last executing test programs: 7.291467042s ago: executing program 3 (id=205): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x101400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) (async) readv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 7.163200224s ago: executing program 3 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x900}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000500), 0x300000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB='sec=krb5,addr=127.0.0.1,']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/nfs/clnt0/gssd\x00', 0x2, 0x0) read(r3, &(0x7f0000000800), 0x400) write(r3, &(0x7f0000000900)="000000000000000001000000000000002400000001000000ffffff7f00000000000000001100000000000000", 0x2c) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xb8, 0xfffffbff, 0xffffffff], [0xffffffff, 0xfffffffe, 0xffffffff, 0xa, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffffc, 0xb0a0, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x9c, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x6, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000280)={0xfffffffd, 0xb, 0xa4b3, 0x3ff, 0x109000000, 0x48, 0xffffffffffffc474, 0x9, 0x12, 0x7, 0xfffffff8, 0x2}) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) 6.158035766s ago: executing program 3 (id=214): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000002c0)) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020240020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f0000000a00)={0x1c, &(0x7f00000000c0)={0x20, 0x17, 0x3e, "a853cb40d76bdafe69a834106ead41ab91b5ac82c8f426f35c3e17e3aaa9e88cb3e41d301bc534116fe66bbe6047f21718d749451706f587210c60c631e0"}, 0x0, 0x0}) 4.568257235s ago: executing program 3 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r4, 0x9c3fa077fa966179, 0x0, 0x1c1, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 4.351517395s ago: executing program 0 (id=223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0}) 4.278124793s ago: executing program 0 (id=224): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffff9, 0x3f4c, 0x10}) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000001c0)=0x400009, 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) io_pgetevents(r3, 0x8, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) (async) io_submit(r3, 0x0, &(0x7f00000008c0)) shutdown(r1, 0x1) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x5000) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448df, &(0x7f0000000000)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) (async) io_destroy(r3) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="fc3b68c38114ff9e4c1c35a0d28271bfc05ae84f02ec3d01a9fa24c6bdf304b48e236daffbf7ce99aba95d3b69af"], 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000040)="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", 0x1d9, 0xfffffffffffffffd) (async) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0508460c"], 0x8) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050405c900aa"], 0x7) (rerun: 32) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001600010a00000000000000e90900000762"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 4.063682762s ago: executing program 2 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001111104600000a60c6eec00be00302bfffe800000000000fff5000000000000aaff020000000000000000000000000001"], 0xfdef) 4.000921724s ago: executing program 2 (id=227): r0 = syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x0, 0xb0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0xfffffffffffffe6c}, {0xd}, {0x6}, [@acm={0x4, 0x24, 0x2, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x4, [0x6]}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xff6a, 0x8, 0x40, 0x0, 0xa}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x4, 0x90}, @obex={0x5, 0x24, 0x15, 0x200}]}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xf, 0xfd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e010203010902240001000000000904"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x402800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) r3 = syz_usb_connect$cdc_ecm(0x4, 0xbf, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x1, 0x1, 0xfd, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xb, 0x24, 0x6, 0x0, 0x0, "a25495d7d5fb"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x0, 0x6, 0xf4}, [@mdlm_detail={0x2d, 0x24, 0x13, 0x9, "cc7bf4290dfe181a3c7240567b06ecd9b86969e37c185a246d46727eadb04e3b9d5e186322aa369baf"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x7, 0x100}, @country_functional={0xc, 0x24, 0x7, 0x5, 0x4, [0x0, 0x7, 0x7]}, @mdlm_detail={0x14, 0x24, 0x13, 0x9b, "b623b091d352dcdbe1bc6ab4b1eee543"}, @country_functional={0xe, 0x24, 0x7, 0x0, 0x81, [0x401, 0x7, 0x8000, 0x6]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x9, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x8, 0x1d}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000480)={0xa, 0x6, 0xf6e04c9f1af7f957, 0x8, 0xb, 0x8, 0xff, 0x9}, 0x15b, &(0x7f00000004c0)={0x5, 0xf, 0x15b, 0x4, [@generic={0xb3, 0x10, 0x3, "60ce4f23cfca3f9399f0ac928b8d2e0cd79c9752bf13385b7bdb0f33b9c85a663ff536204b6cec025688fe8467a117988308b412eb0754e598d5c2f88262224175c207ee538c8b975ae75ad1bdf0911ec18283a5790d799b7232cf77e9904e53b01305a38642fbd7012ccdc9df43c65a636d278d240f30187c944dc31a5b20d60d096ef15cc3beaddcc02ae813c95e83c8627bc8698574cbfb83e3a0e1a6948366e3651ae4bf8070a5583ac895e51ac3"}, @generic={0x99, 0x10, 0xa, "f035d96ce823fd080147e3f36bbca9f56473049f8568a995603372f4541a34976063e4993ffacc04bfa6d1b318f724b8ce126249213d5c34162dd6f4b541550fb654c8f6f1c43e6e5207d6782adf9a0c127e47e816ac2ad1d8c129d4fb6f36ea77eedae7755752c21d4892b07b623783a6efcf7932db2a2894fc53e7d240662312ffb715e21eca391a30ce9cbe8d5be9bc6dd00a2de7"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0xc, 0x9}]}, 0x1, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x100a}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x22, 0xb5, {0xb5, 0x4, "a57e339e5fee12fb736996be34256c909b935e6dee6ab7f5ef7f3314b7d753e8ac84059e0260a1e4238c9fe622c0e39c9a7cc823bb4fe225208722b7bab4c137653e572667a1c7adbfc4fedec46cfb94e2510087b238bc091577bdf07805bfe158b1ca9d3319bbf381b23d2a6ae42dd4e4dc56b610e26032a56d45276715ae397cb3742fbe6ed2cd03370be13bedefc2e10eeed2bf9d3b7d4ae74026c70f88d849eb7b9b7f2d2ccd348dac8f6892d8dd19ffd7"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000800)={0x0, 0x3, 0x77, "7419ccfe5cf7657e636d14cf49748282480c7812c5c0c70dd304dffe7ac157f9051be8898996e9f4cd4f1819f6ab561403e99c88eef363ad6398771005c6877f8ea2b2bf47c6e9eae7649f8678df3cabf963cc7321e6945d96ab0c803c13c01c272ab955483c75e6819ef5963b7dcdf6261f77d0d1d88b"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x6}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f00000000c0)={0x10200, 0x3, 0xffffffff, 0x2000, &(0x7f0000ffb000/0x2000)=nil, 0x1000, r4}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000200)="2c000000110005000100000000000000000000020000000000000000000000000c0003006261746164763000", 0x2c) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.490717111s ago: executing program 3 (id=228): r0 = socket(0x1e, 0x4, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x90000000}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) close(0x3) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) timerfd_create(0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write$UHID_INPUT(r4, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r6, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r6}, &(0x7f0000000140)=0x8) r7 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000c80)={0x34, &(0x7f00000002c0)={0x40, 0x3, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x17) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) r8 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000002000)={0x60, 0x0, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x449, 0x0, 0x0, 0xcb63, 0xe, 0x4e, 0x3f, 0x1e}) syz_usb_control_io$printer(r7, 0x0, 0x0) 2.929267662s ago: executing program 0 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x6000, {0x1}}}, 0x60}}, 0x0) 2.834180094s ago: executing program 0 (id=231): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x40004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x1a}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xa) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000100)={0x20, 0x7, 0x6, "556dc9d48c61"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.022546539s ago: executing program 1 (id=244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0xa00000000000000}, 0x0) 928.23812ms ago: executing program 1 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e65740000000500010007000000050005000a0000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x20, 0x0, 0x2006c0c4}, 0x0) 927.68078ms ago: executing program 1 (id=246): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat(r1, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000f00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) (async) ioctl$HIDIOCGREPORTINFO(r3, 0xc00c4809, &(0x7f0000000080)={0x1, 0xffffffff, 0x4}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) (async) bind$netlink(r4, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfe, 0x281a5faa01ef99b3}, 0xc) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r7 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) (async) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x31e98000) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) pselect6(0x40, &(0x7f0000000340)={0x8, 0x10, 0x4, 0x7, 0x7, 0x6, 0x81, 0x7}, &(0x7f0000000680)={0x6, 0xfffffffffffff929, 0x1, 0xff, 0x4, 0x8, 0x10, 0x34}, &(0x7f00000006c0)={0xd2c, 0x1, 0x77, 0xffffffffffffff01, 0xd81, 0x4, 0xffffffffffff5942}, &(0x7f0000000700)={0x0, 0x989680}, &(0x7f0000000780)={&(0x7f0000000740)={[0xffffffff]}, 0x8}) ioctl$KVM_SET_FPU(r11, 0x41a0ae8d, 0x0) (async) r12 = syz_usb_connect$printer(0x6, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12011003000000082505a8a44000010203010902240001010730f20904000f0208000616032c8d820200040004f81b7dcdfdabb633d7db9458567f46717a422b4fda5522696bcc6ae316a6728ba7e6b129ca850000008000000000bc4c0f28cc8bf5f9faae1422d33ff6d31af42e0fda174c1068992526e190ec3783ec93801fb94111cc9c01122f0f30f2b17eb23b45b7fde9d800000000000000003725fcc78325b339dacee5c48db9a9f7cd1b17c4e2d35a7673c528646b9e7b73c33c2ffa12bc81622699f7ad8d963ce16caa6c99744a22f55812ff2771f3d0bf3b5daf2d3471094b74d2e7f8f14dcf4cd4b4cda4b1dbfca90be1fc6bfd48eb15a2e12078ee5560217e5d97598cd34f7ca21bcf8408c86fc284c238c4054dd0b7f2cf65fed1c4c14a6e74e2b22449b27d9d44db649b148b25350a62f794bebb00000004b3efbf4e38afebdbd9fe1f7c928e4670d09bcb5da46a8218d1d915393cc86c37be5099ff0f6e0690e8dce3943ea403ae91d726"], &(0x7f00000004c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x200, 0x51, 0x8, 0xb3, 0x40, 0x4}, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="05685906a0bea3db3bb4609b4cdd75c6d518c9cb46c41246b80a1003020300040801010a1003020c00fd2f0400ba47c02b1f65b65fdd22896fae2fc0e6f7e507b1533e4ea5cfd1943ae1032a1de44c13c745817cc02af0cc96ab81f089fb960c8b18ba7580c4a7a4c075fab7ea42f2db3f07b85d6f9c3b9f59f375bc3a8d718a7df2735b2fd301bcc8bb3cd26653591305308430282eeccce4ff734b5c10e225dbbdc0c19eb1820ca9827fea1835eb9b8b7e5bf01018927c9be78477fad19f872b2fa25c7bb06cfc2a2f9c78a4e1c9d38bace50291c62139e3da6614aad6b3ae3e4b76839454c94f78ffc1b58e5b95e645a193be131cfbe3d8ebabe377b4d99a9ce5cce381f7c258adf0eaa7944606150a7e692d0ab49a5258ec2c9f9facc9569e51fb4b3250f108c99f1094299745c6bd9d3cc7802a19"], 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x816}}]}) syz_usb_ep_read(r12, 0x1, 0x1000, &(0x7f0000000f40)=""/4096) (async) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f0000000180)=0x2001) (async) r13 = fcntl$dupfd(r7, 0x0, r7) read$FUSE(r13, &(0x7f0000004d00)={0x2020}, 0x2020) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111, 0x8}}, 0x20) 846.636001ms ago: executing program 0 (id=247): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000003010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 796.44957ms ago: executing program 0 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='+', 0x1) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0xa}) (async) close(r0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000003c0)={0x6, 0x10}) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0xffffffffffffff10) (async) setns(0xc9, 0x0) (async) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000100)={0x0, 0xfe56, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ca7afc15ac88728e801d5e39726833d0dba87f0ae5a62cd0bdbf84d798b7f6c95bd129e557a2d38e9fdf90417f6015fb41c8c49d227a9e20bb78d23922f13c32cef03f558ee68df0e8c0d2dae4243e9870872fa0e9d68371cd7024162c2ab234f9313c089129da2e2c5fa320e78bcb2476e16d3b0381495cdc10f0fe0b35eb11a628b0511c8e194005d880b38094094ea062e0aad5aa290fd1f9f46b4526d6b6f8cc44439c4b696e9493d8afbbbdc9f1b99194f5685f3b2722e88bc5630d70865a7e107330cb069505d44c1b0d51f16d1d97c801ffcb9858177e679e4f3b"], 0x20}, 0x1, 0x0, 0x0, 0x240008c0}, 0x44) listen(r0, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) (async) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) setns(0xc9, 0x0) r7 = socket(0x0, 0xa, 0x0) getpeername$packet(r7, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xfa}, &(0x7f0000000040)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r6) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300000000000800060002000000"], 0x30}, 0x1, 0x900}, 0x0) (async) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f00000001c0)=0xac0}) 379.598981ms ago: executing program 2 (id=249): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x2944, 0x80, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f00feffff7f", 0x24) 350.383953ms ago: executing program 3 (id=250): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0xc4c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/psched\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001340)=ANY=[@ANYBLOB="5c0100001000010000000000fdfffffffe880000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffff050000000000000000000000000000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000a00000008000000000000001c0017000000000000000000ffffffff0000000000000000040000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001"], 0x15c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') pread64(r3, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xc8) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000080)={{0x3, 0x2, 0x4, 0x1, 0x7, 0x40}, 0x92, [0xa13, 0x80000000, 0x3, 0x8, 0x2, 0x6, 0xff, 0x3, 0x3, 0x6, 0x46, 0x6, 0x9, 0xcf8b, 0x4, 0x3, 0x10000000, 0x3e6, 0x7c2, 0xffffaae0, 0xa, 0x8, 0x1, 0xf9d, 0x0, 0x2, 0x7fffffff, 0x25db, 0xb, 0x9, 0x5, 0x1, 0x4, 0x10001, 0x80000000, 0x1, 0x101, 0x8, 0x8, 0xfffffff9, 0x40, 0x101, 0x4, 0xa, 0x251, 0x3, 0xc, 0x101, 0x0, 0x2, 0x7, 0xf4d, 0x0, 0x5, 0xdd, 0x7, 0x1, 0x4, 0xfffffffb, 0x0, 0x1ff, 0x7, 0x9, 0xb4, 0x12, 0x1, 0x8, 0x0, 0x6, 0xc, 0xfffffffb, 0x5394, 0x80000000, 0x3ff, 0x9, 0x8, 0x0, 0x1e49, 0x1, 0x4e, 0x0, 0xffffffff, 0x81, 0xfffff860, 0x10001, 0xb, 0x0, 0x6, 0xa1, 0x7, 0x8, 0x1, 0x0, 0x1, 0xbc1, 0x3, 0x9, 0xc7d, 0x9, 0xfff, 0x3, 0x6c45, 0x4, 0x5, 0x5, 0xdec, 0x8c74, 0x8, 0x1, 0x4, 0x800, 0x8, 0x7, 0x1, 0xdf42, 0x9, 0xfffffffd, 0x8, 0xb, 0x0, 0x1, 0x7, 0x4, 0x1, 0x2, 0x9, 0x10, 0x1, 0x5, 0xb, 0x33c2462f, 0x3, 0x200, 0xa3, 0x1000, 0x8, 0xcf86, 0x80000001, 0x7, 0xe37, 0x5, 0x4, 0x6, 0x4, 0x8, 0x84c, 0x0, 0x10, 0x4, 0x7, 0x7, 0xcf1d, 0x8000, 0xa, 0x8, 0x8001, 0x3ff, 0x9, 0x0, 0x3, 0x8, 0x78, 0x7ff, 0x1, 0x200, 0x5b, 0x5, 0x401, 0xb3d, 0x7, 0x2, 0x81, 0x7f, 0x7, 0x0, 0xffff, 0x8000, 0x8, 0x7ff, 0x8, 0x2, 0x4, 0x1, 0x40, 0x3, 0x6, 0x1000, 0x6, 0xe0, 0x0, 0x0, 0x5, 0xfffeffff, 0x4, 0x0, 0x7, 0x4, 0x40, 0x9, 0x0, 0x7ff, 0x5, 0x5, 0xdeb, 0x0, 0x7f, 0x3, 0x7, 0xbda5, 0x0, 0x492f7fa2, 0xfffffff3, 0x2, 0x401, 0x6, 0x2, 0x6e87, 0xffffffff, 0x4, 0x4, 0xfffffff8, 0xe19, 0x5, 0xd01a, 0x5, 0x9, 0x3ff, 0x800, 0x0, 0x1, 0x7, 0x7, 0x6eec, 0x8, 0x7, 0x3, 0xa, 0xd6, 0x4, 0x50caaffc, 0x3, 0x8, 0x3, 0x7, 0x4, 0x0, 0x3, 0x6, 0x3, 0x5, 0x8, 0x4, 0x1, 0x0, 0x7fffffff, 0x5, 0xd, 0x3, 0xfffeffff, 0x7fff, 0x5, 0x8, 0x5574f548, 0x3, 0x9, 0xfffff800, 0x7, 0x9, 0x8, 0x9, 0xfffffffa, 0x8, 0x482, 0x8, 0x7fffffff, 0x7, 0x784, 0x1ff, 0x8000, 0x2c37, 0x690, 0x101, 0xe, 0x0, 0x2, 0x7, 0x5, 0x7, 0x40e, 0x6, 0x9, 0x2, 0xfffff7e1, 0x800, 0x10000, 0x400, 0x6, 0x5, 0xf, 0x8001, 0x1, 0x0, 0xfffffd69, 0xe8a, 0x9, 0x5f1, 0xd, 0x8, 0x7fff, 0x6, 0xfff, 0x3, 0x7, 0x752, 0x7b, 0xde, 0xfffff2de, 0x2, 0x0, 0x9, 0x8, 0x2, 0x3, 0x9, 0x6, 0x8, 0x6, 0xe2a, 0x0, 0x7, 0x3, 0x81, 0x7, 0x9, 0x4, 0x7, 0x4, 0x0, 0xfffffff7, 0x1, 0x9, 0xd7, 0x4, 0x7, 0x10001, 0x70d, 0x0, 0x800, 0x42, 0x9, 0x9, 0xffffffff, 0xfffffffe, 0x2, 0xfffff001, 0xb0a, 0x401, 0x7, 0xee86, 0x9, 0x0, 0x12, 0x9, 0x98eb, 0xfffffffd, 0xdf, 0x40, 0x9, 0xe, 0xfffffffc, 0xa15, 0x8, 0xfff, 0x8e, 0x7e9, 0xfffff8f6, 0xff, 0x5, 0x8, 0x3, 0x1, 0x0, 0x2, 0x1905b565, 0x8, 0x3, 0x51ca, 0x4, 0x0, 0x5, 0x101, 0xb00, 0x9, 0x3, 0x81, 0xce04c000, 0x7, 0x1b80, 0x0, 0xcb, 0xfffffff1, 0x4, 0x5, 0x7, 0x7f, 0x3ff, 0x4, 0x9, 0x2, 0x5, 0x3, 0x3, 0x0, 0x1, 0x7, 0x3, 0x9, 0x80000000, 0x1, 0x3, 0xeeb, 0x6, 0xa, 0xdb000000, 0xcb1, 0xc, 0x8a5, 0x0, 0x8, 0xa5, 0x100, 0x8001, 0x6, 0x4, 0x8001, 0x9, 0x7f, 0x200, 0x7fffffff, 0x2, 0x7, 0x12, 0x9, 0x80000001, 0x3, 0x9, 0x2, 0x4, 0x2, 0xcd, 0x81, 0x8, 0xe, 0x200, 0xa, 0x3, 0x80000001, 0x7, 0x1000, 0x82, 0x4, 0x7000, 0x6, 0x7, 0x5, 0x4, 0x7, 0x9, 0x10, 0x8, 0x7fff, 0x0, 0x9, 0x4, 0xfffffc00, 0x9, 0x14, 0x6258, 0x3, 0x6, 0x692eb9ff, 0x4, 0x2, 0x4, 0xa3c, 0x10001, 0x9, 0x5, 0x8, 0x4, 0x3, 0x0, 0x1, 0x6, 0x2, 0x80000001, 0x81, 0x1, 0x2a, 0x2, 0x9, 0xff, 0x2be0, 0xf, 0x51d, 0x5, 0x2, 0x2, 0x0, 0x0, 0x3f, 0x4, 0x4, 0x8, 0x8, 0x7, 0x73, 0x91, 0x1, 0x32, 0xe, 0xe, 0xb3d4, 0xb3, 0xff, 0xae4, 0x6, 0x6, 0x8eba, 0x3, 0x9, 0xc, 0x8, 0x3, 0x4, 0xfffffff7, 0x10, 0x4, 0x2, 0x5, 0x7ff, 0x36, 0x4, 0x3, 0x8, 0x2a00, 0x7, 0x101, 0xcec, 0x5e5c, 0x2, 0x3, 0x1, 0x61d, 0x0, 0x1, 0xd, 0x5, 0x35f, 0x2, 0x9, 0xc2ec349, 0x2, 0x0, 0x2, 0x0, 0x3, 0xb, 0x7, 0x0, 0x8001, 0x0, 0xf5, 0xffffffb3, 0x200, 0x2, 0xfffffffc, 0x401, 0x1, 0xd, 0x7, 0x6, 0xffff, 0x5, 0xfffff9fa, 0x4, 0x9, 0x9, 0x1, 0x4, 0xe, 0x4000000, 0x7, 0x10001, 0x2, 0x3, 0x3, 0x8, 0x80000001, 0x2, 0x9, 0x200, 0x101, 0x8, 0x101, 0x59b, 0x9, 0x10, 0xcc, 0x3, 0x8, 0x3, 0xfffffffc, 0x1ff, 0x3, 0x8, 0xe, 0x3, 0x0, 0xf, 0x1, 0x400, 0x4, 0x9, 0x7f00000, 0x3ee6, 0x9, 0xfff, 0x6, 0x5, 0x3, 0x100, 0xb, 0x4, 0x4521, 0x8, 0x2, 0xfffff624, 0x9, 0x0, 0x7ff, 0xb6cb, 0xea, 0x5, 0x2, 0x100, 0xbb4c, 0x0, 0x4, 0x80, 0x6, 0x3, 0xc, 0x7, 0x9, 0x2, 0x446c, 0xa05, 0x8b5b, 0x8, 0x2, 0xaae9, 0x8, 0x9, 0x80000001, 0x4, 0x5, 0x2319, 0x2, 0xc, 0x5, 0x7, 0x4, 0x81, 0xffffffff, 0x8, 0x7, 0x18b, 0x62, 0x0, 0x0, 0x7, 0x7fffffff, 0x7, 0x1, 0xffff, 0x5, 0xbb, 0x3, 0x10, 0x0, 0x219, 0x8001, 0x3, 0x7fff, 0x5af5, 0x9, 0x2, 0x7ff, 0x2, 0x6, 0xef, 0x0, 0x10, 0x3ff, 0x2, 0x1, 0xce, 0x7b, 0x4, 0x1, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x2, 0x7, 0x7, 0x952a, 0x80000001, 0x2, 0x7, 0x7, 0x7, 0x6, 0xfe, 0x1, 0x40, 0x8000, 0x6, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x3, 0xffffffff, 0xfffffffd, 0x7, 0x7395185a, 0x5, 0x0, 0x5827, 0x9, 0x9, 0x7fb5, 0x81, 0x8, 0x1, 0xffffffff, 0x2, 0x0, 0x8, 0x9, 0x0, 0x0, 0x2, 0x9, 0x1, 0x6, 0x4, 0x10, 0x5, 0x9, 0x101, 0x0, 0x8, 0x4, 0x8e, 0x6, 0xffff381a, 0xffff, 0xfff, 0xb, 0x5, 0xfffffffc, 0x2, 0x5, 0xf6, 0x5, 0x6, 0x9, 0xfff, 0x7fff, 0x2, 0x2, 0x0, 0x80000000, 0xfffffff8, 0xffff3a6c, 0x5, 0x7, 0xfff, 0x5, 0x3, 0x4f, 0x5, 0x7, 0x1000, 0x3, 0x0, 0x3, 0x4, 0x8, 0x9, 0xd6f, 0xfffffff7, 0xff, 0x200, 0x5, 0x81, 0x6, 0x0, 0x7, 0x246c, 0x5, 0x1, 0x2a, 0x8000, 0x4, 0x97, 0x3, 0xe9, 0x1, 0x0, 0x7, 0xe72e66b7, 0x2, 0x7fff, 0x2, 0x3ff, 0x79a37e5a, 0xfffffffd, 0x6, 0x8, 0x6, 0x560, 0x0, 0x5, 0x7, 0x0, 0x4, 0x2, 0x0, 0x0, 0xa86f, 0x3, 0x5, 0x6, 0x5, 0xa7, 0x400, 0x7, 0x10000, 0xe7, 0x3, 0x6, 0x6, 0xf16a3c20, 0x4, 0x62, 0x1000, 0x765a, 0x2, 0x9, 0xa9, 0xb, 0x2, 0x35c, 0x100, 0x2, 0x8001, 0x5, 0x2, 0x1, 0x7, 0x6, 0x63, 0x15, 0x2, 0xf, 0xfffffffc, 0x9, 0x40, 0x81, 0xfffffff8, 0x401, 0x1000, 0x2, 0x7, 0xa, 0xa669, 0xe, 0x4792, 0xff, 0x4, 0x67e, 0x5, 0x99, 0x6, 0x0, 0x7fffffff, 0x1, 0x8, 0x200, 0x3, 0xf28c, 0x40, 0x31, 0x8, 0x3, 0x1000, 0x3, 0x2, 0x0, 0x4, 0x0, 0x85c, 0xee, 0x7, 0x3, 0xc2fa, 0x1, 0x7, 0x5, 0x6, 0x2, 0x4, 0x7, 0xfffffff5, 0x4, 0x5, 0x2, 0xa7, 0x2, 0x9, 0x3, 0x6a, 0x2, 0xd4, 0x6a3f, 0x6, 0x5, 0x9, 0x5330be3a, 0x1ff, 0x6c, 0x1, 0x10000, 0x4, 0xfffffeff, 0x5, 0x80, 0x2, 0x3, 0x4, 0x1, 0x3, 0xb, 0x3, 0x4, 0x3, 0x1, 0xba, 0x2, 0x6, 0x76, 0xfffffff4, 0xfffff001, 0x100, 0x8, 0x8001, 0x400, 0xfffffff6, 0x2384d182, 0x80, 0x5, 0x166363b4, 0x7, 0x1, 0x19, 0x9, 0x3, 0x0, 0x101, 0x9, 0xf99c, 0x7, 0x2, 0x6, 0x200, 0x8, 0x7fff, 0x0, 0x40, 0x1, 0x5, 0x1, 0x6, 0xffffffd3, 0x7, 0x9, 0xe, 0x8, 0x6, 0x7, 0x8, 0x9, 0x56ad, 0x83a, 0x6, 0x2, 0x2, 0xfffffffa, 0x5c, 0x4, 0x7fffffff, 0xfdb4, 0xffff, 0x6, 0x80000001, 0x40d929d3]}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0498ddfdb31d71"], 0x7) ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000001100)) 326.509358ms ago: executing program 1 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000020002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002"], 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 184.926551ms ago: executing program 2 (id=252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000800000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) 184.64901ms ago: executing program 1 (id=253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 147.837297ms ago: executing program 1 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x5, 0x5, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xec) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x30, 0x2, @thr={&(0x7f0000000300)="8c7abc9e3473600862b488923dd7c85020d2d86884a87b87dac9e36d92a885ec30256d45309684a51f40f554790cf055b61dfc082b8688913a9ce63724aff11a4ef665e1d2df62e9acc9ce55e7825417027f9dbfe48ad8f683e8b248e06d5df50870a3c3495d78655cbe008c499389c8a7e4ce4d9a6417c09d29282fb3c7aaf52041c34fdfd3b11366edbd68fa8eeacf4147f268e2d39c1f06ca73dae5d51af90a0964b0b65a53557ca41455f372f8f3e97913fba4d407a32346e08b0244", &(0x7f00000003c0)="6055c0cb4e3f3c4445bd5dc9362f26bea7bb982461b65ac83527f0aebc6ea8d78eea7fb32c583837a2a6f1bc83583759eb79237e2c44deb66b6d477b0bae5df2670a1bbb69dc6f8340d18a74e220787e4eefa2ca208672db08b62a93d840c45c4798d9bf30ad4106194ab73d3ee477f01323cbcbb2c6fee396e542daf6b8f35e7459da61dd54b57b85117ee6f47f4a403c0a9161cc280380d49c8c68eeea1a9b563c599ba74d58b1d7db6c8029652dca94c9331b3ab3c5747a606c6ddafdd8904a56cebab4e962b6e5173a411007d3abab64ea87b84249756e0258ccdb89ee147e89ca8cadc5605e"}}, &(0x7f00000002c0)=0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x10000000000000}, &(0x7f0000000340)=0x18) timer_settime(r7, 0x0, &(0x7f0000000140)={{r5, r6+10000000}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r9, &(0x7f00000000c0)='./file1\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 144.46633ms ago: executing program 2 (id=255): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "0000ffff", '\x00\x00\x00\x00\x00\x00\x00A'}, 0x28) 0s ago: executing program 2 (id=256): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd_index=0x5, 0x0, 0x0, 0x0, 0x14, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x3}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) (async, rerun: 64) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) (async, rerun: 64) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) r6 = gettid() openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) pwrite64(r7, &(0x7f0000000180)='Y', 0x1, 0x4) (async) ptrace$ARCH_GET_CPUID(0x1e, r6, 0x0, 0x1011) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x880) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 51.759337][ T5275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.770175][ T5275] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. syzkaller login: [ 74.787478][ T5601] cgroup: Unknown subsys name 'net' [ 74.916893][ T5601] cgroup: Unknown subsys name 'cpuset' [ 74.926344][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.495425][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.116339][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.135482][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.135884][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.137232][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.137598][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.140823][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.141174][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.141481][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.144790][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.145754][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.147741][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.148810][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.149114][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.149692][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.155430][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.158430][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.159915][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.160421][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.165385][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.171236][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.816607][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.817016][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.817155][ T5610] bridge_slave_0: entered allmulticast mode [ 81.818217][ T5610] bridge_slave_0: entered promiscuous mode [ 81.868968][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.869076][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.869457][ T5611] bridge_slave_0: entered allmulticast mode [ 81.870938][ T5611] bridge_slave_0: entered promiscuous mode [ 81.872879][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.873030][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.873231][ T5610] bridge_slave_1: entered allmulticast mode [ 81.875924][ T5610] bridge_slave_1: entered promiscuous mode [ 81.923838][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.923948][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.924339][ T5611] bridge_slave_1: entered allmulticast mode [ 81.926860][ T5611] bridge_slave_1: entered promiscuous mode [ 81.955607][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.955710][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.955790][ T5613] bridge_slave_0: entered allmulticast mode [ 81.956832][ T5613] bridge_slave_0: entered promiscuous mode [ 82.000406][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.000552][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.000684][ T5613] bridge_slave_1: entered allmulticast mode [ 82.002206][ T5613] bridge_slave_1: entered promiscuous mode [ 82.032649][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.037387][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.093937][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.097036][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.100806][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.152006][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.169882][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.170005][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.170144][ T5612] bridge_slave_0: entered allmulticast mode [ 82.172515][ T5612] bridge_slave_0: entered promiscuous mode [ 82.177424][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.177590][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.177710][ T5612] bridge_slave_1: entered allmulticast mode [ 82.179485][ T5612] bridge_slave_1: entered promiscuous mode [ 82.180458][ T5617] Bluetooth: hci1: command tx timeout [ 82.214207][ T5611] team0: Port device team_slave_0 added [ 82.253738][ T5617] Bluetooth: hci0: command tx timeout [ 82.253914][ T5616] Bluetooth: hci3: command tx timeout [ 82.253922][ T5617] Bluetooth: hci2: command tx timeout [ 82.269398][ T5611] team0: Port device team_slave_1 added [ 82.272540][ T5610] team0: Port device team_slave_0 added [ 82.276988][ T5613] team0: Port device team_slave_0 added [ 82.311440][ T5610] team0: Port device team_slave_1 added [ 82.314775][ T5613] team0: Port device team_slave_1 added [ 82.318526][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.380671][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.407444][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.407479][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.407507][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.495570][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.495590][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.495618][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.509084][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.509101][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.509123][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.511228][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.511241][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.511262][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.515847][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.515861][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.515884][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.518825][ T5612] team0: Port device team_slave_0 added [ 82.524577][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.524590][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.524613][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.538108][ T5612] team0: Port device team_slave_1 added [ 82.707062][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.707079][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.707101][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.716843][ T5611] hsr_slave_0: entered promiscuous mode [ 82.717967][ T5611] hsr_slave_1: entered promiscuous mode [ 82.796921][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.796939][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.796966][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.817695][ T5613] hsr_slave_0: entered promiscuous mode [ 82.820302][ T5613] hsr_slave_1: entered promiscuous mode [ 82.822624][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 82.823456][ T5613] Cannot create hsr debugfs directory [ 82.835230][ T5610] hsr_slave_0: entered promiscuous mode [ 82.839031][ T5610] hsr_slave_1: entered promiscuous mode [ 82.839772][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.839789][ T5610] Cannot create hsr debugfs directory [ 83.048580][ T5612] hsr_slave_0: entered promiscuous mode [ 83.049310][ T5612] hsr_slave_1: entered promiscuous mode [ 83.049769][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 83.049789][ T5612] Cannot create hsr debugfs directory [ 83.388864][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.405805][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.406591][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.410363][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.411164][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.426631][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.432085][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.439793][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.532442][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.541936][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.543061][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.553871][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.560734][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.569397][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.578036][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.589078][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.666472][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.672793][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.693980][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.696261][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.697087][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.700618][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.726904][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.738944][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.802915][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.866907][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.869442][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.882134][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.889503][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.895538][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.904981][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.916746][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.926979][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.929941][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.933480][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.933804][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.979903][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.979985][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.994889][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.075038][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.102996][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.103096][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.131211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.131317][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.160281][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.202682][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.254980][ T5617] Bluetooth: hci1: command tx timeout [ 84.265405][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.265513][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.319139][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.319210][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.333380][ T5617] Bluetooth: hci0: command tx timeout [ 84.335848][ T5613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.335868][ T5613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.338483][ T4930] Bluetooth: hci3: command tx timeout [ 84.338571][ T5617] Bluetooth: hci2: command tx timeout [ 84.416420][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.489641][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.519345][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.519466][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.543252][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.543372][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.272218][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.414011][ T5611] veth0_vlan: entered promiscuous mode [ 85.443519][ T5611] veth1_vlan: entered promiscuous mode [ 85.535038][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.549275][ T5611] veth0_macvtap: entered promiscuous mode [ 85.579604][ T5611] veth1_macvtap: entered promiscuous mode [ 85.636127][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.660088][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.682609][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.703753][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.758049][ T5613] veth0_vlan: entered promiscuous mode [ 85.810562][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.814995][ T5613] veth1_vlan: entered promiscuous mode [ 85.823776][ T1122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.825283][ T1122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.826064][ T1122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.914787][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.914811][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.945812][ T5610] veth0_vlan: entered promiscuous mode [ 85.984323][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.984344][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.992246][ T5613] veth0_macvtap: entered promiscuous mode [ 86.008735][ T5613] veth1_macvtap: entered promiscuous mode [ 86.028159][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.047811][ T5610] veth1_vlan: entered promiscuous mode [ 86.089805][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.096719][ T5612] veth0_vlan: entered promiscuous mode [ 86.114772][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.147154][ T5612] veth1_vlan: entered promiscuous mode [ 86.200594][ T5610] veth0_macvtap: entered promiscuous mode [ 86.230980][ T5610] veth1_macvtap: entered promiscuous mode [ 86.236339][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.314283][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.314352][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.314390][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.322804][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.329581][ T5612] veth0_macvtap: entered promiscuous mode [ 86.335100][ T5617] Bluetooth: hci1: command tx timeout [ 86.369344][ T5612] veth1_macvtap: entered promiscuous mode [ 86.395990][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.396012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.420754][ T4930] Bluetooth: hci3: command tx timeout [ 86.420789][ T4930] Bluetooth: hci0: command tx timeout [ 86.420918][ T5617] Bluetooth: hci2: command tx timeout [ 86.457688][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.512571][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.512593][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.527977][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.580184][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.663598][ T998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.704092][ T1122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.704583][ T1122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.704780][ T1122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.753572][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.850775][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.850799][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.952020][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.952041][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.974682][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.017250][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.017271][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.047412][ T998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.048213][ T998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.087667][ T5777] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'. [ 87.129223][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.129246][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.137246][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.147466][ T992] cfg80211: failed to load regulatory.db [ 87.294074][ T9] usb 1-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 87.320061][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.320121][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.320167][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.557936][ T5782] nfs4: Bad value for 'retrans' [ 87.558615][ T5781] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 87.683281][ T992] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.686873][ T5791] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.701158][ T5791] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.715248][ T5791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.769849][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.771785][ T5800] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.782426][ T5800] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8'. [ 87.872480][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.872539][ T992] usb 4-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 87.889057][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.892340][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.892363][ T992] usb 4-1: Product: syz [ 87.892377][ T992] usb 4-1: Manufacturer: syz [ 87.962143][ T992] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 88.349653][ T992] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 88.358858][ T992] videodev: could not get a free minor [ 88.358876][ T992] uvcvideo 4-1:1.1: Failed to register meta-cap device (-23). [ 88.385428][ T5722] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.414700][ T5617] Bluetooth: hci1: command tx timeout [ 88.495200][ T4930] Bluetooth: hci3: command tx timeout [ 88.495569][ T5616] Bluetooth: hci0: command tx timeout [ 88.495659][ T5617] Bluetooth: hci2: command tx timeout [ 88.545317][ T5722] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 88.546567][ T5722] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.546615][ T5722] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 88.549206][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.549231][ T5722] usb 2-1: Product: syz [ 88.549255][ T5722] usb 2-1: Manufacturer: syz [ 88.549270][ T5722] usb 2-1: SerialNumber: syz [ 88.619969][ T5822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.726374][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 88.727308][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 88.727356][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 88.767371][ T5813] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 88.916889][ T5831] netlink: 'syz.2.14': attribute type 20 has an invalid length. [ 88.988937][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 89.170664][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.172522][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.178133][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.181348][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.353274][ T192] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.388168][ T5813] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.504721][ T192] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 89.505774][ T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.505805][ T192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.507443][ T192] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 89.507462][ T192] usb 3-1: Product: syz [ 89.507470][ T192] usb 3-1: Manufacturer: syz [ 89.523931][ T192] uvcvideo 3-1:1.0: Found multiple Units with ID 1 [ 89.589445][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.589472][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.591605][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.591626][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.641641][ T5722] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.641677][ T5722] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 89.641689][ T5722] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 89.717517][ T192] uvcvideo 3-1:1.0: Found UVC 71.01 device syz (225a:e1d4) [ 89.717565][ T192] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 89.845796][ T5813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.846636][ T5813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.904196][ T5837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.905205][ T5837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.936086][ T5709] usb 3-1: USB disconnect, device number 2 [ 90.004413][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 90.005517][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 90.007443][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 90.010146][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 90.011000][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 90.011389][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 90.011764][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 90.012187][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 90.012515][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 90.018233][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 90.018881][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 90.019432][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 90.019918][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 90.021740][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 90.022226][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 90.023027][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 90.024957][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 90.025572][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 90.056694][ T9] ax88179_178a 1-1:1.0 eth2: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 46:7c:5f:45:98:eb [ 90.078916][ T9] usb 1-1: USB disconnect, device number 2 [ 90.108215][ T9] ax88179_178a 1-1:1.0 eth2: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 90.407689][ T5709] usb 4-1: USB disconnect, device number 2 [ 90.435386][ T5722] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 90.486744][ T5722] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 90.545024][ T5722] usb 2-1: USB disconnect, device number 2 [ 90.548977][ T5722] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 90.602783][ T5842] netlink: 'syz.2.18': attribute type 39 has an invalid length. [ 90.662825][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.786942][ T5849] openvswitch: netlink: IPv6 tunnel dst address is zero [ 90.944390][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944435][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944463][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944488][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944514][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944560][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944587][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944612][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944637][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.944663][ T992] hid-generic 0000:47A1:0001.0001: unknown main item tag 0x0 [ 90.979040][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.048016][ T992] hid-generic 0000:47A1:0001.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 91.193311][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 91.194339][ T9] usb 4-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 91.197316][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.201508][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.201534][ T9] usb 4-1: Product: syz [ 91.201548][ T9] usb 4-1: Manufacturer: syz [ 91.201563][ T9] usb 4-1: SerialNumber: syz [ 91.204100][ T998] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.204226][ T998] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.204274][ T998] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.204308][ T998] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.298023][ T9] usb 4-1: config 0 descriptor?? [ 91.317999][ T9] cdc_ether 4-1:0.0: missing cdc header descriptor [ 91.319107][ T9] usb 4-1: unsupported MDLM descriptors [ 91.373805][ T5709] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.528256][ T1583] usb 4-1: USB disconnect, device number 3 [ 91.535782][ T5709] usb 2-1: Using ep0 maxpacket: 8 [ 91.538029][ T5709] usb 2-1: New USB device found: idVendor=093a, idProduct=010e, bcdDevice=a5.84 [ 91.539160][ T5709] usb 2-1: config 124 has an invalid interface number: 27 but max is 0 [ 91.539182][ T5709] usb 2-1: config 124 has no interface number 0 [ 91.539209][ T5709] usb 2-1: config 124 interface 27 has no altsetting 0 [ 91.545206][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.545231][ T5709] usb 2-1: Product: syz [ 91.545245][ T5709] usb 2-1: Manufacturer: syz [ 91.545258][ T5709] usb 2-1: SerialNumber: syz [ 91.753292][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.792930][ T5709] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 91.792989][ T5709] gspca_mr97310a: reg write [21] error -22 [ 91.793035][ T5709] mr97310a 2-1:124.27: probe with driver mr97310a failed with error -22 [ 91.801420][ T5709] usb 2-1: USB disconnect, device number 3 [ 91.916610][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.916667][ T27] usb 1-1: New USB device found: idVendor=7475, idProduct=652f, bcdDevice=65.76 [ 91.916703][ T27] usb 1-1: no configurations [ 91.916715][ T27] usb 1-1: can't read configurations, error -22 [ 91.973278][ T192] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.133888][ T192] usb 3-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 92.134880][ T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.134910][ T192] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.134936][ T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.552183][ T153] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 92.565885][ T5879] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 92.695184][ T5890] openvswitch: netlink: Missing key (keys=40, expected=100) [ 92.844574][ T5897] netlink: 'syz.0.37': attribute type 16 has an invalid length. [ 92.847034][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.852542][ T32] audit: type=1800 audit(1791107167.025:2): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.36" name="bus" dev="tmpfs" ino=55 res=0 errno=-22 [ 93.014814][ T5900] syzkaller1: entered promiscuous mode [ 93.014841][ T5900] syzkaller1: entered allmulticast mode [ 93.273292][ T992] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.447279][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.0.43'. [ 93.448008][ T5921] netlink: 'syz.0.43': attribute type 2 has an invalid length. [ 93.508294][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 93.510352][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 93.510384][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 93.579817][ T5925] Bluetooth: MGMT ver 1.23 [ 93.650600][ T5928] FAULT_INJECTION: forcing a failure. [ 93.650600][ T5928] name failslab, interval 1, probability 0, space 0, times 1 [ 93.650634][ T5928] CPU: 0 UID: 0 PID: 5928 Comm: syz.3.46 Not tainted syzkaller #0 PREEMPT(full) [ 93.650658][ T5928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.650671][ T5928] Call Trace: [ 93.650680][ T5928] [ 93.650690][ T5928] dump_stack_lvl+0xe8/0x150 [ 93.650725][ T5928] should_fail_ex+0x3eb/0x540 [ 93.650762][ T5928] should_failslab+0xa8/0x100 [ 93.650786][ T5928] __kmalloc_noprof+0xf9/0x710 [ 93.650811][ T5928] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 93.650831][ T5928] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 93.650861][ T5928] __memcg_list_lru_alloc+0x1d9/0x760 [ 93.650889][ T5928] ? xa_load+0x60/0x210 [ 93.650910][ T5928] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 93.650951][ T5928] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 93.650977][ T5928] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 93.651016][ T5928] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 93.651040][ T5928] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 93.651061][ T5928] ? bdev_alloc_inode+0x29/0x90 [ 93.651080][ T5928] ? bdev_alloc_inode+0x29/0x90 [ 93.651106][ T5928] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 93.651126][ T5928] bdev_alloc_inode+0x29/0x90 [ 93.651146][ T5928] alloc_inode+0x6a/0x1b0 [ 93.651168][ T5928] new_inode+0x1f/0x170 [ 93.651188][ T5928] ? bdev_alloc+0x18/0x370 [ 93.651212][ T5928] bdev_alloc+0x24/0x370 [ 93.651235][ T5928] __alloc_disk_node+0x11f/0x600 [ 93.651261][ T5928] __blk_alloc_disk+0x105/0x1d0 [ 93.651286][ T5928] ? __pfx___blk_alloc_disk+0x10/0x10 [ 93.651335][ T5928] ? __raw_spin_lock_init+0x45/0x100 [ 93.651361][ T5928] dm_create+0x476/0xf70 [ 93.651387][ T5928] dev_create+0x1f7/0x400 [ 93.651410][ T5928] ? __pfx_dev_create+0x10/0x10 [ 93.651431][ T5928] ? __might_fault+0xaf/0x130 [ 93.651461][ T5928] dm_ctl_ioctl+0x9ec/0xe10 [ 93.651492][ T5928] ? __pfx_dev_create+0x10/0x10 [ 93.651513][ T5928] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 93.651565][ T5928] ? __fget_files+0x2a/0x420 [ 93.651591][ T5928] ? bpf_lsm_file_ioctl+0x9/0x20 [ 93.651610][ T5928] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 93.651630][ T5928] __se_sys_ioctl+0xfc/0x170 [ 93.651656][ T5928] do_syscall_64+0x166/0x520 [ 93.651676][ T5928] ? trace_irq_disable+0x3b/0x140 [ 93.651695][ T5928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.651718][ T5928] ? clear_bhb_loop+0x70/0xc0 [ 93.651743][ T5928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.651773][ T5928] RIP: 0033:0x7f9b39f9e159 [ 93.651794][ T5928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.651812][ T5928] RSP: 002b:00007f9b3ae36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.651837][ T5928] RAX: ffffffffffffffda RBX: 00007f9b3a225fa0 RCX: 00007f9b39f9e159 [ 93.651853][ T5928] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 93.651867][ T5928] RBP: 00007f9b3a03506b R08: 0000000000000000 R09: 0000000000000000 [ 93.651881][ T5928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.651894][ T5928] R13: 00007f9b3a226038 R14: 00007f9b3a225fa0 R15: 00007ffca15070f8 [ 93.651928][ T5928] [ 93.994090][ T5937] tipc: Started in network mode [ 93.994112][ T5937] tipc: Node identity 4, cluster identity 4711 [ 93.994125][ T5937] tipc: Node number set to 4 [ 94.230272][ T5945] netlink: 'syz.0.53': attribute type 75 has an invalid length. [ 94.241597][ T5946] syz.3.52 uses obsolete (PF_INET,SOCK_PACKET) [ 94.366364][ T5952] loop0: detected capacity change from 0 to 1 [ 94.401158][ T5952] ldm_validate_privheads(): Disk read failed. [ 94.401231][ T5952] loop0: [ 94.401255][ T5952] loop0: partition table partially beyond EOD, truncated [ 94.479798][ T5956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.58'. [ 94.552048][ T5961] netlink: 'syz.1.59': attribute type 21 has an invalid length. [ 94.552140][ T5961] netlink: 'syz.1.59': attribute type 2 has an invalid length. [ 94.552966][ T5960] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 94.558073][ T5960] team0: Device vxcan0 is of different type [ 94.716446][ T5968] syzkaller1: entered promiscuous mode [ 94.716469][ T5968] syzkaller1: entered allmulticast mode [ 94.758003][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 94.758331][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 94.758746][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 94.759574][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 94.760030][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 94.760845][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 94.761352][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 94.761831][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 94.762310][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 94.762774][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 94.801331][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 94.802208][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 94.803064][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 94.805328][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 94.807044][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 94.807468][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 94.807892][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 94.808331][ T192] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 94.821970][ T1583] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.825520][ T192] ax88179_178a 3-1:1.0 eth3: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, d6:0d:06:a1:3f:ea [ 94.844366][ T192] usb 3-1: USB disconnect, device number 3 [ 94.854300][ T192] ax88179_178a 3-1:1.0 eth3: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 95.020520][ T5970] Bluetooth: hci0: unsupported parameter 5135 [ 95.020546][ T5970] Bluetooth: hci0: unsupported parameter 8192 [ 95.020559][ T5970] Bluetooth: hci0: unsupported parameter 5135 [ 95.020570][ T5970] Bluetooth: hci0: unsupported parameter 8192 [ 95.050188][ T1583] usb 2-1: device descriptor read/64, error -71 [ 95.283875][ T1583] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.399596][ T5987] binder: Failure in copy_transaction_data: EINVAL [ 95.412055][ T5987] syz.2.69 (5987) used greatest stack depth: 11840 bytes left [ 95.413525][ T1583] usb 2-1: device descriptor read/64, error -71 [ 95.472883][ T5989] process 'syz.2.70' launched './file0' with NULL argv: empty string added [ 95.525085][ T1583] usb usb2-port1: attempt power cycle [ 95.553339][ T5709] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 95.607037][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 95.653061][ T5997] jffs2: notice: (5997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.683304][ T5709] usb 4-1: device descriptor read/64, error -71 [ 95.725924][ T6001] ======================================================= [ 95.725924][ T6001] WARNING: The mand mount option has been deprecated and [ 95.725924][ T6001] and is ignored by this kernel. Remove the mand [ 95.725924][ T6001] option from the mount to silence this warning. [ 95.725924][ T6001] ======================================================= [ 95.783803][ T1981] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 95.823457][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.863307][ T1583] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.885339][ T1583] usb 2-1: device descriptor read/8, error -71 [ 95.923389][ T5709] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 95.975495][ T27] usb 3-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 95.977177][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.977203][ T27] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.977244][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.026402][ T27] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 96.047250][ T27] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 96.083332][ T5709] usb 4-1: device descriptor read/64, error -71 [ 96.153537][ T1583] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 96.175700][ T1583] usb 2-1: device descriptor read/8, error -71 [ 96.195358][ T5709] usb usb4-port1: attempt power cycle [ 96.283540][ T1583] usb usb2-port1: unable to enumerate USB device [ 96.383430][ T5993] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 96.384186][ T5993] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 96.385107][ T5993] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 96.504733][ T5993] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 96.507906][ T1583] usb 3-1: USB disconnect, device number 4 [ 96.526865][ T1583] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 96.527717][ T1583] spcp8x5 3-1:1.0: device disconnected [ 96.533315][ T5709] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 96.561800][ T5709] usb 4-1: device descriptor read/8, error -71 [ 96.793487][ T5709] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 96.816096][ T5709] usb 4-1: device descriptor read/8, error -71 [ 96.924864][ T5709] usb usb4-port1: unable to enumerate USB device [ 96.993291][ T1583] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 97.144426][ T1583] usb 1-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 97.146103][ T1583] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.146164][ T1583] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.146206][ T1583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.324484][ T6027] Zero length message leads to an empty skb [ 98.033648][ T192] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.206051][ T192] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 98.207925][ T192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.207956][ T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.245301][ T192] usb 2-1: config 0 descriptor?? [ 98.508492][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 98.509221][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 98.509248][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 98.684094][ T192] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 98.688190][ T46] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 98.725841][ T192] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input5 [ 98.838968][ T46] usb 3-1: not running at top speed; connect to a high speed hub [ 98.839006][ T46] usb 3-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00 [ 98.846256][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.871701][ T46] cyberjack 3-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 98.899536][ T46] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 98.937866][ T192] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 99.031895][ C0] Mem-Info: [ 99.031913][ C0] active_anon:5626 inactive_anon:0 isolated_anon:0 [ 99.031913][ C0] active_file:0 inactive_file:42616 isolated_file:0 [ 99.031913][ C0] unevictable:0 dirty:79 writeback:0 [ 99.031913][ C0] slab_reclaimable:10418 slab_unreclaimable:89828 [ 99.031913][ C0] mapped:24933 shmem:524 pagetables:1114 [ 99.031913][ C0] sec_pagetables:0 bounce:0 [ 99.031913][ C0] kernel_misc_reclaimable:0 [ 99.031913][ C0] free:1348399 free_pcp:11502 free_cma:0 [ 99.031979][ C0] Node 0 active_anon:22504kB inactive_anon:0kB active_file:0kB inactive_file:170264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99732kB dirty:316kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.032045][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 99.032107][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.032175][ C0] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 99.032230][ C0] Node 0 DMA32 free:1424516kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22504kB inactive_anon:0kB active_file:0kB inactive_file:170264kB unevictable:0kB writepending:316kB zspages:0kB present:3129332kB managed:2541328kB mlocked:0kB bounce:0kB free_pcp:45984kB local_pcp:24888kB free_cma:0kB [ 99.032302][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 99.032342][ C0] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1412kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 99.032408][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 99.032450][ C0] Node 1 Normal free:3953708kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.032515][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 99.032557][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.032726][ C0] Node 0 DMA32: 2*4kB (ME) 240*8kB (UM) 119*16kB (UM) 70*32kB (UM) 9*64kB (UM) 2*128kB (UM) 3*256kB (UME) 1*512kB (E) 1*1024kB (E) 3*2048kB (M) 344*4096kB (UM) = 1424376kB [ 99.032910][ C0] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 99.033039][ C0] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 5*16kB (UM) 8*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 963*4096kB (M) = 3953708kB [ 99.033231][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.033250][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.033269][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.033289][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.033308][ C0] 43136 total pagecache pages [ 99.033317][ C0] 0 pages in swap cache [ 99.033326][ C0] Free swap = 124996kB [ 99.033335][ C0] Total swap = 124996kB [ 99.033344][ C0] 2097051 pages RAM [ 99.033353][ C0] 0 pages HighMem/MovableOnly [ 99.033361][ C0] 429750 pages reserved [ 99.033370][ C0] 0 pages cma reserved [ 99.228407][ T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 99.234940][ T192] usb 3-1: USB disconnect, device number 5 [ 99.271743][ T192] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 99.283086][ T192] cyberjack 3-1:1.0: device disconnected [ 99.418443][ T9] usb 2-1: USB disconnect, device number 9 [ 99.492701][ T46] usb 4-1: New USB device found: idVendor=0af0, idProduct=d057, bcdDevice=0.00 [ 99.503741][ T46] usb 4-1: config 2 has an invalid interface number: 5 but max is 0 [ 99.503771][ T46] usb 4-1: config 2 has no interface number 0 [ 99.503845][ T46] usb 4-1: config 2 interface 5 altsetting 185 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.503869][ T46] usb 4-1: config 2 interface 5 has no altsetting 0 [ 99.537862][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.537888][ T46] usb 4-1: Product: 倊 [ 99.537900][ T46] usb 4-1: Manufacturer: 횈ꫫ齑㿛핪へ냁錰ꂳゅ⁾魌魡쌗鹑಺᮱혅垧䯣凥薀ᨕ馹懯糊 쾈䬅띮㓠퀝夹谎⪢ [ 99.537918][ T46] usb 4-1: SerialNumber: 䪨ấꎂ噁㛥戣桭漙楘턝텈踯┑倉燡퓅例휎廪㤟索畒㏆瞑൚ꋷz衐뛉䮆ယ뜌ហ鶝⮚⡿蟲땱ᒲ씺釳컀뛸⛰젪懮恐⣂뉺⌋坤옋஝䞼滦롐윅頬ᰥ뙅칷夑㽢捅켪椔낊᭷좸൰ᵚ鐸虗萭ာ叹け䨍䬚芯츰䑸楓ﷴή帏槗軔曐⤺订㭌첨솴㚲隟彲좿渚沤ꦰ筿槳鋢龗᫑Ｙ爭웕뙠횧 [ 99.815654][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 99.816648][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 99.817226][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 99.817751][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 99.819628][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 99.820165][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 99.820734][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 99.821301][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 99.823249][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 99.845271][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 99.867327][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 99.902244][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 99.914626][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 99.926414][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 99.951301][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 99.985188][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 100.008601][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 100.010063][ T1583] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 100.025983][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.95'. [ 100.209832][ T6067] random: crng reseeded on system resumption [ 100.298277][ T46] hso 4-1:2.5: Not our interface [ 100.301031][ T46] usb-storage 4-1:2.5: USB Mass Storage device detected [ 100.323013][ T1583] ax88179_178a 1-1:1.0 eth3: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, ce:ae:e6:90:4d:16 [ 100.327198][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.360937][ T1583] usb 1-1: USB disconnect, device number 5 [ 100.375643][ T1583] ax88179_178a 1-1:1.0 eth3: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 100.419465][ T46] usb 4-1: USB disconnect, device number 8 [ 100.482112][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 100.482170][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 100.493479][ T192] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 100.648228][ T192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.648285][ T192] usb 2-1: New USB device found: idVendor=0711, idProduct=0210, bcdDevice=22.c2 [ 100.650463][ T192] usb 2-1: config 74 has an invalid interface number: 142 but max is 2 [ 100.650488][ T192] usb 2-1: config 74 has an invalid interface number: 72 but max is 2 [ 100.650509][ T192] usb 2-1: config 74 has an invalid interface number: 97 but max is 2 [ 100.650528][ T192] usb 2-1: config 74 has no interface number 0 [ 100.650543][ T192] usb 2-1: config 74 has no interface number 1 [ 100.650559][ T192] usb 2-1: config 74 has no interface number 2 [ 100.650626][ T192] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 100.650654][ T192] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has an invalid bInterval 128, changing to 4 [ 100.650679][ T192] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0x9 has invalid maxpacket 1024, setting to 0 [ 100.650706][ T192] usb 2-1: config 74 interface 142 altsetting 255 endpoint 0xD has invalid maxpacket 64, setting to 8 [ 100.650745][ T192] usb 2-1: config 74 interface 72 altsetting 255 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 100.650783][ T192] usb 2-1: config 74 interface 97 altsetting 148 has a duplicate endpoint with address 0xD, skipping [ 100.650805][ T192] usb 2-1: config 74 interface 142 has no altsetting 0 [ 100.650824][ T192] usb 2-1: config 74 interface 72 has no altsetting 0 [ 100.650842][ T192] usb 2-1: config 74 interface 97 has no altsetting 0 [ 100.660136][ T192] usb 2-1: string descriptor 0 read error: -22 [ 100.660279][ T192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.671400][ T6069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.671653][ T6069] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.680094][ T192] mct_u232 2-1:74.142: MCT U232 converter detected [ 100.681960][ T192] mct_u232 ttyUSB0: expected endpoint missing [ 100.710866][ T192] mct_u232 2-1:74.72: MCT U232 converter detected [ 100.712097][ T192] mct_u232 ttyUSB1: expected endpoint missing [ 100.735115][ T192] mct_u232 2-1:74.97: MCT U232 converter detected [ 100.739602][ T192] mct_u232 ttyUSB2: expected endpoint missing [ 100.771794][ T6084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.101'. [ 100.887326][ T192] usb 2-1: USB disconnect, device number 10 [ 100.914640][ T192] mct_u232 2-1:74.142: device disconnected [ 100.931211][ T192] mct_u232 2-1:74.72: device disconnected [ 100.950558][ T192] mct_u232 2-1:74.97: device disconnected [ 100.994444][ T6088] netlink: 'syz.0.103': attribute type 20 has an invalid length. [ 101.013888][ T6088] rmnet0: entered allmulticast mode [ 101.353432][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.459671][ T6103] netlink: 'syz.1.110': attribute type 27 has an invalid length. [ 101.480164][ T6103] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 101.495843][ T6105] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5610] was attempted by ""[6105] [ 101.518053][ T9] usb 1-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 101.521086][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.521139][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.521185][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.610152][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 101.682135][ T6111] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=866500001 (1733000002 ns) > initial count (282005216 ns). Using initial count to start timer. [ 101.733613][ T6112] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 101.733613][ T6112] The task syz.1.114 (6112) triggered the difference, watch for misbehavior. [ 101.866081][ T192] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.023378][ T192] usb 3-1: Using ep0 maxpacket: 8 [ 102.026229][ T192] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.028474][ T192] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.028507][ T192] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.028565][ T192] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.028589][ T192] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.028633][ T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.245010][ T192] usb 3-1: GET_CAPABILITIES returned 0 [ 102.245066][ T192] usbtmc 3-1:16.0: can't read capabilities [ 102.464718][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.466933][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.470774][ T192] usb 3-1: USB disconnect, device number 6 [ 102.583277][ T992] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 102.620846][ T6124] netlink: 56 bytes leftover after parsing attributes in process `syz.1.118'. [ 102.745913][ T992] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 102.747572][ T992] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 32, changing to 9 [ 102.747593][ T992] usb 4-1: config 1 interface 0 has no altsetting 0 [ 102.749996][ T992] usb 4-1: string descriptor 0 read error: -22 [ 102.750074][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.883821][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 102.884480][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 102.884519][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 102.993343][ T27] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.155986][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.156039][ T27] usb 2-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 103.157314][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.159354][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 103.159378][ T27] usb 2-1: Product: syz [ 103.159392][ T27] usb 2-1: Manufacturer: syz [ 103.169774][ T27] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 103.224423][ T992] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 103.242022][ T992] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0003/input/input6 [ 103.344443][ T6140] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 103.344465][ T6140] netlink: 116 bytes leftover after parsing attributes in process `syz.2.125'. [ 103.359057][ T992] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 103.446476][ T46] usb 4-1: USB disconnect, device number 9 [ 103.515903][ T6144] fido_id[6144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 103.551967][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.126'. [ 103.592453][ T6146] ovs-system: entered promiscuous mode [ 103.599137][ T27] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 103.600654][ T27] uvcvideo 2-1:1.1: No frame descriptor found for the default format. [ 103.600684][ T27] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 103.601245][ T27] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -22 [ 103.768913][ T6149] capability: warning: `syz.2.127' uses deprecated v2 capabilities in a way that may be insecure [ 104.121676][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 104.128716][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 104.129885][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 104.131732][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.132753][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 104.134335][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 104.135445][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.136533][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 104.136972][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 104.138720][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.140056][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.140513][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.140941][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 104.141564][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.142312][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.143331][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 104.144810][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 104.145411][ T9] ax88179_178a 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 104.202642][ T9] ax88179_178a 1-1:1.0 eth3: register 'ax88179_178a' at usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, e2:03:17:78:b9:4b [ 104.216471][ T9] usb 1-1: USB disconnect, device number 6 [ 104.230951][ T9] ax88179_178a 1-1:1.0 eth3: unregister 'ax88179_178a' usb-dummy_hcd.0-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 104.797820][ T6164] netlink: 'syz.2.129': attribute type 4 has an invalid length. [ 104.887343][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'. [ 105.201752][ T6173] binder: Failure in copy_transaction_data: EFAULT [ 105.201818][ T6173] binder: Failure when writing BR_NOOP at beginning of buffer. [ 105.201832][ T6173] binder: Read failure Err(EFAULT) in pid:77 [ 105.353492][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 105.513656][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 105.520252][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 105.520304][ T9] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=0.40 [ 105.523127][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 150, changing to 7 [ 105.535688][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.535714][ T9] usb 1-1: Product: syz [ 105.535728][ T9] usb 1-1: Manufacturer: syz [ 105.535742][ T9] usb 1-1: SerialNumber: syz [ 105.774492][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.775174][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.791220][ T6168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.791872][ T6168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.878967][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 105.892172][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.986225][ T992] usb 2-1: USB disconnect, device number 11 [ 106.093080][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.093139][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.093380][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.384995][ T9] usb 1-1: USB disconnect, device number 7 [ 106.518408][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.593628][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 106.665040][ T6204] FAULT_INJECTION: forcing a failure. [ 106.665040][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 106.665075][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.0.142 Not tainted syzkaller #0 PREEMPT(full) [ 106.665099][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 106.665112][ T6204] Call Trace: [ 106.665120][ T6204] [ 106.665130][ T6204] dump_stack_lvl+0xe8/0x150 [ 106.665164][ T6204] should_fail_ex+0x3eb/0x540 [ 106.665192][ T6204] should_failslab+0xa8/0x100 [ 106.665217][ T6204] __kmalloc_noprof+0xf9/0x710 [ 106.665239][ T6204] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 106.665260][ T6204] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 106.665288][ T6204] __memcg_list_lru_alloc+0x1d9/0x760 [ 106.665316][ T6204] ? xa_load+0x60/0x210 [ 106.665337][ T6204] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 106.665377][ T6204] __memcg_slab_post_alloc_hook+0x3b2/0xdb0 [ 106.665404][ T6204] ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0 [ 106.665442][ T6204] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 106.665465][ T6204] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 106.665487][ T6204] ? bdev_alloc_inode+0x29/0x90 [ 106.665506][ T6204] ? bdev_alloc_inode+0x29/0x90 [ 106.665532][ T6204] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 106.665552][ T6204] bdev_alloc_inode+0x29/0x90 [ 106.665572][ T6204] alloc_inode+0x6a/0x1b0 [ 106.665594][ T6204] new_inode+0x1f/0x170 [ 106.665622][ T6204] ? bdev_alloc+0x18/0x370 [ 106.665646][ T6204] bdev_alloc+0x24/0x370 [ 106.665669][ T6204] __alloc_disk_node+0x11f/0x600 [ 106.665697][ T6204] __blk_alloc_disk+0x105/0x1d0 [ 106.665721][ T6204] ? __pfx___blk_alloc_disk+0x10/0x10 [ 106.665771][ T6204] ? __raw_spin_lock_init+0x45/0x100 [ 106.665797][ T6204] dm_create+0x476/0xf70 [ 106.665823][ T6204] dev_create+0x1f7/0x400 [ 106.665847][ T6204] ? __pfx_dev_create+0x10/0x10 [ 106.665867][ T6204] ? __might_fault+0xaf/0x130 [ 106.665896][ T6204] dm_ctl_ioctl+0x9ec/0xe10 [ 106.665927][ T6204] ? __pfx_dev_create+0x10/0x10 [ 106.665948][ T6204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 106.666001][ T6204] ? __fget_files+0x2a/0x420 [ 106.666027][ T6204] ? bpf_lsm_file_ioctl+0x9/0x20 [ 106.666048][ T6204] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 106.666068][ T6204] __se_sys_ioctl+0xfc/0x170 [ 106.666093][ T6204] do_syscall_64+0x166/0x520 [ 106.666113][ T6204] ? trace_irq_disable+0x3b/0x140 [ 106.666132][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.666154][ T6204] ? clear_bhb_loop+0x70/0xc0 [ 106.666178][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.666199][ T6204] RIP: 0033:0x7fdba7f9e159 [ 106.666220][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.666239][ T6204] RSP: 002b:00007fdba8e94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.666264][ T6204] RAX: ffffffffffffffda RBX: 00007fdba8225fa0 RCX: 00007fdba7f9e159 [ 106.666280][ T6204] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 106.666295][ T6204] RBP: 00007fdba803506b R08: 0000000000000000 R09: 0000000000000000 [ 106.666308][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.666321][ T6204] R13: 00007fdba8226038 R14: 00007fdba8225fa0 R15: 00007fff77af8cc8 [ 106.666355][ T6204] [ 106.764523][ T6207] tipc: Started in network mode [ 106.764543][ T6207] tipc: Node identity 4, cluster identity 4711 [ 106.764554][ T6207] tipc: Node number set to 4 [ 106.789987][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 106.803233][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 106.812904][ T27] usb 2-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 106.954387][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.954417][ T27] usb 2-1: Product: syz [ 106.954432][ T27] usb 2-1: Manufacturer: syz [ 106.954446][ T27] usb 2-1: SerialNumber: syz [ 107.079675][ T27] usb 2-1: config 0 descriptor?? [ 107.090054][ T27] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 107.393726][ T27] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 107.428037][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.428515][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.499389][ T6228] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 107.653337][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.733276][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 107.803256][ T46] usb 3-1: device descriptor read/64, error -71 [ 107.833315][ T27] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 107.863289][ T9] usb 4-1: device descriptor read/64, error -71 [ 107.985744][ T27] usb 1-1: New USB device found: idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 107.986824][ T27] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 107.989716][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.989741][ T27] usb 1-1: Product: syz [ 107.989755][ T27] usb 1-1: Manufacturer: syz [ 107.989766][ T27] usb 1-1: SerialNumber: syz [ 108.036264][ T27] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 108.052189][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.103337][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 108.183381][ T46] usb 3-1: device descriptor read/64, error -71 [ 108.218887][ T27] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 108.237336][ T27] usb 1-1: USB disconnect, device number 8 [ 108.243502][ T9] usb 4-1: device descriptor read/64, error -71 [ 108.295679][ T46] usb usb3-port1: attempt power cycle [ 108.354408][ T9] usb usb4-port1: attempt power cycle [ 108.633338][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.654307][ T46] usb 3-1: device descriptor read/8, error -71 [ 108.693289][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.713654][ T9] usb 4-1: device descriptor read/8, error -71 [ 108.798505][ T6240] syzkaller1: entered promiscuous mode [ 108.798522][ T6240] syzkaller1: entered allmulticast mode [ 108.893946][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.913898][ T46] usb 3-1: device descriptor read/8, error -71 [ 108.956341][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 108.974032][ T9] usb 4-1: device descriptor read/8, error -71 [ 109.023486][ T46] usb usb3-port1: unable to enumerate USB device [ 109.079818][ T6244] binder: Failure in copy_transaction_data: EINVAL [ 109.083767][ T9] usb usb4-port1: unable to enumerate USB device [ 109.242078][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 109.273726][ T46] usb 2-1: USB disconnect, device number 12 [ 109.376071][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 109.743311][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 109.744930][ T5709] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 109.894026][ T46] usb 2-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 109.894431][ T5709] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 109.895183][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.895287][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.895331][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.895525][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.895551][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.895593][ T5709] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.895650][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.900058][ T5709] usb 1-1: config 0 descriptor?? [ 110.707099][ T5709] usbhid 1-1:0.0: can't add hid device: -71 [ 110.707212][ T5709] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 110.714322][ T1583] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 110.728191][ T5709] usb 1-1: USB disconnect, device number 9 [ 110.864674][ T1583] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00 [ 110.865561][ T1583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 110.865589][ T1583] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 110.865604][ T1583] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 110.865618][ T1583] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 110.865641][ T1583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.869366][ T6262] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 111.053259][ T992] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 111.124110][ T6277] nfs: Bad value for 'retrans' [ 111.204241][ T992] usb 4-1: New USB device found: idVendor=1908, idProduct=1315, bcdDevice=0.00 [ 111.205516][ T992] usb 4-1: config 0 has an invalid interface number: 127 but max is 1 [ 111.205539][ T992] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 111.205559][ T992] usb 4-1: config 0 has no interface number 1 [ 111.205621][ T992] usb 4-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.205663][ T992] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 111.209982][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.210007][ T992] usb 4-1: Product: syz [ 111.210021][ T992] usb 4-1: Manufacturer: syz [ 111.210035][ T992] usb 4-1: SerialNumber: syz [ 111.251193][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 111.288462][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 111.288662][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 111.293092][ T992] usb 4-1: config 0 descriptor?? [ 111.308352][ T1583] ims_pcu 3-1:1.0: GET_INFO command failed, error: -71 [ 111.311653][ T1583] ims_pcu 3-1:1.0: probe with driver ims_pcu failed with error -71 [ 111.359822][ T992] usb-storage 4-1:0.127: USB Mass Storage device detected [ 111.376235][ T992] usb-storage 4-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 111.431321][ T992] usb-storage 4-1:0.0: USB Mass Storage device detected [ 111.441684][ T992] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 111.506251][ T1583] usb 3-1: USB disconnect, device number 11 [ 111.628341][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 111.717775][ T6273] kvm [6272]: vcpu0, guest rIP: 0x9143 Unhandled WRMSR(0x11e) = 0xbe702111 [ 111.927429][ T6309] jffs2: notice: (6309) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 112.337976][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 112.338019][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.182'. [ 112.513895][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 112.514397][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 112.515543][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 112.516010][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 112.516482][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 112.517251][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 112.517849][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 112.519599][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 112.520084][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 112.520563][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 112.521037][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 112.521516][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 112.522362][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 112.522827][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 112.545688][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 112.568524][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 112.602195][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 112.603859][ T46] ax88179_178a 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.618702][ T6328] sctp: [Deprecated]: syz.2.185 (pid 6328) Use of int in maxseg socket option. [ 112.618702][ T6328] Use struct sctp_assoc_value instead [ 112.619950][ T6328] F2FS-fs: wrong format, e.g. : [ 112.766000][ T46] ax88179_178a 2-1:1.0 eth3: register 'ax88179_178a' at usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, f2:6c:b8:0c:02:c5 [ 112.768100][ T46] usb 2-1: USB disconnect, device number 13 [ 112.798633][ T46] ax88179_178a 2-1:1.0 eth3: unregister 'ax88179_178a' usb-dummy_hcd.1-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 112.827135][ T6332] netlink: 48 bytes leftover after parsing attributes in process `syz.0.187'. [ 112.893543][ T992] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 113.058450][ T992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 113.058508][ T992] usb 3-1: New USB device found: idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 113.059608][ T992] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 113.059631][ T992] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 113.059958][ T6338] MTD: Couldn't look up 'mtdblock0': -2 [ 113.060753][ T992] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 113.060778][ T992] usb 3-1: config 66 interface 0 has no altsetting 0 [ 113.067676][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.067700][ T992] usb 3-1: Product: syz [ 113.067714][ T992] usb 3-1: Manufacturer: syz [ 113.067727][ T992] usb 3-1: SerialNumber: syz [ 113.189694][ T6341] netlink: 'syz.1.190': attribute type 20 has an invalid length. [ 113.278215][ T5702] usb 4-1: USB disconnect, device number 14 [ 113.356234][ T992] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 113.366807][ T992] usb 3-1: USB disconnect, device number 12 [ 113.395464][ T6347] debugfs: '疽m%AAO!' already exists in 'ieee80211' [ 113.491722][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 113.492965][ T6349] FAULT_INJECTION: forcing a failure. [ 113.492965][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 113.492994][ T6349] CPU: 1 UID: 0 PID: 6349 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(full) [ 113.493016][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.493028][ T6349] Call Trace: [ 113.493036][ T6349] [ 113.493046][ T6349] dump_stack_lvl+0xe8/0x150 [ 113.493086][ T6349] should_fail_ex+0x3eb/0x540 [ 113.493116][ T6349] should_failslab+0xa8/0x100 [ 113.493137][ T6349] ? mas_alloc_nodes+0x291/0x350 [ 113.493162][ T6349] kmem_cache_alloc_noprof+0x9c/0x600 [ 113.493186][ T6349] ? mas_alloc_nodes+0x291/0x350 [ 113.493214][ T6349] mas_alloc_nodes+0x291/0x350 [ 113.493240][ T6349] mas_preallocate+0x42a/0x840 [ 113.493261][ T6349] ? rcu_is_watching+0x16/0xb0 [ 113.493287][ T6349] ? __pfx_mas_preallocate+0x10/0x10 [ 113.493325][ T6349] ? vma_has_anon_rmap+0x95/0x270 [ 113.493350][ T6349] commit_merge+0x5f8/0xa90 [ 113.493378][ T6349] ? __pfx_commit_merge+0x10/0x10 [ 113.493410][ T6349] ? vma_has_anon_rmap+0x95/0x270 [ 113.493434][ T6349] ? dup_anon_vma+0x35/0x260 [ 113.493477][ T6349] vma_modify+0x145c/0x1c40 [ 113.493515][ T6349] vma_modify_flags+0x2a4/0x3c0 [ 113.493540][ T6349] ? __pfx_vma_modify_flags+0x10/0x10 [ 113.493593][ T6349] mlock_fixup+0x3ff/0x9e0 [ 113.493626][ T6349] ? __pfx_mlock_fixup+0x10/0x10 [ 113.493649][ T6349] ? mas_find+0x6d6/0xcb0 [ 113.493673][ T6349] apply_mlockall_flags+0x323/0x410 [ 113.493699][ T6349] ? __pfx_apply_mlockall_flags+0x10/0x10 [ 113.493738][ T6349] ? __pfx_down_write_killable+0x10/0x10 [ 113.493760][ T6349] ? rcu_is_watching+0x16/0xb0 [ 113.493788][ T6349] __ia32_sys_munlockall+0x101/0x210 [ 113.493813][ T6349] do_syscall_64+0x166/0x520 [ 113.493833][ T6349] ? trace_irq_disable+0x3b/0x140 [ 113.493852][ T6349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.493873][ T6349] ? clear_bhb_loop+0x70/0xc0 [ 113.493897][ T6349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.493918][ T6349] RIP: 0033:0x7f0e6eb9e159 [ 113.493938][ T6349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.493956][ T6349] RSP: 002b:00007f0e6fa99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 113.493979][ T6349] RAX: ffffffffffffffda RBX: 00007f0e6ee25fa0 RCX: 00007f0e6eb9e159 [ 113.493994][ T6349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 113.494007][ T6349] RBP: 00007f0e6ee25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 113.494020][ T6349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.494033][ T6349] R13: 00007f0e6ee26038 R14: 00007f0e6ee25fa0 R15: 00007ffcb40727c8 [ 113.494075][ T6349] [ 114.304120][ T5702] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.459252][ T5702] usb 3-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 114.463441][ T5702] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.463489][ T5702] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.463528][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.775748][ T6369] bond0: option mode: unable to set because the bond device has slaves [ 115.046649][ T6386] netlink: 'syz.0.204': attribute type 39 has an invalid length. [ 115.047911][ T6386] veth1_macvtap: left promiscuous mode [ 115.097598][ T6349] syz.1.195 (6349): drop_caches: 2 [ 116.336233][ T6422] netlink: 'syz.0.215': attribute type 16 has an invalid length. [ 116.442830][ T6426] device-mapper: ioctl: Invalid ioctl structure: name mpath0, dev 32 [ 116.466744][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 116.467440][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 116.467468][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 116.517510][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.218'. [ 116.594017][ T992] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 116.621247][ T6437] netlink: 'syz.0.219': attribute type 4 has an invalid length. [ 116.693504][ T192] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 116.694695][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.220'. [ 116.813378][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 116.814347][ T992] usb 4-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 116.815781][ T992] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 116.815806][ T992] usb 4-1: config 0 has no interface number 0 [ 116.815877][ T992] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 576 [ 116.815904][ T992] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 116.818061][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.818082][ T992] usb 4-1: Product: syz [ 116.818091][ T992] usb 4-1: Manufacturer: syz [ 116.818099][ T992] usb 4-1: SerialNumber: syz [ 116.820451][ T992] usb 4-1: config 0 descriptor?? [ 116.821403][ T6423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.821630][ T6423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.893221][ T192] usb 2-1: Invalid ep0 maxpacket: 32 [ 116.983282][ T1583] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 117.025165][ T6423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.025279][ T6423] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.027387][ T992] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 117.027560][ T992] asix 4-1:0.188: probe with driver asix failed with error -32 [ 117.033662][ T192] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 117.134652][ T1583] usb 1-1: not running at top speed; connect to a high speed hub [ 117.134689][ T1583] usb 1-1: New USB device found: idVendor=0000, idProduct=d970, bcdDevice=1.00 [ 117.135768][ T1583] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.135790][ T1583] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 6 [ 117.135839][ T1583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.193518][ T192] usb 2-1: Invalid ep0 maxpacket: 32 [ 117.193969][ T192] usb usb2-port1: attempt power cycle [ 117.227386][ T46] usb 4-1: USB disconnect, device number 15 [ 117.350338][ T1583] usb 1-1: string descriptor 0 read error: -71 [ 117.350437][ T1583] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:d970) [ 117.350509][ T1583] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 117.350527][ T1583] uvcvideo 1-1:1.0: No streaming interface found for terminal 1. [ 117.393694][ T1583] usb 1-1: USB disconnect, device number 10 [ 117.543301][ T192] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 117.564183][ T192] usb 2-1: Invalid ep0 maxpacket: 32 [ 117.680928][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 117.681414][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 117.681877][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 117.683797][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 117.685466][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 117.686368][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 117.686897][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 117.687331][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 117.688366][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 117.688796][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 117.689232][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 117.689997][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 117.690628][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 117.694426][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 117.696199][ T192] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 117.696484][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 117.698400][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 117.698963][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 117.699392][ T5702] ax88179_178a 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 117.717833][ T192] usb 2-1: Invalid ep0 maxpacket: 32 [ 117.718692][ T192] usb usb2-port1: unable to enumerate USB device [ 117.723864][ T5702] ax88179_178a 3-1:1.0 eth3: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 92:63:0e:3d:5f:d1 [ 117.729470][ T5702] usb 3-1: USB disconnect, device number 13 [ 117.734957][ T5702] ax88179_178a 3-1:1.0 eth3: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 118.026431][ T6444] jffs2: notice: (6444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.095511][ T6447] binder: Failure in copy_transaction_data: EFAULT [ 118.095566][ T6447] binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.095580][ T6447] binder: Read failure Err(EFAULT) in pid:194 [ 118.145866][ T6450] capability: warning: `syz.0.224' uses 32-bit capabilities (legacy support in use) [ 118.384459][ T5702] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 118.534016][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 118.534593][ T5702] usb 1-1: New USB device found: idVendor=056a, idProduct=0331, bcdDevice=0.00 [ 118.535644][ T5702] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.535732][ T5702] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.535746][ T5702] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 118.535762][ T5702] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.535782][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.537849][ T5702] usb 1-1: config 0 descriptor?? [ 118.663241][ T992] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 118.814236][ T992] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 118.815831][ T992] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 118.815855][ T992] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 118.815931][ T992] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.819353][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.819378][ T992] usb 3-1: Product: syz [ 118.819392][ T992] usb 3-1: Manufacturer: syz [ 118.819437][ T992] usb 3-1: SerialNumber: syz [ 118.836821][ T992] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 118.836869][ T992] cdc_ncm 3-1:1.0: bind() failure [ 118.959178][ T5702] usbhid 1-1:0.0: can't add hid device: -71 [ 118.959283][ T5702] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 118.965937][ T5702] usb 1-1: USB disconnect, device number 11 [ 119.253249][ T992] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 119.405260][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.405318][ T992] usb 4-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 119.406299][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.407832][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 119.407854][ T992] usb 4-1: Product: syz [ 119.407868][ T992] usb 4-1: Manufacturer: syz [ 119.417600][ T992] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 119.739986][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.740980][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.817342][ T992] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 119.818071][ T992] uvcvideo 4-1:1.1: No frame descriptor found for the default format. [ 119.818089][ T992] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 119.825363][ T992] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -22 [ 119.855042][ T5709] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 119.912882][ T6484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.236'. [ 120.045655][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 120.046325][ T5709] usb 1-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 120.047545][ T5709] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 120.047569][ T5709] usb 1-1: config 1 has no interface number 0 [ 120.047613][ T5709] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 120.047639][ T5709] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.047662][ T5709] usb 1-1: config 1 interface 105 has no altsetting 0 [ 120.049844][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 120.049866][ T5709] usb 1-1: Product: syz [ 120.049880][ T5709] usb 1-1: Manufacturer: syz [ 120.049894][ T5709] usb 1-1: SerialNumber: syz [ 120.135496][ T6472] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 120.135651][ T6472] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 120.486183][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.486210][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.491308][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.491333][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.635059][ T6500] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 120.635195][ T6500] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.040677][ T5709] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 121.041160][ T5709] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 121.041934][ T5709] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 121.083753][ T5709] aqc111 1-1:1.105 eth3: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:30:71:f7:d1:bb [ 121.088151][ T5709] usb 1-1: USB disconnect, device number 12 [ 121.109193][ T5709] aqc111 1-1:1.105 eth3: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 121.165621][ T5709] aqc111 1-1:1.105 eth3 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.165775][ T5709] aqc111 1-1:1.105 eth3 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 121.165925][ T5709] aqc111 1-1:1.105 eth3 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 121.217630][ T6504] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 121.217646][ T6504] netlink: 228 bytes leftover after parsing attributes in process `syz.1.241'. [ 121.408028][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 121.957136][ T192] usb 3-1: USB disconnect, device number 14 [ 121.961392][ T1583] usb 4-1: USB disconnect, device number 16 [ 122.041060][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 122.104894][ T6530] random: crng reseeded on system resumption [ 122.163239][ T6530] qrtr: Invalid version 0 [ 122.213108][ T6536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.253'. [ 122.220967][ T6536] netlink: 44 bytes leftover after parsing attributes in process `syz.1.253'. [ 122.402212][ T6540] [ 122.404579][ T6540] ====================================================== [ 122.411590][ T6540] WARNING: possible circular locking dependency detected [ 122.418601][ T6540] syzkaller #0 Not tainted [ 122.423025][ T6540] ------------------------------------------------------ [ 122.430033][ T6540] syz.1.254/6540 is trying to acquire lock: [ 122.435914][ T6540] ffff888036e90eb8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 122.445393][ T6540] [ 122.445393][ T6540] but task is already holding lock: [ 122.452754][ T6540] ffff88807962ec60 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 122.462530][ T6540] [ 122.462530][ T6540] which lock already depends on the new lock. [ 122.462530][ T6540] [ 122.472950][ T6540] [ 122.472950][ T6540] the existing dependency chain (in reverse order) is: [ 122.481975][ T6540] [ 122.481975][ T6540] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 122.489806][ T6540] __d_alloc_parallel+0xc32/0x1700 [ 122.495448][ T6540] __lookup_slow+0x82/0x2f0 [ 122.500477][ T6540] lookup_slow+0x59/0x80 [ 122.505240][ T6540] link_path_walk+0xd22/0x1910 [ 122.510527][ T6540] path_openat+0x1c4/0x1da0 [ 122.515549][ T6540] do_file_open+0x23e/0x4a0 [ 122.520576][ T6540] do_sys_openat2+0x115/0x200 [ 122.525772][ T6540] __x64_sys_openat+0x138/0x170 [ 122.531143][ T6540] do_syscall_64+0x166/0x520 [ 122.536256][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.542678][ T6540] [ 122.542678][ T6540] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 122.551112][ T6540] __lock_acquire+0x164c/0x2de0 [ 122.556486][ T6540] lock_acquire+0x115/0x350 [ 122.561509][ T6540] down_read+0x45/0x320 [ 122.566188][ T6540] lookup_slow+0x46/0x80 [ 122.570956][ T6540] ovl_lookup_single+0x323/0xe90 [ 122.576416][ T6540] ovl_lookup_layer+0x377/0x440 [ 122.581793][ T6540] ovl_lookup+0x5e5/0x1c80 [ 122.586732][ T6540] __lookup_slow+0x1fb/0x2f0 [ 122.591844][ T6540] lookup_slow+0x59/0x80 [ 122.596606][ T6540] path_lookupat+0x3f5/0x8c0 [ 122.601720][ T6540] filename_lookup+0x265/0x5d0 [ 122.607003][ T6540] do_fchmodat+0xe4/0x230 [ 122.611853][ T6540] __x64_sys_fchmodat+0x7d/0x90 [ 122.617226][ T6540] do_syscall_64+0x166/0x520 [ 122.622337][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.628751][ T6540] [ 122.628751][ T6540] other info that might help us debug this: [ 122.628751][ T6540] [ 122.638982][ T6540] Possible unsafe locking scenario: [ 122.638982][ T6540] [ 122.646431][ T6540] CPU0 CPU1 [ 122.651803][ T6540] ---- ---- [ 122.657178][ T6540] lock(DCACHE_PAR_LOOKUP); [ 122.661775][ T6540] lock(&type->i_mutex_dir_key#5); [ 122.669499][ T6540] lock(DCACHE_PAR_LOOKUP); [ 122.676613][ T6540] rlock(&type->i_mutex_dir_key#5); [ 122.681903][ T6540] [ 122.681903][ T6540] *** DEADLOCK *** [ 122.681903][ T6540] [ 122.690047][ T6540] locks held by syz.1.254/6540: 2, last CPU#1: [ 122.696202][ T6540] #0: ffff88805b8b2230 (&ovl_i_mutex_dir_key[depth]){.+.+}-{4:4}, at: lookup_slow+0x46/0x80 [ 122.706387][ T6540] #1: ffff88807962ec60 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 122.716573][ T6540] [ 122.716573][ T6540] stack backtrace: [ 122.722466][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.1.254 Not tainted syzkaller #0 PREEMPT(full) [ 122.731661][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.741718][ T6540] Call Trace: [ 122.745005][ T6540] [ 122.747939][ T6540] dump_stack_lvl+0xe8/0x150 [ 122.752534][ T6540] print_circular_bug+0x2e2/0x300 [ 122.757588][ T6540] check_noncircular+0x12f/0x150 [ 122.762563][ T6540] __lock_acquire+0x164c/0x2de0 [ 122.767436][ T6540] ? lock_acquire+0x115/0x350 [ 122.772133][ T6540] lock_acquire+0x115/0x350 [ 122.776641][ T6540] ? lookup_slow+0x46/0x80 [ 122.781064][ T6540] down_read+0x45/0x320 [ 122.785246][ T6540] ? lookup_slow+0x46/0x80 [ 122.789662][ T6540] ? d_lookup+0x8a/0xa0 [ 122.793825][ T6540] lookup_slow+0x46/0x80 [ 122.798071][ T6540] ovl_lookup_single+0x323/0xe90 [ 122.803016][ T6540] ? __pfx_ovl_lookup_single+0x10/0x10 [ 122.808481][ T6540] ? __lock_acquire+0x747/0x2de0 [ 122.813429][ T6540] ovl_lookup_layer+0x377/0x440 [ 122.818287][ T6540] ovl_lookup+0x5e5/0x1c80 [ 122.822701][ T6540] ? lock_acquire+0x115/0x350 [ 122.827383][ T6540] ? __d_alloc_parallel+0x156f/0x1700 [ 122.832758][ T6540] ? __d_alloc_parallel+0x39e/0x1700 [ 122.838055][ T6540] ? __pfx_ovl_lookup+0x10/0x10 [ 122.842909][ T6540] ? __pfx___d_alloc_parallel+0x10/0x10 [ 122.848455][ T6540] ? lock_acquire+0x115/0x350 [ 122.853153][ T6540] __lookup_slow+0x1fb/0x2f0 [ 122.857753][ T6540] lookup_slow+0x59/0x80 [ 122.861995][ T6540] path_lookupat+0x3f5/0x8c0 [ 122.866590][ T6540] filename_lookup+0x265/0x5d0 [ 122.871356][ T6540] ? __pfx_filename_lookup+0x10/0x10 [ 122.876653][ T6540] ? strncpy_from_user+0x150/0x2c0 [ 122.881770][ T6540] ? do_getname+0x151/0x250 [ 122.886274][ T6540] do_fchmodat+0xe4/0x230 [ 122.890606][ T6540] ? __pfx_do_fchmodat+0x10/0x10 [ 122.895549][ T6540] __x64_sys_fchmodat+0x7d/0x90 [ 122.900403][ T6540] do_syscall_64+0x166/0x520 [ 122.904998][ T6540] ? trace_irq_disable+0x3b/0x140 [ 122.910026][ T6540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.916094][ T6540] ? clear_bhb_loop+0x70/0xc0 [ 122.920774][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.926667][ T6540] RIP: 0033:0x7f0e6eb9e159 [ 122.931091][ T6540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.950700][ T6540] RSP: 002b:00007f0e6fa99028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 122.959123][ T6540] RAX: ffffffffffffffda RBX: 00007f0e6ee25fa0 RCX: 00007f0e6eb9e159 [ 122.967106][ T6540] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 122.975079][ T6540] RBP: 00007f0e6ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 122.983052][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.991023][ T6540] R13: 00007f0e6ee26038 R14: 00007f0e6ee25fa0 R15: 00007ffcb40727c8 [ 122.999008][ T6540] [ 123.009764][ T6540] evm: overlay not supported [ 123.133417][ T192] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 123.283217][ T192] usb 3-1: Using ep0 maxpacket: 16 [ 123.283943][ T192] usb 3-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 123.284785][ T192] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.284822][ T192] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.284849][ T192] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.284869][ T192] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 123.284893][ T192] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.284915][ T192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.285889][ T192] usb 3-1: config 0 descriptor?? [ 123.499473][ T192] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 124.743588][ T192] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 126.174236][ T5702] usb 3-1: USB disconnect, device number 15