute type 29 has an invalid length. [ 264.340085][T10110] netlink: 'syz.0.1553': attribute type 29 has an invalid length. [ 264.341123][T10110] netlink: 'syz.0.1553': attribute type 29 has an invalid length. [ 264.964838][ T5588] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 265.092427][ T5588] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.135492][T10142] random: crng reseeded on system resumption [ 268.741330][T10227] bpf: Bad value for 'gid' [ 268.887755][T10235] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 268.887789][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 268.887823][T10235] team_slave_1: entered promiscuous mode [ 268.887842][T10235] team_slave_1: entered allmulticast mode [ 268.957638][T10235] team0: Port device team_slave_1 removed [ 269.204763][T10254] netlink: 'syz.3.1611': attribute type 29 has an invalid length. [ 269.205878][T10254] netlink: 'syz.3.1611': attribute type 29 has an invalid length. [ 269.209364][T10254] netlink: 'syz.3.1611': attribute type 29 has an invalid length. [ 269.511802][ T5734] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.661771][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 269.665172][ T5734] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 269.666876][ T5734] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.666899][ T5734] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.666934][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.694600][ T5734] usb 2-1: config 0 descriptor?? [ 270.014230][T10285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1625'. [ 270.014266][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1625'. [ 272.345805][ T198] usb 2-1: USB disconnect, device number 26 [ 272.893458][T10424] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1681'. [ 273.454767][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1688'. [ 274.430082][T10505] Driver unsupported XDP return value 0 on prog (id 112) dev N/A, expect packet loss! [ 274.523014][T10508] binder: 10507:10508 ioctl c0306201 0 returned -14 [ 277.357845][T10632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1752'. [ 277.764667][T10654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1764'. [ 278.171447][T10682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1776'. [ 278.674050][T10708] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1788'. [ 278.786946][T10714] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1790'. [ 278.958225][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1799'. [ 278.959052][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1799'. [ 278.959602][T10724] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1799'. [ 279.138292][T10739] fuse: Bad value for 'fd' [ 279.457649][T10756] tipc: Enabling of bearer rejected, failed to enable media [ 279.717908][T10772] netlink: 'syz.3.1813': attribute type 2 has an invalid length. [ 280.609724][T10826] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1837'. [ 281.299474][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1852'. [ 281.896372][T10895] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 282.030388][T10898] netlink: 'syz.1.1870': attribute type 5 has an invalid length. [ 282.030417][T10898] netlink: 'syz.1.1870': attribute type 5 has an invalid length. [ 282.364956][T10916] __nla_validate_parse: 3 callbacks suppressed [ 282.364979][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 282.866383][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 283.987662][T11011] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1921'. [ 284.507335][T11046] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1934'. [ 285.139332][T11080] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1945'. [ 285.139363][T11080] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1945'. [ 285.605497][T11107] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1957'. [ 286.006110][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 286.440606][T11144] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1969'. [ 286.440645][T11144] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1969'. [ 288.283230][T11253] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2010'. [ 288.860203][T11292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2025'. [ 289.417854][T11325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2037'. [ 290.050789][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2051'. [ 290.538345][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 290.791951][T11381] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 290.859621][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2064'. [ 291.318025][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 291.318062][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2078'. [ 291.349564][T11421] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2079'. [ 291.417606][T11427] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2081'. [ 294.189860][T11580] __nla_validate_parse: 1 callbacks suppressed [ 294.189881][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2134'. [ 295.163970][T11628] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 295.914906][T11671] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2166'. [ 296.590351][T11704] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2180'. [ 297.357383][T11744] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2192'. [ 297.463862][T11751] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 298.118858][T11785] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2207'. [ 298.122187][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 299.583880][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 300.033791][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'. [ 300.207297][T11897] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2251'. [ 300.207325][T11897] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2251'. [ 300.848258][ T5588] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 300.935960][T11934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2265'. [ 300.935990][T11934] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2265'. [ 302.098767][T11980] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2277'. [ 302.098794][T11980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2277'. [ 302.316053][T11987] bridge0: port 3(bond0) entered blocking state [ 302.317828][T11987] bridge0: port 3(bond0) entered disabled state [ 302.318043][T11987] bond0: entered allmulticast mode [ 302.318062][T11987] bond_slave_0: entered allmulticast mode [ 302.318085][T11987] bond_slave_1: entered allmulticast mode [ 302.328265][T11987] bond0: entered promiscuous mode [ 302.328288][T11987] bond_slave_0: entered promiscuous mode [ 302.328519][T11987] bond_slave_1: entered promiscuous mode [ 302.389541][T11987] bridge0: port 3(bond0) entered blocking state [ 302.389684][T11987] bridge0: port 3(bond0) entered forwarding state [ 302.643055][T12000] fuse: Bad value for 'fd' [ 303.467993][T12038] fuse: Bad value for 'fd' [ 304.118521][T12074] fuse: fd is not a fuse device [ 304.190143][T12077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2311'. [ 305.252318][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 306.559890][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.559921][T12199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.585577][T12202] openvswitch: netlink: IP tunnel dst address not specified [ 306.601063][T12199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.601092][T12199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.663193][T12253] TCP: TCP_TX_DELAY enabled [ 309.175834][T12333] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2401'. [ 309.175865][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 309.441376][T12353] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6841] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12353] [ 310.189600][T12390] fuse: Bad value for 'fd' [ 310.767414][T12421] futex_wake_op: syz.1.2434 tries to shift op by 144; fix this program [ 310.825109][T12425] fuse: fd is not a fuse device [ 311.615820][T12465] fuse: Bad value for 'fd' [ 311.624711][T12462] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2447'. [ 312.012879][T12485] tipc: New replicast peer: 255.255.255.255 [ 312.017018][T12485] tipc: Enabled bearer , priority 10 [ 312.351051][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 313.037930][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 313.828028][T12558] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.545159][T12558] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.186526][T12558] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.384408][T12558] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.179580][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.188759][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.856477][T12716] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2544'. [ 317.918820][T12726] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2547'. [ 318.051894][ T3348] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.111916][ T3348] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.210353][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2555'. [ 318.572018][ T6376] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.845897][T12766] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2560'. [ 318.862082][ T6376] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.044748][T12781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2563'. [ 319.045310][T12781] unsupported nlmsg_type 40 [ 320.077423][T12836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 320.649836][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2602'. [ 336.414479][ T5595] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.457017][ T5595] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.458785][ T5595] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.494996][ T5595] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.523938][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.827685][ T5588] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.871299][ T5588] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.886119][ T5588] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.913515][ T5588] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.915870][ T5588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.447480][ T5595] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 337.517546][ T5595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 337.528728][ T5595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 337.532073][ T5595] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 337.551882][ T5595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.252730][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 338.297201][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 338.298673][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 338.299715][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 338.300425][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 338.448142][ T5595] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 338.509154][ T5595] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 338.510708][ T5595] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 338.533401][ T5595] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 338.537245][ T5595] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.696706][ T5595] Bluetooth: hci4: command tx timeout [ 339.011746][ T5588] Bluetooth: hci6: command tx timeout [ 339.811789][ T5588] Bluetooth: hci7: command tx timeout [ 340.451791][ T5588] Bluetooth: hci9: command tx timeout [ 340.612474][ T5588] Bluetooth: hci8: command tx timeout [ 340.771721][ T5588] Bluetooth: hci4: command tx timeout [ 341.091767][ T5588] Bluetooth: hci6: command tx timeout [ 341.891940][ T5588] Bluetooth: hci7: command tx timeout [ 342.531783][ T5588] Bluetooth: hci9: command tx timeout [ 342.692383][ T5588] Bluetooth: hci8: command tx timeout [ 342.851806][ T5588] Bluetooth: hci4: command tx timeout [ 343.171766][ T5588] Bluetooth: hci6: command tx timeout [ 343.971789][ T5588] Bluetooth: hci7: command tx timeout [ 344.612224][ T5588] Bluetooth: hci9: command tx timeout [ 344.772382][ T5588] Bluetooth: hci8: command tx timeout [ 344.931881][ T5588] Bluetooth: hci4: command tx timeout [ 345.251819][ T5588] Bluetooth: hci6: command tx timeout [ 346.051853][ T5588] Bluetooth: hci7: command tx timeout [ 346.691878][ T5588] Bluetooth: hci9: command tx timeout [ 346.852443][ T5588] Bluetooth: hci8: command tx timeout [ 396.249264][ T5595] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 396.289238][ T5595] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 396.290746][ T5595] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 396.306846][ T5595] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 396.309459][ T5595] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 397.406484][ T5588] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 397.451542][ T5588] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 397.465744][ T5588] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 397.484244][ T5588] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 397.489523][ T5588] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 397.759846][ T5588] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 397.802052][ T5588] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 397.810424][ T5588] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 397.842024][ T5588] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 397.843594][ T5588] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 398.382280][ T5595] Bluetooth: hci10: command tx timeout [ 398.598935][ T5588] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 398.664140][ T5588] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 398.665693][ T5588] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 398.666895][ T5588] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 398.668208][ T5588] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 398.975825][ T5588] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 399.019370][ T5588] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 399.034611][ T5588] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 399.036952][ T5588] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 399.037741][ T5588] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 399.731980][ T5588] Bluetooth: hci11: command tx timeout [ 400.051752][ T5588] Bluetooth: hci12: command tx timeout [ 400.451878][ T5588] Bluetooth: hci10: command tx timeout [ 400.691761][ T5588] Bluetooth: hci13: command tx timeout [ 401.171852][ T5588] Bluetooth: hci14: command tx timeout [ 401.811705][ T5588] Bluetooth: hci11: command tx timeout [ 402.131832][ T5588] Bluetooth: hci12: command tx timeout [ 402.531723][ T5588] Bluetooth: hci10: command tx timeout [ 402.771762][ T5588] Bluetooth: hci13: command tx timeout [ 403.251817][ T5588] Bluetooth: hci14: command tx timeout [ 403.891862][ T5588] Bluetooth: hci11: command tx timeout [ 404.215023][ T5588] Bluetooth: hci12: command tx timeout [ 404.611770][ T5588] Bluetooth: hci10: command tx timeout [ 404.851922][ T5588] Bluetooth: hci13: command tx timeout [ 405.331828][ T5588] Bluetooth: hci14: command tx timeout [ 405.971835][ T5588] Bluetooth: hci11: command tx timeout [ 406.291764][ T5588] Bluetooth: hci12: command tx timeout [ 406.931824][ T5588] Bluetooth: hci13: command tx timeout [ 407.411828][ T5588] Bluetooth: hci14: command tx timeout [ 425.831642][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 425.838649][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P28 [ 425.845761][ C1] rcu: (detected by 1, t=10502 jiffies, g=43289, q=6250 ncpus=2) [ 425.853586][ C1] task:ktimers/1 state:R running task stack:20128 pid:28 tgid:28 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 425.867163][ C1] Call Trace: [ 425.870442][ C1] [ 425.873316][ C1] sched_show_task+0x4aa/0x5f0 [ 425.878081][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 425.883362][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 425.888568][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 425.893616][ C1] print_other_cpu_stall+0xfbf/0x1350 [ 425.898986][ C1] ? notifier_call_chain+0x1a5/0x3d0 [ 425.904361][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 425.910154][ C1] ? __timekeeping_advance+0xe58/0x1370 [ 425.915696][ C1] ? __timekeeping_advance+0xe58/0x1370 [ 425.921257][ C1] rcu_sched_clock_irq+0xa05/0x1090 [ 425.926449][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 425.932068][ C1] ? rcu_is_watching+0x16/0xb0 [ 425.936833][ C1] ? trace_softirq_raise+0x3b/0x130 [ 425.942023][ C1] update_process_times+0x234/0x2d0 [ 425.947213][ C1] tick_nohz_handler+0x38f/0x6b0 [ 425.952145][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 425.957593][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 425.962697][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 425.968163][ C1] __hrtimer_run_queues+0x3a0/0xaf0 [ 425.973403][ C1] hrtimer_interrupt+0x4c2/0xa80 [ 425.978345][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 425.984315][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 425.989954][ C1] [ 425.992875][ C1] [ 425.995790][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 426.001762][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 426.008168][ C1] Code: f7 e8 3d 90 42 f6 f7 c3 00 02 00 00 74 05 e8 a0 ff 6e f6 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 91 34 f6 65 48 8b 05 2c 21 67 08 48 85 c0 74 18 5b 41 5e c3 [ 426.027762][ C1] RSP: 0018:ffffc90000a2fa08 EFLAGS: 00000206 [ 426.033823][ C1] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000002 [ 426.041794][ C1] RDX: 0000000000000002 RSI: ffffffff8dac3a29 RDI: 0000000000000001 [ 426.049761][ C1] RBP: ffffc90000a2fad0 R08: ffffffff90d244bf R09: 1ffffffff21a4897 [ 426.057730][ C1] R10: dffffc0000000000 R11: fffffbfff21a4898 R12: 1ffff92000145f4d [ 426.065687][ C1] R13: 0000000000000246 R14: ffff8880633a23a8 R15: ffffc90000a2fa60 [ 426.073679][ C1] rt_spin_lock+0x17a/0x400 [ 426.078182][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 426.083198][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 426.088231][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.093594][ C1] advance_sched+0xc8/0xc90 [ 426.098109][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 426.103920][ C1] ? __pfx_advance_sched+0x10/0x10 [ 426.109035][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 426.114246][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 426.119344][ C1] handle_softirqs+0x1da/0x6d0 [ 426.124102][ C1] run_ktimerd+0x6a/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.128427][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 426.133367][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 426.138382][ C1] kthread+0x38b/0x470 [ 426.142443][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 426.147900][ C1] ? __pfx_kthread+0x10/0x10 [ 426.152478][ C1] ret_from_fork+0x514/0xb70 [ 426.157057][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 426.162177][ C1] ? __switch_to+0xc78/0x1410 [ 426.166842][ C1] ? __pfx_kthread+0x10/0x10 [ 426.171417][ C1] ret_from_fork_asm+0x1a/0x30 [ 426.176174][ C1]