last executing test programs: 2m29.417412998s ago: executing program 1 (id=78): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m28.866289554s ago: executing program 1 (id=83): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81c99, 0x0) 2m28.539840667s ago: executing program 1 (id=84): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m28.332513763s ago: executing program 1 (id=87): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2m28.094072118s ago: executing program 1 (id=89): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) 2m27.223807317s ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 2m12.107169627s ago: executing program 32 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./nfsd\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='tcp 2', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/threads\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 16.605274284s ago: executing program 5 (id=704): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 16.33646223s ago: executing program 5 (id=708): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="92010000055bed40020000000000000003010902380002000000060904c702010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYBLOB="98"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 14.972386797s ago: executing program 3 (id=713): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 14.194719164s ago: executing program 2 (id=716): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01000000040000000000000000000000000000000000c7c7e000ac00"], 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) 12.525011637s ago: executing program 2 (id=717): memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 11.759621577s ago: executing program 3 (id=718): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x18, 0x7, 0x4, "7eccadc8", "24b23d48"}}, 0x0}, 0x0) 11.691213426s ago: executing program 5 (id=720): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000080)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000040)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.573746178s ago: executing program 2 (id=721): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) 8.414589863s ago: executing program 3 (id=730): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='timeo\x00', &(0x7f0000000440)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 8.406403466s ago: executing program 5 (id=731): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="92010000055bed40020000000000000003010902380002000000060904c702010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYBLOB="98"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 8.345873522s ago: executing program 2 (id=732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 8.013064745s ago: executing program 3 (id=733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x3, 0x1}, 0x50) 7.947696093s ago: executing program 4 (id=734): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595feff", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fe8000"/37], 0x54}}, 0x0) 4.909854338s ago: executing program 0 (id=735): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000780)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$smackfs_netlabel(r0, 0x0, 0x0) 4.827353709s ago: executing program 2 (id=736): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) 4.260236514s ago: executing program 4 (id=737): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004810) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe28, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x3a4, 0xc5, &(0x7f0000000940)=""/197, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000a80)=[r1, r1]}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 3.51858496s ago: executing program 4 (id=738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.477823352s ago: executing program 0 (id=739): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffe0}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x48000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.350487259s ago: executing program 5 (id=740): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf7, 0x18, 0x7, 0x4, "7eccadc8", "24b23d48"}}, 0x0}, 0x0) 3.168337022s ago: executing program 2 (id=741): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000080)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000040)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.954207304s ago: executing program 3 (id=742): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f505010003010902"], 0x0) 2.716533104s ago: executing program 4 (id=743): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='proto\x00', &(0x7f0000000300)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000400)='timeo\x00', &(0x7f0000000440)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 2.524407887s ago: executing program 4 (id=744): getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=""/31, &(0x7f0000000140)=0x1f) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x1, 0x15, 0x1f, 0x143, &(0x7f0000000040)}) 2.225052094s ago: executing program 0 (id=745): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.42421904s ago: executing program 3 (id=746): socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xc0, 0x3b, 0x63, 0x10, 0x16c0, 0x5df, 0x2b48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x6, 0x10, 0x4, "", [{{0x9, 0x4, 0x7f, 0x7, 0x0, 0x3, 0x0, 0x0, 0x9}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prctl$PR_SCHED_CORE(0x3e, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="01fe000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000100)={0x8, "ddd60015cbbba33438dbaf77fe83733e0351c666ce25ca755b3ceb1c34e6b45a", 0x2, 0x100, 0x6, 0xfffffff9, 0x0, 0x0, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000006900000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0xe9) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x21, 0x1, 0x0, "6906001022366ccee4ba5686b4f801fef4372f2c74f6024305f11fd3454ad23d", 0x32314d48}) 908.248015ms ago: executing program 0 (id=747): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595feff", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fe8000"/37], 0x54}}, 0x0) 791.082475ms ago: executing program 0 (id=748): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000008000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004810) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe28, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x3a4, 0xc5, &(0x7f0000000940)=""/197, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x2d, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000000a80)=[r1, r1]}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 598.788414ms ago: executing program 0 (id=749): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc, r4}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000780)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$smackfs_netlabel(r0, 0x0, 0x0) 476.457807ms ago: executing program 4 (id=750): socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc048aeca, &(0x7f00000000c0)={0x7, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x9b5, 0x0, 0xb}, {0x804}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="92010000055bed40020000000000000003010902380002000000060904c702010e0101000300d009050a000000000000090400000101be2600090500000000000000080b878a", @ANYBLOB="98"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x68}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 0s ago: executing program 5 (id=751): syz_usb_connect(0x0, 0x120, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='veno', 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x28d00, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mode [ 102.867679][ T5606] team0: Port device team_slave_0 added [ 102.911633][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.936906][ T5606] team0: Port device team_slave_1 added [ 102.960684][ T5605] team0: Port device team_slave_0 added [ 102.964103][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.019300][ T5602] team0: Port device team_slave_0 added [ 103.021656][ T5605] team0: Port device team_slave_1 added [ 103.046808][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.072754][ T5602] team0: Port device team_slave_1 added [ 103.108755][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.110063][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.110075][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.110095][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.183303][ T5607] team0: Port device team_slave_0 added [ 103.202998][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.203010][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.203030][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.251598][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.251640][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.251708][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.289086][ T5607] team0: Port device team_slave_1 added [ 103.322077][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.322090][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.322109][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.323407][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.323421][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.323451][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.419062][ T5610] team0: Port device team_slave_0 added [ 103.421841][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.421853][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.421873][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.447847][ T59] Bluetooth: hci0: command tx timeout [ 103.501492][ T5610] team0: Port device team_slave_1 added [ 103.519071][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.519083][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.519102][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.588647][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.588659][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.588679][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.607869][ T59] Bluetooth: hci1: command tx timeout [ 103.848119][ T5616] Bluetooth: hci3: command tx timeout [ 103.848221][ T59] Bluetooth: hci2: command tx timeout [ 103.928119][ T5616] Bluetooth: hci4: command tx timeout [ 104.030340][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.030354][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.030373][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.041889][ T5606] hsr_slave_0: entered promiscuous mode [ 104.046052][ T5606] hsr_slave_1: entered promiscuous mode [ 104.119871][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.119889][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.119921][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.180875][ T5605] hsr_slave_0: entered promiscuous mode [ 104.182145][ T5605] hsr_slave_1: entered promiscuous mode [ 104.184918][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 104.184990][ T5605] Cannot create hsr debugfs directory [ 104.221116][ T5602] hsr_slave_0: entered promiscuous mode [ 104.222100][ T5602] hsr_slave_1: entered promiscuous mode [ 104.222755][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 104.222773][ T5602] Cannot create hsr debugfs directory [ 104.333503][ T5607] hsr_slave_0: entered promiscuous mode [ 104.334531][ T5607] hsr_slave_1: entered promiscuous mode [ 104.335219][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 104.335236][ T5607] Cannot create hsr debugfs directory [ 104.448763][ T5610] hsr_slave_0: entered promiscuous mode [ 104.450438][ T5610] hsr_slave_1: entered promiscuous mode [ 104.451131][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 104.451148][ T5610] Cannot create hsr debugfs directory [ 105.441672][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.491642][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.496402][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.523104][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.528243][ T5616] Bluetooth: hci0: command tx timeout [ 105.541510][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.573672][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.603658][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.633619][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.689129][ T5616] Bluetooth: hci1: command tx timeout [ 105.772097][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.802306][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.805594][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.828959][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.845819][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.884877][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.915541][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.927973][ T5616] Bluetooth: hci2: command tx timeout [ 105.928003][ T59] Bluetooth: hci3: command tx timeout [ 105.954687][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.008119][ T5616] Bluetooth: hci4: command tx timeout [ 106.099889][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.144860][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.157569][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.182175][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.186870][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.222301][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.264063][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.293127][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.430631][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.462484][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.483514][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.511794][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.528590][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.561277][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.606156][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.631464][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.730338][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.857194][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.895861][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.914527][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.951502][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.955925][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.993326][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.000990][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.016905][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.042097][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.124158][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.165445][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.165950][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.236799][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.236905][ T1420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.307034][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.355027][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.355182][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.397365][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.420274][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.421449][ T1420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.536422][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.597097][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.610016][ T59] Bluetooth: hci0: command tx timeout [ 107.639456][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.639661][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.713368][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.713464][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.768791][ T59] Bluetooth: hci1: command tx timeout [ 107.845992][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.922866][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.925523][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.984357][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.008741][ T59] Bluetooth: hci2: command tx timeout [ 108.016974][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.017151][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.018406][ T59] Bluetooth: hci3: command tx timeout [ 108.088317][ T59] Bluetooth: hci4: command tx timeout [ 108.206441][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.300219][ T1420] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.300584][ T1420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.381366][ T1420] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.401613][ T1420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.833862][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.478330][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.947579][ T5602] veth0_vlan: entered promiscuous mode [ 109.989602][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.066168][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.081022][ T5602] veth1_vlan: entered promiscuous mode [ 110.133960][ T5606] veth0_vlan: entered promiscuous mode [ 110.204666][ T5606] veth1_vlan: entered promiscuous mode [ 110.272305][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.306580][ T5602] veth0_macvtap: entered promiscuous mode [ 110.324714][ T5607] veth0_vlan: entered promiscuous mode [ 110.344935][ T5602] veth1_macvtap: entered promiscuous mode [ 110.371582][ T5610] veth0_vlan: entered promiscuous mode [ 110.399365][ T5607] veth1_vlan: entered promiscuous mode [ 110.415560][ T5606] veth0_macvtap: entered promiscuous mode [ 110.447556][ T5610] veth1_vlan: entered promiscuous mode [ 110.469740][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.470537][ T5606] veth1_macvtap: entered promiscuous mode [ 110.530440][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.602978][ T180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.621983][ T180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.640035][ T180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.645474][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.645661][ T5605] veth0_vlan: entered promiscuous mode [ 110.647585][ T180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.772784][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.777567][ T5607] veth0_macvtap: entered promiscuous mode [ 110.886808][ T5607] veth1_macvtap: entered promiscuous mode [ 110.906532][ T5605] veth1_vlan: entered promiscuous mode [ 110.925033][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.934108][ T5610] veth0_macvtap: entered promiscuous mode [ 110.988038][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.024551][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.074692][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.092915][ T5610] veth1_macvtap: entered promiscuous mode [ 111.286248][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.434676][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.520190][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.551458][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.551485][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.609963][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.611530][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.625893][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.652129][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.655250][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.714422][ T5605] veth0_macvtap: entered promiscuous mode [ 111.796482][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.828963][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.828982][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.832655][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.833373][ T5605] veth1_macvtap: entered promiscuous mode [ 111.905443][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.983689][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.111802][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.111822][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.450293][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.450313][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.616815][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.900553][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.903346][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.903362][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.131273][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.155677][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.206914][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.209820][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.209839][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.243384][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.419664][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.419686][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.472837][ T5791] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.911719][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.911738][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.021883][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.339532][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 114.418031][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.418064][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.418086][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 114.418126][ T10] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 114.418149][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.425170][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.425191][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.686615][ T10] usb 1-1: config 0 descriptor?? [ 115.006418][ T5708] IPVS: starting estimator thread 0... [ 115.128117][ T5802] IPVS: using max 10 ests per chain, 24000 per kthread [ 115.137556][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.137594][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.503510][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 115.503643][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.752062][ T10] usb 1-1: USB disconnect, device number 2 [ 117.017966][ T5731] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 117.258152][ T5731] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.258184][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.258204][ T5731] usb 1-1: Product: syz [ 117.258220][ T5731] usb 1-1: Manufacturer: syz [ 117.258235][ T5731] usb 1-1: SerialNumber: syz [ 117.487351][ T5731] usb 1-1: config 0 descriptor?? [ 117.807422][ T5731] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.568006][ T5716] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.570067][ T5731] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 118.635543][ T5731] usb 1-1: USB disconnect, device number 3 [ 118.749153][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.749188][ T5716] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.749228][ T5716] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 118.749253][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.815661][ T5716] usb 3-1: config 0 descriptor?? [ 119.008956][ T4977] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 119.257889][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.267958][ T4977] usb 5-1: Using ep0 maxpacket: 32 [ 119.286825][ T4977] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 119.286853][ T4977] usb 5-1: config 0 has no interface number 0 [ 119.286900][ T4977] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 119.328243][ T4977] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 119.328275][ T4977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.328295][ T4977] usb 5-1: Product: syz [ 119.328310][ T4977] usb 5-1: Manufacturer: syz [ 119.328324][ T4977] usb 5-1: SerialNumber: syz [ 119.407865][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 119.412266][ T9] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 119.412314][ T9] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 119.412340][ T9] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.412366][ T9] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 119.486388][ T9] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 119.486418][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.486437][ T9] usb 4-1: Product: syz [ 119.486452][ T9] usb 4-1: Manufacturer: syz [ 119.486467][ T9] usb 4-1: SerialNumber: syz [ 119.613473][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613521][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613550][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613585][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613604][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613622][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.613640][ T5716] arvo 0003:1E7D:30D4.0001: unknown main item tag 0x0 [ 119.620783][ T4977] usb 5-1: config 0 descriptor?? [ 119.766109][ T5859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.813738][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 119.855154][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input5 [ 119.985137][ T5716] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 120.014548][ T9] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 120.014567][ T9] (id 0x00) [ 120.050729][ T5859] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.124967][ T5716] arvo 0003:1E7D:30D4.0001: couldn't init struct arvo_device [ 120.125024][ T5716] arvo 0003:1E7D:30D4.0001: couldn't install keyboard [ 120.178573][ T9] rc_core: IR keymap rc-imon-pad not found [ 120.178590][ T9] Registered IR keymap rc-empty [ 120.178676][ T9] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 120.178693][ T9] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 120.299885][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 120.305110][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input6 [ 120.409281][ T9] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:2> initialized [ 120.495021][ T9] usb 4-1: USB disconnect, device number 2 [ 120.895069][ T5716] arvo 0003:1E7D:30D4.0001: probe with driver arvo failed with error -71 [ 121.098066][ T4977] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.098666][ T4977] asix 5-1:0.188: probe with driver asix failed with error -71 [ 121.201938][ T5716] usb 3-1: USB disconnect, device number 2 [ 121.347926][ T4977] usb 5-1: USB disconnect, device number 2 [ 122.292156][ T5900] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.568562][ T36] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 122.777858][ T36] usb 2-1: device descriptor read/64, error -71 [ 122.979707][ T5887] syz.2.32 (5887) used greatest stack depth: 19656 bytes left [ 123.227877][ T36] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 123.241667][ T5910] binder: 5909:5910 ioctl c0306201 200000000640 returned -22 [ 123.397901][ T36] usb 2-1: device descriptor read/64, error -71 [ 123.514669][ T36] usb usb2-port1: attempt power cycle [ 123.852323][ T5914] syzkaller0: entered promiscuous mode [ 123.852351][ T5914] syzkaller0: entered allmulticast mode [ 123.893663][ T5914] netlink: 'syz.2.41': attribute type 10 has an invalid length. [ 123.916452][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.000005][ T36] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 124.034850][ T36] usb 2-1: device descriptor read/8, error -71 [ 124.095048][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.347828][ T36] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 124.369175][ T36] usb 2-1: device descriptor read/8, error -71 [ 124.377421][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.412905][ T5914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.473869][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.474138][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.543950][ T5914] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.584051][ T36] usb usb2-port1: unable to enumerate USB device [ 124.607208][ T5922] syzkaller0: entered promiscuous mode [ 124.607227][ T5922] syzkaller0: entered allmulticast mode [ 124.679091][ T5922] netlink: 'syz.4.43': attribute type 10 has an invalid length. [ 124.685454][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.713889][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.826346][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.826506][ T5922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.840059][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.869546][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.911315][ T5922] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 124.953378][ T5934] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 124.953440][ T5934] overlayfs: missing 'lowerdir' [ 125.545087][ T5948] binder: 5947:5948 ioctl c0306201 200000000640 returned -22 [ 125.948615][ T5955] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.507973][ T5919] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 126.669903][ T5919] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 126.669936][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.669957][ T5919] usb 1-1: Product: syz [ 126.669972][ T5919] usb 1-1: Manufacturer: syz [ 126.669987][ T5919] usb 1-1: SerialNumber: syz [ 126.777100][ T5919] usb 1-1: config 0 descriptor?? [ 127.005363][ T5919] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 127.196694][ T5975] syzkaller0: entered promiscuous mode [ 127.196722][ T5975] syzkaller0: entered allmulticast mode [ 127.247473][ T5974] netlink: 'syz.2.60': attribute type 10 has an invalid length. [ 127.296786][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.345452][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.812868][ T5988] binder: 5986:5988 ioctl c0306201 200000000640 returned -22 [ 128.051902][ T5919] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 128.184286][ T5919] usb 1-1: USB disconnect, device number 4 [ 129.175228][ T6020] Bluetooth: MGMT ver 1.23 [ 129.254825][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.76'. [ 129.274101][ T6028] syzkaller0: entered promiscuous mode [ 129.274133][ T6028] syzkaller0: entered allmulticast mode [ 129.293910][ T6028] netlink: 'syz.4.77': attribute type 10 has an invalid length. [ 129.399086][ T37] audit: type=1326 audit(1785267374.132:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399136][ T37] audit: type=1326 audit(1785267374.132:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399174][ T37] audit: type=1326 audit(1785267374.132:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399208][ T37] audit: type=1326 audit(1785267374.132:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399241][ T37] audit: type=1326 audit(1785267374.132:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399290][ T37] audit: type=1326 audit(1785267374.132:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399325][ T37] audit: type=1326 audit(1785267374.132:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399360][ T37] audit: type=1326 audit(1785267374.132:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399396][ T37] audit: type=1326 audit(1785267374.132:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.399433][ T37] audit: type=1326 audit(1785267374.132:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.3.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 129.518190][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.518558][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.208426][ T5711] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.360645][ T5711] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 130.360677][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.861245][ T6041] syz.3.80 (6041) used greatest stack depth: 17264 bytes left [ 130.886977][ T5711] usb 1-1: Firmware version (0.0) predates our first public release. [ 130.887003][ T5711] usb 1-1: Please update to version 0.2 or newer [ 131.088153][ T5711] usb 1-1: Firmware: build  [ 131.717864][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.829561][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 131.905211][ T5866] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.905272][ T5866] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.905295][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.010026][ T5866] usb 4-1: config 0 descriptor?? [ 132.683226][ T5866] ath6kl: mismatched byte count 0 vs. expected 12 [ 132.724516][ T5866] ath6kl: Failed to init ath6kl core: -22 [ 132.725364][ T5866] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 132.906259][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906727][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.910540][ T36] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.982406][ T5866] usb 4-1: USB disconnect, device number 3 [ 133.096423][ T5919] usb 1-1: USB disconnect, device number 5 [ 133.130789][ T36] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 133.130822][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.197554][ T36] usb 5-1: config 0 descriptor?? [ 133.245478][ T36] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 133.307695][ T59] Bluetooth: hci4: unexpected cc 0x0c2d length: 5 > 4 [ 133.822043][ T36] gspca_sunplus: reg_w_riv err -71 [ 133.822134][ T36] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 133.962509][ T36] usb 5-1: USB disconnect, device number 3 [ 135.003622][ T5919] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.175998][ T5919] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 135.176028][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.176049][ T5919] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.176071][ T5919] usb 5-1: config 0 has no interface number 0 [ 135.176138][ T5919] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 135.176162][ T5919] usb 5-1: config 0 interface 199 has no altsetting 0 [ 135.235448][ T5919] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 135.235469][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.235484][ T5919] usb 5-1: SerialNumber: syz [ 135.281936][ T5919] usb 5-1: config 0 descriptor?? [ 135.322380][ T5919] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 135.322409][ T5919] uvcvideo 5-1:0.199: No valid video chain found. [ 135.423747][ T6142] process 'syz.0.116' launched './file0' with NULL argv: empty string added [ 135.665762][ T5919] usb 5-1: USB disconnect, device number 4 [ 135.974258][ T6152] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.974291][ T6152] overlayfs: missing 'lowerdir' [ 136.357019][ T6154] syzkaller0: entered promiscuous mode [ 136.357039][ T6154] syzkaller0: entered allmulticast mode [ 136.391376][ T6154] netlink: 'syz.2.123': attribute type 10 has an invalid length. [ 138.477529][ T6188] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 138.522606][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 138.721146][ T59] Bluetooth: hci1: unexpected cc 0x2042 length: 2 > 1 [ 138.755268][ T6193] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.755298][ T6193] overlayfs: missing 'lowerdir' [ 139.939197][ T6212] bridge_slave_1: left allmulticast mode [ 139.939354][ T6212] bridge_slave_1: left promiscuous mode [ 139.961454][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.088885][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 140.215252][ T6212] bridge_slave_0: left allmulticast mode [ 140.215298][ T6212] bridge_slave_0: left promiscuous mode [ 140.216608][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.237841][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 140.241077][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 140.241116][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.241140][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.241157][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.241174][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.241203][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.241220][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.358605][ T5919] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 140.541482][ T5919] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 140.541511][ T5919] usb 3-1: config 0 has no interface number 0 [ 140.541557][ T5919] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 140.541618][ T5919] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 140.544869][ T5919] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 140.544893][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 140.544911][ T5919] usb 3-1: Manufacturer: syz [ 140.544925][ T5919] usb 3-1: SerialNumber: syz [ 140.639052][ T5919] usb 3-1: config 0 descriptor?? [ 140.656417][ T10] usb 1-1: usb_control_msg returned -32 [ 140.656467][ T10] usbtmc 1-1:16.0: can't read capabilities [ 140.859740][ T6212] bond0: (slave bridge0): Releasing backup interface [ 140.900499][ T5919] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71 [ 140.905255][ T5919] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 140.950391][ T5919] usb 3-1: USB disconnect, device number 3 [ 141.085897][ T6222] usbtmc 1-1:16.0: INDICATOR_PULSE returned 0 [ 141.288766][ T5919] usb 1-1: USB disconnect, device number 6 [ 142.193634][ T6236] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.193657][ T6236] overlayfs: missing 'lowerdir' [ 143.000129][ T6248] syzkaller0: entered promiscuous mode [ 143.000154][ T6248] syzkaller0: entered allmulticast mode [ 143.037018][ T6248] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 143.046197][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.069439][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.119582][ T6248] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.119739][ T6248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.120215][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.120392][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.126055][ T6248] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.180095][ T6255] Zero length message leads to an empty skb [ 143.527186][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 144.557909][ T5711] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.564690][ T5866] kernel read not supported for file /rfkill (pid: 5866 comm: kworker/1:8) [ 144.632126][ T6296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.177'. [ 144.697636][ T59] Bluetooth: hci2: unexpected cc 0x2042 length: 2 > 1 [ 144.718085][ T5711] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 144.718113][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.209690][ T5711] usb 1-1: Firmware version (0.0) predates our first public release. [ 145.209719][ T5711] usb 1-1: Please update to version 0.2 or newer [ 145.411638][ T5711] usb 1-1: Firmware: build  [ 145.859638][ T6314] syzkaller0: entered promiscuous mode [ 145.859666][ T6314] syzkaller0: entered allmulticast mode [ 146.092319][ T4977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.286500][ T4977] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 146.286530][ T4977] usb 4-1: config 0 has no interface number 1 [ 146.286588][ T4977] usb 4-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 146.286619][ T4977] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 146.286633][ T4977] usb 4-1: config 0 interface 199 has no altsetting 0 [ 146.289106][ T4977] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 146.289131][ T4977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.289159][ T4977] usb 4-1: SerialNumber: syz [ 146.344834][ T4977] usb 4-1: config 0 descriptor?? [ 146.397697][ T4977] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 146.397973][ T4977] uvcvideo 4-1:0.199: No valid video chain found. [ 146.924777][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.970113][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.000241][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.008752][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.009548][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.324565][ T5711] usb 1-1: USB disconnect, device number 7 [ 149.128494][ T59] Bluetooth: hci5: command tx timeout [ 149.314626][ T4977] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.487884][ T4977] usb 5-1: Using ep0 maxpacket: 32 [ 149.490968][ T4977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.493451][ T4977] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.493482][ T4977] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.493497][ T4977] usb 5-1: Product: syz [ 149.493507][ T4977] usb 5-1: Manufacturer: syz [ 149.493517][ T4977] usb 5-1: SerialNumber: syz [ 149.500617][ T4977] usb 5-1: config 0 descriptor?? [ 149.590689][ T6371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.596689][ T4977] hub 5-1:0.0: bad descriptor, ignoring hub [ 149.596727][ T4977] hub 5-1:0.0: probe with driver hub failed with error -5 [ 151.209741][ T59] Bluetooth: hci5: command tx timeout [ 153.287921][ T59] Bluetooth: hci5: command tx timeout [ 155.368034][ T59] Bluetooth: hci5: command tx timeout [ 157.624358][ T5862] usb 4-1: USB disconnect, device number 4 [ 157.708428][ T6371] warning: `syz.4.201' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 158.375445][ T10] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 158.461368][ T10] usb 5-1: device reset changed ep0 maxpacket size! [ 158.602294][ T10] usb 5-1: USB disconnect, device number 5 [ 158.987865][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 159.140282][ T10] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 159.140315][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.169981][ T5862] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.329354][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 159.331933][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 159.331965][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.335056][ T5862] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 159.335084][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.335105][ T5862] usb 4-1: Product: syz [ 159.335120][ T5862] usb 4-1: Manufacturer: syz [ 159.335135][ T5862] usb 4-1: SerialNumber: syz [ 159.414358][ T5862] usb 4-1: config 0 descriptor?? [ 159.445164][ T5862] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 159.445206][ T5862] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 159.839327][ T10] usb 5-1: Firmware version (0.0) predates our first public release. [ 159.839358][ T10] usb 5-1: Please update to version 0.2 or newer [ 160.053357][ T10] usb 5-1: Firmware: build  [ 160.114812][ T5862] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 160.129598][ T5862] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 160.589149][ T6339] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.589451][ T6339] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.589806][ T6339] bridge_slave_0: entered allmulticast mode [ 160.624675][ T6339] bridge_slave_0: entered promiscuous mode [ 160.691584][ T6339] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.691693][ T6339] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.691908][ T6339] bridge_slave_1: entered allmulticast mode [ 160.714630][ T6339] bridge_slave_1: entered promiscuous mode [ 160.747124][ T5862] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 160.867087][ T6339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.885459][ T6339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.937970][ T5866] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 160.951370][ T5862] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 160.951811][ T5862] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 160.952201][ T5862] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 160.952602][ T5862] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 160.952995][ T5862] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 161.012195][ T5862] usb 4-1: USB disconnect, device number 5 [ 161.076737][ T6339] team0: Port device team_slave_0 added [ 161.083574][ T5866] usb 1-1: device descriptor read/64, error -71 [ 161.084824][ T6339] team0: Port device team_slave_1 added [ 161.136626][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.136643][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.136671][ T6339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.145044][ T6339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.145073][ T6339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.145140][ T6339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.299907][ T6339] hsr_slave_0: entered promiscuous mode [ 161.302202][ T6339] hsr_slave_1: entered promiscuous mode [ 161.304108][ T6339] debugfs: 'hsr0' already exists in 'hsr' [ 161.304132][ T6339] Cannot create hsr debugfs directory [ 161.377946][ T5866] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.507897][ T5866] usb 1-1: device descriptor read/64, error -71 [ 161.618232][ T5866] usb usb1-port1: attempt power cycle [ 161.720780][ T5919] usb 5-1: USB disconnect, device number 6 [ 161.965200][ T5866] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 161.979798][ T5866] usb 1-1: device descriptor read/8, error -71 [ 162.217913][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 162.241058][ T5866] usb 1-1: device descriptor read/8, error -71 [ 162.366850][ T5866] usb usb1-port1: unable to enumerate USB device [ 162.633291][ T6476] netlink: 'syz.4.237': attribute type 4 has an invalid length. [ 163.149679][ T6488] netlink: 56 bytes leftover after parsing attributes in process `syz.3.243'. [ 163.170346][ T6339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.283397][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 163.289168][ T6339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.404259][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.406998][ T6339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.442983][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 163.458022][ T6339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.517542][ T6339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 163.973113][ T6339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.998658][ T6339] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.067062][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.067392][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.099257][ T6518] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 164.351409][ T6522] netlink: 56 bytes leftover after parsing attributes in process `syz.4.255'. [ 164.424540][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.424673][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.674500][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.3.267'. [ 165.947910][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 165.981206][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 165.998035][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 166.097822][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 166.100980][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.101005][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.135837][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 166.135870][ T9] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 166.135891][ T9] usb 5-1: Product: syz [ 166.135907][ T9] usb 5-1: Manufacturer: syz [ 166.135924][ T9] usb 5-1: SerialNumber: syz [ 166.237401][ T9] usb 5-1: config 0 descriptor?? [ 166.409151][ T6339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.970761][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 166.970981][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 166.979210][ T5616] Bluetooth: hci2: hardware error 0x00 [ 167.089371][ T6592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.293487][ T6339] veth0_vlan: entered promiscuous mode [ 167.326089][ T6339] veth1_vlan: entered promiscuous mode [ 167.490168][ T6339] veth0_macvtap: entered promiscuous mode [ 167.505187][ T6339] veth1_macvtap: entered promiscuous mode [ 167.567575][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 167.671173][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.705165][ T6339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.729941][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.731748][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.731992][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.733162][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.680964][ T6613] binder: 6612:6613 ioctl c0306201 2000000006c0 returned -14 [ 168.804305][ T9] usb 5-1: USB disconnect, device number 7 [ 168.886069][ T180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.886090][ T180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.251653][ T6629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 169.277642][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.277662][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.295855][ T5616] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 169.388984][ T822] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 169.546075][ T822] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 169.546104][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.546123][ T822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 169.546145][ T822] usb 5-1: config 0 has no interface number 0 [ 169.546189][ T822] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 169.546212][ T822] usb 5-1: config 0 interface 199 has no altsetting 0 [ 169.547538][ T822] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 169.547567][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.547598][ T822] usb 5-1: SerialNumber: syz [ 169.632335][ T822] usb 5-1: config 0 descriptor?? [ 169.645780][ T6638] 9p: Bad value for 'wfdno' [ 169.670194][ T822] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 169.670228][ T822] uvcvideo 5-1:0.199: No valid video chain found. [ 169.994642][ T10] usb 5-1: USB disconnect, device number 8 [ 170.546687][ T6656] netlink: 56 bytes leftover after parsing attributes in process `syz.0.300'. [ 170.625505][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 171.034473][ T5862] IPVS: starting estimator thread 0... [ 171.117911][ T6672] IPVS: using max 7 ests per chain, 16800 per kthread [ 171.534581][ T6689] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 171.607308][ T6690] IPVS: stopping master sync thread 6689 ... [ 171.663141][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 171.800398][ T6698] netlink: 'syz.4.318': attribute type 10 has an invalid length. [ 171.817881][ T5919] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 171.950193][ T5919] usb 3-1: device descriptor read/64, error -71 [ 171.970449][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.5.320'. [ 172.197930][ T5919] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 172.337842][ T5919] usb 3-1: device descriptor read/64, error -71 [ 172.448276][ T5919] usb usb3-port1: attempt power cycle [ 172.567874][ T5862] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.105514][ T5919] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 174.120001][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 174.189395][ T5862] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 174.189424][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.189444][ T5862] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 174.189484][ T5862] usb 5-1: config 0 has no interface number 0 [ 174.189538][ T5862] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.189563][ T5862] usb 5-1: config 0 interface 199 has no altsetting 0 [ 174.191360][ T5862] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 174.191387][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.191408][ T5862] usb 5-1: SerialNumber: syz [ 174.207005][ T5919] usb 3-1: device descriptor read/8, error -71 [ 174.381052][ T5862] usb 5-1: config 0 descriptor?? [ 174.413252][ T5862] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 174.413286][ T5862] uvcvideo 5-1:0.199: No valid video chain found. [ 174.447897][ T5919] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 174.470920][ T5919] usb 3-1: device descriptor read/8, error -71 [ 174.579547][ T5919] usb usb3-port1: unable to enumerate USB device [ 174.605805][ T6729] tipc: Started in network mode [ 174.605850][ T6729] tipc: Node identity aee2a1f6b68f, cluster identity 4711 [ 174.606271][ T6729] tipc: Enabled bearer , priority 1 [ 174.782057][ T6725] tipc: Resetting bearer [ 174.912531][ T10] usb 5-1: USB disconnect, device number 9 [ 175.121606][ T6725] tipc: Disabling bearer [ 178.211761][ T6796] random: crng reseeded on system resumption [ 179.127862][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.277846][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.340181][ T5862] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 179.340211][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.340232][ T5862] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 179.340253][ T5862] usb 4-1: config 0 has no interface number 0 [ 179.340297][ T5862] usb 4-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 179.340321][ T5862] usb 4-1: config 0 interface 199 has no altsetting 0 [ 179.341798][ T5862] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 179.341826][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.341848][ T5862] usb 4-1: SerialNumber: syz [ 179.445171][ T5862] usb 4-1: config 0 descriptor?? [ 179.448236][ T10] usb 6-1: device descriptor read/64, error -71 [ 179.488068][ T5862] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 179.488103][ T5862] uvcvideo 4-1:0.199: No valid video chain found. [ 179.571793][ T5866] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 179.687930][ T5862] usb 4-1: USB disconnect, device number 6 [ 179.689456][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.756988][ T5866] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 179.757016][ T5866] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 179.777345][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.777431][ T5866] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 179.777487][ T5866] usb 5-1: Product: syz [ 179.777512][ T5866] usb 5-1: Manufacturer: syz [ 179.857871][ T10] usb 6-1: device descriptor read/64, error -71 [ 179.968251][ T10] usb usb6-port1: attempt power cycle [ 180.307891][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 180.328837][ T10] usb 6-1: device descriptor read/8, error -71 [ 180.587853][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.608631][ T10] usb 6-1: device descriptor read/8, error -71 [ 180.718434][ T10] usb usb6-port1: unable to enumerate USB device [ 181.376224][ T6846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.640182][ T6855] netlink: 116 bytes leftover after parsing attributes in process `syz.3.377'. [ 181.734760][ T6857] syz.0.379 uses obsolete (PF_INET,SOCK_PACKET) [ 181.735651][ T6857] syzkaller1: entered promiscuous mode [ 181.735674][ T6857] syzkaller1: entered allmulticast mode [ 182.310998][ T5862] usb 5-1: USB disconnect, device number 10 [ 182.576777][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.727981][ T5711] usb 1-1: device descriptor read/64, error -71 [ 182.832387][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.850165][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.872108][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.872273][ T6881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.924053][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.924224][ T6881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.965811][ T6881] team0: Port device bridge0 added [ 182.968489][ T822] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.977943][ T5711] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.107922][ T5711] usb 1-1: device descriptor read/64, error -71 [ 183.142273][ T822] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 183.142304][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.142325][ T822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 183.142346][ T822] usb 5-1: config 0 has no interface number 0 [ 183.142390][ T822] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 183.142425][ T822] usb 5-1: config 0 interface 199 has no altsetting 0 [ 183.144607][ T822] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 183.144635][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.144655][ T822] usb 5-1: SerialNumber: syz [ 183.225539][ T5711] usb usb1-port1: attempt power cycle [ 183.241978][ T822] usb 5-1: config 0 descriptor?? [ 183.265618][ T822] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 183.265652][ T822] uvcvideo 5-1:0.199: No valid video chain found. [ 183.299026][ T6889] overlayfs: missing 'lowerdir' [ 183.558019][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.582575][ T5711] usb 1-1: device descriptor read/8, error -71 [ 183.817175][ T10] usb 5-1: USB disconnect, device number 11 [ 183.847899][ T5711] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.869990][ T5711] usb 1-1: device descriptor read/8, error -71 [ 183.882028][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 183.978343][ T5711] usb usb1-port1: unable to enumerate USB device [ 184.125053][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.126201][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.127151][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.127276][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.127396][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.127525][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.127663][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.133266][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.145997][ T6903] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 184.259546][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.508469][ T5862] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 184.508501][ T5862] usb 4-1: config 0 has no interface number 1 [ 184.508584][ T5862] usb 4-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 184.508625][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.508648][ T5862] usb 4-1: config 0 interface 199 has no altsetting 0 [ 184.513460][ T5862] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 184.513489][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.513509][ T5862] usb 4-1: SerialNumber: syz [ 184.590797][ T5862] usb 4-1: config 0 descriptor?? [ 184.637477][ T5862] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 184.637509][ T5862] uvcvideo 4-1:0.199: No valid video chain found. [ 184.870473][ T10] usb 4-1: USB disconnect, device number 7 [ 186.038113][ T6924] overlayfs: missing 'lowerdir' [ 189.954855][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.920278][ T10] usb 6-1: device descriptor read/64, error -71 [ 191.187858][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 191.341782][ T10] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 191.341813][ T10] usb 6-1: config 0 has no interface number 1 [ 191.341871][ T10] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.341907][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.341928][ T10] usb 6-1: config 0 interface 199 has no altsetting 0 [ 191.345074][ T10] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 191.345103][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.345124][ T10] usb 6-1: SerialNumber: syz [ 191.372850][ T5616] Bluetooth: hci1: failed to read key size for handle 200 [ 191.467385][ T10] usb 6-1: config 0 descriptor?? [ 191.481941][ T10] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 191.481975][ T10] uvcvideo 6-1:0.199: No valid video chain found. [ 191.855244][ T6953] bridge0: port 3(vlan2) entered blocking state [ 191.857147][ T6953] bridge0: port 3(vlan2) entered disabled state [ 191.857492][ T6953] vlan2: entered allmulticast mode [ 191.857509][ T6953] geneve0: entered allmulticast mode [ 191.892597][ T6953] vlan2: entered promiscuous mode [ 191.892613][ T6953] geneve0: entered promiscuous mode [ 191.970959][ T6979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.994418][ T10] usb 6-1: USB disconnect, device number 7 [ 192.587916][ T6991] syz_tun: entered allmulticast mode [ 192.860314][ T6990] syz_tun: left allmulticast mode [ 194.117935][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.275558][ T9] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 194.275587][ T9] usb 3-1: config 0 has no interface number 1 [ 194.275640][ T9] usb 3-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 194.275676][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 194.275706][ T9] usb 3-1: config 0 interface 199 has no altsetting 0 [ 194.333336][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333408][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.353930][ T9] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 194.353961][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.353982][ T9] usb 3-1: SerialNumber: syz [ 194.386905][ T9] usb 3-1: config 0 descriptor?? [ 194.418117][ T9] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 194.418150][ T9] uvcvideo 3-1:0.199: No valid video chain found. [ 194.650429][ T7018] bridge0: port 3(vlan2) entered blocking state [ 194.650678][ T7018] bridge0: port 3(vlan2) entered disabled state [ 194.650879][ T7018] vlan2: entered allmulticast mode [ 194.650896][ T7018] geneve0: entered allmulticast mode [ 194.654637][ T7018] vlan2: entered promiscuous mode [ 194.654654][ T7018] geneve0: entered promiscuous mode [ 194.721516][ T10] usb 3-1: USB disconnect, device number 8 [ 196.749391][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.897776][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 196.915509][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.915542][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.955058][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.955090][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.955111][ T10] usb 5-1: Product: syz [ 196.955141][ T10] usb 5-1: Manufacturer: syz [ 196.955157][ T10] usb 5-1: SerialNumber: syz [ 197.015656][ T10] usb 5-1: config 0 descriptor?? [ 197.033549][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 197.033584][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 197.098966][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 197.135147][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.135472][ T7072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.136999][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.137298][ T7072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.291589][ T7075] net_ratelimit: 759 callbacks suppressed [ 197.291612][ T7075] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.625419][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 197.631094][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 197.631914][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 197.631933][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 197.698426][ T7072] bridge0: port 3(vlan2) entered blocking state [ 197.698573][ T7072] bridge0: port 3(vlan2) entered forwarding state [ 201.932742][ T822] usb 5-1: USB disconnect, device number 12 [ 202.025959][ T822] em28xx 5-1:0.0: Disconnecting em28xx [ 203.240237][ T822] em28xx 5-1:0.0: Freeing device [ 203.559675][ T7133] syzkaller0: entered promiscuous mode [ 203.559703][ T7133] syzkaller0: entered allmulticast mode [ 203.585010][ T7133] netlink: 'syz.2.469': attribute type 10 has an invalid length. [ 203.596522][ T7133] bridge0: port 3(vlan2) entered disabled state [ 203.597157][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.724978][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.867862][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 204.044153][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 204.044184][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.215238][ T7156] netlink: 'syz.4.478': attribute type 4 has an invalid length. [ 205.304306][ T10] usb 4-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 206.019233][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 206.158326][ T7179] netlink: 52 bytes leftover after parsing attributes in process `syz.0.484'. [ 207.051276][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.051303][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.093626][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.093657][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.093677][ T9] usb 6-1: Product: syz [ 207.093692][ T9] usb 6-1: Manufacturer: syz [ 207.093707][ T9] usb 6-1: SerialNumber: syz [ 207.171673][ T9] usb 6-1: config 0 descriptor?? [ 207.240622][ T7187] syzkaller0: entered promiscuous mode [ 207.240649][ T7187] syzkaller0: entered allmulticast mode [ 207.247149][ T7187] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 207.247576][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.256343][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.677835][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 207.827958][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 207.830851][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.830887][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.830903][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 207.830933][ T36] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 207.830950][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.858321][ T36] usb 5-1: config 0 descriptor?? [ 207.870368][ T5730] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 208.049162][ T5730] usb 3-1: Using ep0 maxpacket: 8 [ 208.051585][ T5730] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 208.051612][ T5730] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.051661][ T5730] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.051706][ T5730] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.051730][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.177041][ T5730] usbtmc 3-1:16.0: bulk endpoints not found [ 208.385659][ T5866] usb 4-1: USB disconnect, device number 8 [ 208.496235][ T36] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 208.496273][ T36] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 208.497488][ T36] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 208.497527][ T36] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 208.497554][ T36] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 208.625314][ T7209] netlink: 'syz.3.496': attribute type 4 has an invalid length. [ 208.664371][ T36] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 208.852125][ T5862] usb 6-1: USB disconnect, device number 8 [ 209.385187][ T7212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.675857][ T36] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 209.676226][ T36] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 209.838653][ T5862] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 209.846960][ T5862] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 209.847348][ T5862] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 209.867534][ T5862] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 209.898265][ T36] usb 5-1: USB disconnect, device number 13 [ 210.272334][ T7237] syzkaller0: entered promiscuous mode [ 210.272363][ T7237] syzkaller0: entered allmulticast mode [ 210.858797][ T7237] netlink: 'syz.4.505': attribute type 10 has an invalid length. [ 211.668320][ T5866] usb 3-1: USB disconnect, device number 9 [ 212.288287][ T5708] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 213.020234][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.020263][ T5708] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.023145][ T5708] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 213.023174][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.023195][ T5708] usb 1-1: Product: syz [ 213.023211][ T5708] usb 1-1: Manufacturer: syz [ 213.023227][ T5708] usb 1-1: SerialNumber: syz [ 213.095177][ T5708] usb 1-1: config 0 descriptor?? [ 213.367746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.447736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.457729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.467737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.477733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.487726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.497728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.507723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.517734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 213.527735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 215.396470][ T7273] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 215.459488][ T7272] IPVS: stopping master sync thread 7273 ... [ 215.507887][ T5730] usb 1-1: USB disconnect, device number 16 [ 215.511305][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 216.017886][ T5730] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 216.168766][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 216.171382][ T5730] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 216.171412][ T5730] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.171461][ T5730] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.171485][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.171510][ T5730] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.171552][ T5730] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.171575][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.359198][ T5730] usbtmc 1-1:16.0: bulk endpoints not found [ 217.007988][ T5866] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.159472][ T5866] usb 5-1: Using ep0 maxpacket: 16 [ 217.161531][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 217.161562][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 217.197388][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 217.197411][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.197425][ T5866] usb 5-1: Product: syz [ 217.197436][ T5866] usb 5-1: Manufacturer: syz [ 217.197447][ T5866] usb 5-1: SerialNumber: syz [ 217.243624][ T5866] usb 5-1: config 0 descriptor?? [ 217.254418][ T7301] syzkaller0: entered promiscuous mode [ 217.254444][ T7301] syzkaller0: entered allmulticast mode [ 217.269717][ T5866] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 217.269751][ T5866] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 218.644952][ T5866] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 218.645420][ T5866] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 218.647129][ T5866] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 218.647149][ T5866] em28xx 5-1:0.0: No AC97 audio processor [ 219.023757][ T7308] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 219.024185][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.058627][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.318745][ T5815] usb 1-1: USB disconnect, device number 17 [ 220.245444][ T9] usb 5-1: USB disconnect, device number 14 [ 220.285456][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 220.300652][ T7308] team0: Port device bridge0 removed [ 220.331362][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.331524][ T7308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.359605][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.411967][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.412147][ T7308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.461859][ T9] em28xx 5-1:0.0: Freeing device [ 220.467256][ T7308] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.705343][ T7348] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 220.721458][ T7341] vlan2: left allmulticast mode [ 220.721502][ T7341] geneve0: left allmulticast mode [ 220.752111][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 220.790124][ T7341] vlan2: left promiscuous mode [ 220.791188][ T7341] geneve0: left promiscuous mode [ 220.847165][ T7341] bridge0: port 3(vlan2) entered disabled state [ 221.110071][ T7341] bridge_slave_1: left allmulticast mode [ 221.110097][ T7341] bridge_slave_1: left promiscuous mode [ 221.110548][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.368703][ T7341] bridge_slave_0: left allmulticast mode [ 221.369179][ T7341] bridge_slave_0: left promiscuous mode [ 221.423727][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.880403][ T7341] bond0: (slave bridge0): Releasing backup interface [ 222.017903][ T5919] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 222.216841][ T7329] Bluetooth: hci1: command 0x0406 tx timeout [ 222.216882][ T7329] Bluetooth: hci0: command 0x0406 tx timeout [ 222.216908][ T7329] Bluetooth: hci4: command 0x0406 tx timeout [ 222.216933][ T7329] Bluetooth: hci3: command 0x0406 tx timeout [ 222.543046][ T5919] usb 6-1: Using ep0 maxpacket: 8 [ 222.585164][ T5919] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 222.585196][ T5919] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 222.585246][ T5919] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.585270][ T5919] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.585295][ T5919] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 222.585337][ T5919] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.585360][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.904457][ T5919] usbtmc 6-1:16.0: bulk endpoints not found [ 223.015940][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 223.416827][ T7383] syzkaller0: entered promiscuous mode [ 223.416847][ T7383] syzkaller0: entered allmulticast mode [ 223.436419][ T7383] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 223.497918][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 223.665971][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.666004][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 223.666045][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.666062][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.696365][ T9] usb 4-1: config 0 descriptor?? [ 223.715004][ T7378] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 223.942832][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 223.942923][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 223.952145][ T9] usb 4-1: USB disconnect, device number 9 [ 224.107893][ T5919] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 224.289853][ T5919] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 224.289925][ T5919] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.289970][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 224.289994][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.393298][ T5919] hub 5-1:4.0: bad descriptor, ignoring hub [ 224.393339][ T5919] hub 5-1:4.0: probe with driver hub failed with error -5 [ 224.417484][ T5919] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 224.473329][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.642426][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.642461][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 1024 [ 224.642507][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 224.642531][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.708075][ T9] usb 4-1: config 0 descriptor?? [ 224.709146][ T7378] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.030232][ T10] usb 6-1: USB disconnect, device number 9 [ 225.346291][ T7413] syzkaller0: entered promiscuous mode [ 225.346318][ T7413] syzkaller0: entered allmulticast mode [ 225.381806][ T7413] netlink: 'syz.2.558': attribute type 10 has an invalid length. [ 225.414783][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'. [ 226.479603][ T9] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 226.565555][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 228.099492][ T5866] usb 5-1: USB disconnect, device number 15 [ 228.206860][ T7441] IPVS: stopping master sync thread 7348 ... [ 228.292445][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.564'. [ 228.445272][ T9] usb 4-1: USB disconnect, device number 10 [ 228.445361][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 228.931303][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.571'. [ 228.956217][ T7453] syzkaller0: entered promiscuous mode [ 228.956241][ T7453] syzkaller0: entered allmulticast mode [ 228.986548][ T7453] netlink: 'syz.4.570': attribute type 10 has an invalid length. [ 229.057835][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 229.240906][ T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 229.240936][ T9] usb 4-1: config 0 has no interface number 0 [ 229.240999][ T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 229.251182][ T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 229.251253][ T9] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 229.251307][ T9] usb 4-1: Manufacturer: syz [ 229.251348][ T9] usb 4-1: SerialNumber: syz [ 229.332125][ T9] usb 4-1: config 0 descriptor?? [ 229.566784][ T5723] usb 4-1: USB disconnect, device number 11 [ 230.645490][ T7475] syz.4.576 (7475) used greatest stack depth: 16744 bytes left [ 231.666617][ T7500] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 231.778459][ T7501] syzkaller0: entered promiscuous mode [ 231.778486][ T7501] syzkaller0: entered allmulticast mode [ 231.831077][ T7501] netlink: 'syz.3.586': attribute type 10 has an invalid length. [ 231.834130][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.583'. [ 231.847973][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.848665][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.921041][ T7499] IPVS: stopping master sync thread 7500 ... [ 231.946906][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.587'. [ 232.877946][ T5919] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 232.878097][ T5866] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 233.030649][ T5866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.030674][ T5866] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.032822][ T5866] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.032852][ T5866] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 233.032877][ T5866] usb 5-1: Product: syz [ 233.032887][ T5866] usb 5-1: Manufacturer: syz [ 233.088930][ T5708] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.112251][ T5919] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.139451][ T5919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.139483][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.139502][ T5919] usb 3-1: Product: syz [ 233.139516][ T5919] usb 3-1: Manufacturer: syz [ 233.139530][ T5919] usb 3-1: SerialNumber: syz [ 233.178271][ T5866] hub 5-1:4.0: USB hub found [ 233.209826][ T5919] usb 3-1: config 0 descriptor?? [ 233.238420][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 233.243330][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.243406][ T5708] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.243424][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.267841][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 233.288375][ T5708] usb 4-1: config 0 descriptor?? [ 233.394979][ T5708] hub 4-1:0.0: bad descriptor, ignoring hub [ 233.395392][ T5708] hub 4-1:0.0: probe with driver hub failed with error -5 [ 233.418861][ T5708] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 233.442028][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.442055][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 233.467822][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 233.467853][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.467876][ T9] usb 6-1: Product: syz [ 233.467893][ T9] usb 6-1: Manufacturer: syz [ 233.467909][ T9] usb 6-1: SerialNumber: syz [ 233.512764][ T9] usb 6-1: config 0 descriptor?? [ 233.522733][ T5866] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 233.599153][ T5866] usb 5-1: USB disconnect, device number 16 [ 234.920807][ T7548] syzkaller0: entered promiscuous mode [ 234.920835][ T7548] syzkaller0: entered allmulticast mode [ 234.953672][ T7548] netlink: 'syz.0.602': attribute type 10 has an invalid length. [ 235.342150][ T7556] syzkaller0: entered promiscuous mode [ 235.342169][ T7556] syzkaller0: entered allmulticast mode [ 235.363355][ T7556] netlink: 'syz.0.603': attribute type 10 has an invalid length. [ 235.649728][ T5708] usb 3-1: USB disconnect, device number 10 [ 235.940163][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 236.072815][ T10] usb 6-1: USB disconnect, device number 10 [ 236.308337][ T5919] usb 4-1: USB disconnect, device number 12 [ 237.607906][ T5919] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 237.834497][ T5919] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 237.834526][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.834546][ T5919] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 237.834567][ T5919] usb 6-1: config 0 has no interface number 0 [ 237.834613][ T5919] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 237.834638][ T5919] usb 6-1: config 0 interface 199 has no altsetting 0 [ 237.848851][ T5919] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 237.848880][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 237.848901][ T5919] usb 6-1: SerialNumber: syz [ 237.930713][ T5919] usb 6-1: config 0 descriptor?? [ 237.953286][ T5919] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 237.953321][ T5919] uvcvideo 6-1:0.199: No valid video chain found. [ 238.039905][ T7588] syzkaller0: entered promiscuous mode [ 238.039931][ T7588] syzkaller0: entered allmulticast mode [ 238.062940][ T7588] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 238.253964][ T5708] usb 6-1: USB disconnect, device number 11 [ 239.047263][ T5919] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 239.148735][ T5866] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 239.269884][ T5919] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 239.269921][ T5919] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.272466][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 239.272493][ T5919] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 239.272515][ T5919] usb 5-1: Product: syz [ 239.272530][ T5919] usb 5-1: Manufacturer: syz [ 239.340102][ T5866] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.343033][ T5866] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 239.343063][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.343084][ T5866] usb 3-1: Product: syz [ 239.343100][ T5866] usb 3-1: Manufacturer: syz [ 239.343116][ T5866] usb 3-1: SerialNumber: syz [ 239.407425][ T5866] usb 3-1: config 0 descriptor?? [ 239.419873][ T5919] hub 5-1:4.0: USB hub found [ 239.674002][ T7601] syzkaller0: entered promiscuous mode [ 239.674028][ T7601] syzkaller0: entered allmulticast mode [ 239.695129][ T7601] netlink: 'syz.0.617': attribute type 10 has an invalid length. [ 239.826619][ T5919] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 239.872681][ T5919] usb 5-1: USB disconnect, device number 17 [ 240.582564][ T5708] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 241.575531][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.596780][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.596809][ T5708] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.628643][ T5708] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 241.628677][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.628710][ T5708] usb 1-1: Product: syz [ 241.628725][ T5708] usb 1-1: Manufacturer: syz [ 241.628741][ T5708] usb 1-1: SerialNumber: syz [ 241.657993][ T5708] usb 1-1: config 0 descriptor?? [ 242.035030][ T5815] usb 3-1: USB disconnect, device number 11 [ 242.374900][ T7645] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 242.441605][ T7646] IPVS: stopping master sync thread 7645 ... [ 242.470491][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 242.496660][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 243.430221][ T5708] usb 1-1: USB disconnect, device number 18 [ 243.990834][ T7673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.687862][ T5708] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 245.729619][ T7695] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 245.782262][ T7693] IPVS: stopping master sync thread 7695 ... [ 245.818808][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.643'. [ 245.837855][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 245.841138][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.841175][ T5708] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.841232][ T5708] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.841258][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.882512][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.644'. [ 245.907024][ T5708] usb 1-1: config 0 descriptor?? [ 245.921305][ T5708] hub 1-1:0.0: USB hub found [ 246.245879][ T5708] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 246.304462][ T5708] usbhid 1-1:0.0: can't add hid device: -71 [ 246.304551][ T5708] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 246.349262][ T5708] usb 1-1: USB disconnect, device number 19 [ 248.412374][ T7735] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 248.429729][ T7730] IPVS: stopping master sync thread 7735 ... [ 248.433932][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 248.574508][ T7738] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.659'. [ 248.597874][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 248.652895][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 248.756112][ T9] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.756179][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 248.756297][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.040048][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 249.052549][ T9] hub 6-1:4.0: bad descriptor, ignoring hub [ 249.052656][ T9] hub 6-1:4.0: probe with driver hub failed with error -5 [ 249.074077][ T9] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 249.208068][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 249.211661][ T10] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 249.211870][ T10] usb 5-1: config 0 has no interface number 0 [ 249.211919][ T10] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 249.215307][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 249.215336][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.215356][ T10] usb 5-1: Product: syz [ 249.215370][ T10] usb 5-1: Manufacturer: syz [ 249.215387][ T10] usb 5-1: SerialNumber: syz [ 249.236477][ T10] usb 5-1: config 0 descriptor?? [ 249.295055][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.513757][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.804868][ T5866] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 249.957835][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 249.975327][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.975361][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.975404][ T5866] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.975429][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.033834][ T5866] usb 1-1: config 0 descriptor?? [ 250.045072][ T5866] hub 1-1:0.0: USB hub found [ 250.331134][ T5866] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 250.361621][ T5866] usbhid 1-1:0.0: can't add hid device: -71 [ 250.362124][ T5866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 250.427212][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 250.427245][ T10] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 250.427543][ T10] asix 5-1:0.188: probe with driver asix failed with error -61 [ 250.531003][ T5866] usb 1-1: USB disconnect, device number 20 [ 250.783811][ T7769] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 250.784867][ T7768] IPVS: stopping master sync thread 7769 ... [ 250.785429][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 250.907886][ T5815] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 251.064566][ T5815] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 251.064596][ T5815] usb 3-1: config 0 has no interface number 1 [ 251.064654][ T5815] usb 3-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 251.064690][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.064713][ T5815] usb 3-1: config 0 interface 199 has no altsetting 0 [ 251.071273][ T5815] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 251.071357][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.071411][ T5815] usb 3-1: SerialNumber: syz [ 251.151621][ T5815] usb 3-1: config 0 descriptor?? [ 251.165236][ T5815] uvcvideo 3-1:0.199: Found UVC 0.00 device (0002:0000) [ 251.165270][ T5815] uvcvideo 3-1:0.199: No valid video chain found. [ 251.387910][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 251.498354][ T9] usb 6-1: USB disconnect, device number 12 [ 251.579583][ T5866] usb 3-1: USB disconnect, device number 12 [ 251.609800][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 251.609829][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.609847][ T10] usb 1-1: Product: syz [ 251.609861][ T10] usb 1-1: Manufacturer: syz [ 251.609875][ T10] usb 1-1: SerialNumber: syz [ 251.771023][ T5862] usb 5-1: USB disconnect, device number 18 [ 251.901293][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.676'. [ 252.165675][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 252.165743][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 252.735548][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 252.735620][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 252.836420][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 252.883226][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 253.008404][ T7800] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.680'. [ 253.035396][ T7806] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 253.036731][ T7805] IPVS: stopping master sync thread 7806 ... [ 253.037604][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 256.380737][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.380810][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.755314][ T5708] usb 1-1: USB disconnect, device number 21 [ 257.027768][ T5862] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 257.228294][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 257.236052][ T5862] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 257.236088][ T5862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 257.341043][ T5862] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.341073][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.341094][ T5862] usb 5-1: Product: syz [ 257.341107][ T5862] usb 5-1: Manufacturer: syz [ 257.341122][ T5862] usb 5-1: SerialNumber: syz [ 257.415688][ T5862] usb 5-1: config 0 descriptor?? [ 257.486685][ T5862] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.486710][ T5862] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 258.113039][ T5862] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 258.114895][ T5862] em28xx 5-1:0.0: Config register raw data: 0x00 [ 258.358180][ T5708] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 258.517935][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 258.523210][ T5708] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 258.523239][ T5708] usb 1-1: config 0 has no interface number 0 [ 258.523288][ T5708] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 258.560182][ T5708] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 258.560214][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.560237][ T5708] usb 1-1: Product: syz [ 258.560254][ T5708] usb 1-1: Manufacturer: syz [ 258.560270][ T5708] usb 1-1: SerialNumber: syz [ 258.605550][ T5708] usb 1-1: config 0 descriptor?? [ 258.618176][ T7850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 258.835992][ T7850] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 259.357908][ T5815] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 259.398728][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.405387][ T10] usb 5-1: USB disconnect, device number 19 [ 259.415667][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 259.441775][ T10] em28xx 5-1:0.0: Freeing device [ 259.532857][ T5815] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.532902][ T5815] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 259.532930][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.555770][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.555825][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.555901][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 259.555946][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.620229][ T5815] hub 3-1:4.0: bad descriptor, ignoring hub [ 259.620269][ T5815] hub 3-1:4.0: probe with driver hub failed with error -5 [ 259.673127][ T9] usb 6-1: config 0 descriptor?? [ 259.686111][ T5815] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 259.697103][ T5708] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 259.697132][ T5708] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 259.697409][ T5708] asix 1-1:0.188: probe with driver asix failed with error -61 [ 259.915823][ T37] kauditd_printk_skb: 54 callbacks suppressed [ 259.915843][ T37] audit: type=1326 audit(1785267504.652:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.917159][ T37] audit: type=1326 audit(1785267504.652:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.917352][ T37] audit: type=1326 audit(1785267504.652:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.918992][ T37] audit: type=1326 audit(1785267504.652:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.919044][ T37] audit: type=1326 audit(1785267504.662:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.977810][ T37] audit: type=1326 audit(1785267504.662:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.978442][ T37] audit: type=1326 audit(1785267504.722:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 259.978493][ T37] audit: type=1326 audit(1785267504.662:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd43ad6de99 code=0x7ffc0000 [ 260.007064][ T37] audit: type=1326 audit(1785267504.732:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd43ad6db2b code=0x7ffc0000 [ 260.008831][ T37] audit: type=1326 audit(1785267504.752:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7876 comm="syz.5.694" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd43ad6db2b code=0x7ffc0000 [ 260.247852][ T5708] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 260.338220][ T7884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.345894][ T7884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.403945][ T5708] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 260.404196][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.404221][ T5708] usb 5-1: Product: syz [ 260.404234][ T5708] usb 5-1: Manufacturer: syz [ 260.404250][ T5708] usb 5-1: SerialNumber: syz [ 260.408906][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 260.409275][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 260.466345][ T9] usb 6-1: USB disconnect, device number 13 [ 260.519105][ T5862] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 260.658068][ T5862] usb 4-1: device descriptor read/64, error -71 [ 260.913280][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 260.913344][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 260.942277][ T5862] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 260.958067][ T9] usb 1-1: USB disconnect, device number 22 [ 261.069691][ T5862] usb 4-1: device descriptor read/64, error -71 [ 261.178326][ T5862] usb usb4-port1: attempt power cycle [ 261.317864][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 261.317921][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 261.320400][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 261.373427][ T5708] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 261.527842][ T5862] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 261.562822][ T5862] usb 4-1: device descriptor read/8, error -71 [ 261.797812][ T5862] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 261.818681][ T5862] usb 4-1: device descriptor read/8, error -71 [ 261.928575][ T5862] usb usb4-port1: unable to enumerate USB device [ 262.398729][ T5708] usb 3-1: USB disconnect, device number 13 [ 262.420760][ T7910] bridge_slave_1: left allmulticast mode [ 262.420795][ T7910] bridge_slave_1: left promiscuous mode [ 262.421052][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.935382][ T5862] usb 5-1: USB disconnect, device number 20 [ 262.954787][ T7910] bridge_slave_0: left allmulticast mode [ 262.957358][ T7910] bridge_slave_0: left promiscuous mode [ 262.964681][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.998804][ T5708] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 263.117916][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 263.169901][ T5708] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 263.169922][ T5708] usb 6-1: config 0 has no interface number 1 [ 263.169961][ T5708] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 263.169986][ T5708] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.170003][ T5708] usb 6-1: config 0 interface 199 has no altsetting 0 [ 263.171589][ T5708] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 263.171608][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.171623][ T5708] usb 6-1: SerialNumber: syz [ 263.176568][ T5708] usb 6-1: config 0 descriptor?? [ 263.268695][ T7910] bond0: (slave bridge0): Releasing backup interface [ 263.271009][ T5708] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 263.271041][ T5708] uvcvideo 6-1:0.199: No valid video chain found. [ 263.341774][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.341799][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.341826][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 263.341842][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.402153][ T9] usb 3-1: config 0 descriptor?? [ 263.832419][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.833052][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.876774][ T5815] usb 6-1: USB disconnect, device number 14 [ 263.977118][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 263.977209][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 264.044173][ T9] usb 3-1: USB disconnect, device number 14 [ 267.074098][ T7953] netlink: 56 bytes leftover after parsing attributes in process `syz.2.717'. [ 267.397857][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 267.477792][ T5815] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 267.496920][ T5862] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 267.550794][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.550841][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 267.550866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.616877][ T9] hub 4-1:4.0: bad descriptor, ignoring hub [ 267.616936][ T9] hub 4-1:4.0: probe with driver hub failed with error -5 [ 267.637814][ T5862] usb 3-1: device descriptor read/64, error -71 [ 267.663531][ T5815] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 267.663562][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.663584][ T5815] usb 6-1: Product: syz [ 267.663599][ T5815] usb 6-1: Manufacturer: syz [ 267.663613][ T5815] usb 6-1: SerialNumber: syz [ 267.665783][ T9] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 267.877791][ T5862] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 268.039324][ T5862] usb 3-1: device descriptor read/64, error -71 [ 268.149966][ T5862] usb usb3-port1: attempt power cycle [ 268.174858][ T5815] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 268.174920][ T5815] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 268.487892][ T5862] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 268.508639][ T5862] usb 3-1: device descriptor read/8, error -71 [ 268.585656][ T5815] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 268.585697][ T5815] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 268.586344][ T5815] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 268.625935][ T5815] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 268.757853][ T5862] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 268.780115][ T5862] usb 3-1: device descriptor read/8, error -71 [ 268.877821][ T5708] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 268.888191][ T5862] usb usb3-port1: unable to enumerate USB device [ 269.241021][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.241057][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.241098][ T5708] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 269.241123][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.539222][ T5708] usb 5-1: config 0 descriptor?? [ 269.750939][ T37] kauditd_printk_skb: 195 callbacks suppressed [ 269.750958][ T37] audit: type=1326 audit(1785267514.482:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.751007][ T37] audit: type=1326 audit(1785267514.492:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.756733][ T37] audit: type=1326 audit(1785267514.492:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.757043][ T37] audit: type=1326 audit(1785267514.492:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.763648][ T37] audit: type=1326 audit(1785267514.492:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.763702][ T37] audit: type=1326 audit(1785267514.502:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.763770][ T37] audit: type=1326 audit(1785267514.502:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.763857][ T37] audit: type=1326 audit(1785267514.502:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3bffde99 code=0x7ffc0000 [ 269.768257][ T37] audit: type=1326 audit(1785267514.502:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac3bffdb2b code=0x7ffc0000 [ 269.781304][ T37] audit: type=1326 audit(1785267514.512:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7973 comm="syz.4.726" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac3bffdb2b code=0x7ffc0000 [ 269.992157][ T7974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.993469][ T7974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.083335][ T5708] usbhid 5-1:0.0: can't add hid device: -71 [ 270.083460][ T5708] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.106246][ T5708] usb 5-1: USB disconnect, device number 21 [ 270.236912][ T5815] usb 6-1: USB disconnect, device number 15 [ 270.383394][ T5919] usb 4-1: USB disconnect, device number 17 [ 271.100872][ T5815] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 273.438249][ T5815] usb 6-1: config 0 has an invalid interface number: 199 but max is 1 [ 273.438281][ T5815] usb 6-1: config 0 has no interface number 1 [ 273.438341][ T5815] usb 6-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 273.438380][ T5815] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.438403][ T5815] usb 6-1: config 0 interface 199 has no altsetting 0 [ 273.494862][ T5815] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 273.494896][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.494918][ T5815] usb 6-1: SerialNumber: syz [ 273.737501][ T5815] usb 6-1: config 0 descriptor?? [ 274.108747][ T5815] uvcvideo 6-1:0.199: Found UVC 0.00 device (0002:0000) [ 274.108783][ T5815] uvcvideo 6-1:0.199: No valid video chain found. [ 274.268149][ T5815] usb 6-1: USB disconnect, device number 16 [ 274.663212][ T4911] Bluetooth: hci5: command 0x0406 tx timeout [ 275.455652][ T8054] syzkaller0: entered promiscuous mode [ 275.455680][ T8054] syzkaller0: entered allmulticast mode [ 275.737840][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 275.857858][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 275.891515][ T10] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.891564][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 275.891589][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.937018][ T10] hub 6-1:4.0: bad descriptor, ignoring hub [ 275.937056][ T10] hub 6-1:4.0: probe with driver hub failed with error -5 [ 275.953803][ T10] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 276.013332][ T5815] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 276.013365][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.013395][ T5815] usb 3-1: Product: syz [ 276.013412][ T5815] usb 3-1: Manufacturer: syz [ 276.013428][ T5815] usb 3-1: SerialNumber: syz [ 276.067843][ T5862] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 276.221901][ T5862] usb 4-1: config index 0 descriptor too short (expected 15622, got 27) [ 276.221933][ T5862] usb 4-1: config 243 has too many interfaces: 250, using maximum allowed: 32 [ 276.221955][ T5862] usb 4-1: config 243 has an invalid descriptor of length 197, skipping remainder of the config [ 276.221993][ T5862] usb 4-1: config 243 has 0 interfaces, different from the descriptor's value: 250 [ 276.224218][ T5862] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 276.224247][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 276.224269][ T5862] usb 4-1: Manufacturer: syz [ 276.224285][ T5862] usb 4-1: SerialNumber: syz [ 276.582501][ T5815] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 276.582575][ T5815] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 276.656581][ T5862] usb 4-1: USB disconnect, device number 18 [ 276.990858][ T5815] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 276.990916][ T5815] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 277.040796][ T5815] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 277.273525][ T5815] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 277.899375][ T8078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.747'. [ 278.087820][ T5815] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 278.283364][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.283401][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.283442][ T5815] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 278.283468][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.300601][ T5815] usb 4-1: config 0 descriptor?? [ 278.522669][ T37] kauditd_printk_skb: 86 callbacks suppressed [ 278.522688][ T37] audit: type=1326 audit(1785267523.262:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.523635][ T37] audit: type=1326 audit(1785267523.262:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70de1cdb2b code=0x7ffc0000 [ 278.524204][ T37] audit: type=1326 audit(1785267523.262:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.573689][ T37] audit: type=1326 audit(1785267523.262:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.586768][ T37] audit: type=1326 audit(1785267523.262:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70de1cdb2b code=0x7ffc0000 [ 278.588650][ T37] audit: type=1326 audit(1785267523.322:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70de18e6ce code=0x7ffc0000 [ 278.783696][ T5919] usb 3-1: USB disconnect, device number 19 [ 278.792345][ T37] audit: type=1326 audit(1785267523.532:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.796789][ T37] audit: type=1326 audit(1785267523.532:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.796901][ T37] audit: type=1326 audit(1785267523.532:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.799284][ T37] audit: type=1326 audit(1785267523.532:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8073 comm="syz.3.746" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70de1cde99 code=0x7ffc0000 [ 278.808013][ T38] INFO: task syz.1.95:6081 blocked for more than 144 seconds. [ 278.808056][ T38] Not tainted syzkaller #0 [ 278.824007][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.824043][ T38] task:syz.1.95 state:D stack:27496 pid:6081 tgid:6078 ppid:5607 task_flags:0x400040 flags:0x00080002 [ 278.824261][ T38] Call Trace: [ 278.824283][ T38] [ 278.824318][ T38] __schedule+0x16dc/0x5500 [ 278.824543][ T38] ? __pfx___schedule+0x10/0x10 [ 278.824598][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 278.824893][ T38] rt_mutex_schedule+0x76/0xf0 [ 278.824968][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 278.825103][ T38] ? rt_mutex_slowlock_block+0x33a/0x680 [ 278.825228][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 278.827118][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 278.827247][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 278.827388][ T38] ? nfsd_nrthreads+0x5b/0x310 [ 278.827486][ T38] ? nfsd_nrthreads+0x5b/0x310 [ 278.827544][ T38] mutex_lock_nested+0x168/0x1d0 [ 278.827704][ T38] nfsd_nrthreads+0x5b/0x310 [ 278.827738][ T38] write_threads+0x201/0x5a0 [ 278.827771][ T38] ? __might_fault+0xaf/0x130 [ 278.827799][ T38] ? __pfx_write_threads+0x10/0x10 [ 278.827941][ T38] ? _copy_from_user+0x94/0xb0 [ 278.828022][ T38] ? simple_transaction_get+0x130/0x170 [ 278.828022][ T38] ? simple_transaction_get+0x130/0x170 [ 278.828243][ T38] nfsctl_transaction_write+0x112/0x160 [ 278.828340][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 278.828434][ T38] vfs_write+0x29f/0xbb0 [ 278.828540][ T38] ? __pfx_vfs_write+0x10/0x10 [ 278.836198][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 278.836324][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.836386][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 278.836452][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 278.836532][ T38] ? fdget_pos+0x252/0x320 [ 278.836603][ T38] ksys_write+0x156/0x270 [ 278.836681][ T38] ? __pfx_ksys_write+0x10/0x10 [ 278.836770][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.836828][ T38] do_syscall_64+0x174/0x580 [ 278.837041][ T38] ? trace_irq_disable+0x3b/0x140 [ 278.837100][ T38] ? clear_bhb_loop+0x40/0x90 [ 278.837161][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.837218][ T38] RIP: 0033:0x7fe408a2de99 [ 278.837285][ T38] RSP: 002b:00007fe406c65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 278.837339][ T38] RAX: ffffffffffffffda RBX: 00007fe408cb6090 RCX: 00007fe408a2de99 [ 278.837379][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 278.837411][ T38] RBP: 00007fe408ac3eaf R08: 0000000000000000 R09: 0000000000000000 [ 278.837442][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.837471][ T38] R13: 00007fe408cb6128 R14: 00007fe408cb6090 R15: 00007ffeac4591f8 [ 278.837567][ T38] [ 278.877469][ T38] [ 278.877469][ T38] Showing all locks held in the system: [ 278.877523][ T38] 4 locks held by pr/legacy/17: [ 278.877573][ T38] 5 locks held by kworker/1:0/31: [ 278.877606][ T38] #0: ffff88801ea8b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.878014][ T38] #1: ffffc90000a5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.878160][ T38] #2: ffff88802a5e0210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 278.878301][ T38] #3: ffff88802a5ef658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x61b/0x4cf0 [ 278.878400][ T38] #4: ffff88802a5a4088 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x53/0x810 [ 278.878526][ T38] 1 lock held by khungtaskd/38: [ 278.878571][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 278.878774][ T38] 14 locks held by kworker/u8:13/1428: [ 278.878857][ T38] 8 locks held by kworker/u8:14/4333: [ 278.878888][ T38] 1 lock held by klogd/4951: [ 278.878919][ T38] 2 locks held by getty/5351: [ 278.878947][ T38] #0: ffff88823be0c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 278.879080][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 278.879292][ T38] 5 locks held by kworker/0:6/5815: [ 278.879327][ T38] 6 locks held by kworker/1:7/5862: [ 278.912646][ T38] #0: ffff88801ea8b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.912856][ T38] #1: ffffc9000598fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.913004][ T38] #2: ffff88802a5f6210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 278.913141][ T38] #3: ffff88802a5a8658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 278.913218][ T38] #4: ffff88802a4f9158 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 278.913334][ T38] #5: ffffffff8ee58ca0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1800 [ 278.913468][ T38] 6 locks held by kworker/1:9/5919: [ 278.913507][ T38] #0: ffff88801ea8b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.913670][ T38] #1: ffffc90005c3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 278.913846][ T38] #2: ffff88802a100210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 278.913987][ T38] #3: ffff88803dad4210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 278.914167][ T38] #4: ffff88813ff67348 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 278.914273][ T38] #5: ffff88813ff67238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x44/0x80 [ 278.914421][ T38] 3 locks held by syz.1.95/6079: [ 278.914452][ T38] #0: ffff88803d9e0328 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 278.914603][ T38] #1: ffff888033ff2500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 278.929035][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 278.929212][ T38] 3 locks held by syz.1.95/6081: [ 278.929244][ T38] #0: ffff88803519cd28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 278.929387][ T38] #1: ffff888033ff2500 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 278.929548][ T38] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x5b/0x310 [ 278.929704][ T38] 7 locks held by kworker/u8:22/7123: [ 278.929747][ T38] 7 locks held by syz.5.751/8091: [ 278.929788][ T38] [ 278.929799][ T38] ============================================= [ 278.929799][ T38] [ 278.929839][ T38] NMI backtrace for cpu 1 [ 278.929890][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 278.929946][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 278.929967][ T38] Call Trace: [ 278.929976][ T38] [ 278.929985][ T38] dump_stack_lvl+0xe8/0x150 [ 278.930023][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 278.930080][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 278.930169][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 278.930274][ T38] sys_info+0x135/0x170 [ 278.930378][ T38] watchdog+0xfd7/0x1030 [ 278.930468][ T38] ? watchdog+0x1c7/0x1030 [ 278.930556][ T38] kthread+0x388/0x470 [ 278.930642][ T38] ? __pfx_watchdog+0x10/0x10 [ 278.930694][ T38] ? __pfx_kthread+0x10/0x10 [ 278.930793][ T38] ret_from_fork+0x514/0xb70 [ 278.930900][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 278.930999][ T38] ? __switch_to+0xc89/0x1420 [ 278.931041][ T38] ? __pfx_kthread+0x10/0x10 [ 278.931078][ T38] ret_from_fork_asm+0x1a/0x30 [ 278.931163][ T38] [ 278.931235][ T38] Sending NMI from CPU 1 to CPUs 0: [ 278.931300][ C0] NMI backtrace for cpu 0 [ 278.931316][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 278.931337][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 278.931348][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 278.931379][ C0] Code: e8 2e be 6f fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 df 30 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 278.931395][ C0] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 278.931411][ C0] RAX: 1ffffffff33c9500 RBX: 00000000000003fd RCX: 0000000000000000 [ 278.931424][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 278.931435][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.931448][ C0] R10: dffffc0000000000 R11: ffffffff85560c70 R12: dffffc0000000000 [ 278.931462][ C0] R13: 0000000000000000 R14: ffffffff99e4ad40 R15: 0000000000000000 [ 278.931475][ C0] FS: 0000000000000000(0000) GS:ffff888125c41000(0000) knlGS:0000000000000000 [ 278.931490][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.931504][ C0] CR2: 0000200000000000 CR3: 000000006311e000 CR4: 00000000003526f0 [ 278.931521][ C0] Call Trace: [ 278.931527][ C0] [ 278.931535][ C0] wait_for_lsr+0x190/0x300 [ 278.931564][ C0] serial8250_console_write+0x113a/0x1b40 [ 278.931598][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 278.931625][ C0] ? console_flush_one_record+0xfa/0xb50 [ 278.931647][ C0] ? console_flush_one_record+0x472/0xb50 [ 278.931668][ C0] console_flush_one_record+0x642/0xb50 [ 278.931689][ C0] ? console_flush_one_record+0xfa/0xb50 [ 278.931709][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 278.931729][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 278.931755][ C0] legacy_kthread_func+0x1b6/0x250 [ 278.931775][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 278.931792][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 278.931822][ C0] ? __kthread_parkme+0x71/0x1f0 [ 278.931848][ C0] ? __kthread_parkme+0x196/0x1f0 [ 278.931875][ C0] kthread+0x388/0x470 [ 278.931903][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 278.931920][ C0] ? __pfx_kthread+0x10/0x10 [ 278.931948][ C0] ret_from_fork+0x514/0xb70 [ 278.931978][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 278.932013][ C0] ? __switch_to+0xc89/0x1420 [ 278.932039][ C0] ? __pfx_kthread+0x10/0x10 [ 278.932071][ C0] ret_from_fork_asm+0x1a/0x30 [ 278.932098][ C0] [ 279.024011][ T31] usb 6-1: USB disconnect, device number 17 [ 279.027538][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 279.027566][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.027638][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 279.027661][ T38] Call Trace: [ 279.027669][ T38] [ 279.027678][ T38] vpanic+0x56c/0xa60 [ 279.027725][ T38] ? __pfx___schedule+0x10/0x10 [ 279.027750][ T38] ? __pfx_vpanic+0x10/0x10 [ 279.027781][ T38] panic+0xc5/0xd0 [ 279.027823][ T38] ? __pfx_panic+0x10/0x10 [ 279.027874][ T38] ? preempt_schedule_common+0x82/0xd0 [ 279.027940][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 279.027985][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 279.028031][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 279.028125][ T38] watchdog+0x1030/0x1030 [ 279.028207][ T38] ? watchdog+0x1c7/0x1030 [ 279.028274][ T38] kthread+0x388/0x470 [ 279.028368][ T38] ? __pfx_watchdog+0x10/0x10 [ 279.028428][ T38] ? __pfx_kthread+0x10/0x10 [ 279.028550][ T38] ret_from_fork+0x514/0xb70 [ 279.028646][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 279.028733][ T38] ? __switch_to+0xc89/0x1420 [ 279.028818][ T38] ? __pfx_kthread+0x10/0x10 [ 279.028916][ T38] ret_from_fork_asm+0x1a/0x30 [ 279.029014][ T38] [ 279.029646][ T38] Kernel Offset: disabled