last executing test programs: 4m56.680853324s ago: executing program 2 (id=1350): syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x40, 0x8, 0xfc, {0xfc, 0x6, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "71e04aa906a1d962dbefe24bcde4dba9991408ee024734fd20cd02716c634428cd019c12748a587919e541ed95561f92a400627ab4a8a09640809625bf554fe0e0b940f0d14a8cf0c0038308aa87de24fa11877f8ae67a696c9fe70f522f959f8784c3d26d5d5574e1ac65a61e9076bb663c74dd46b1e1a7f2427c3359efb21ee4d3d2d460280e6278d8ce1b90dfa04636ca076a190ffa037417868fec0b3a5f03ab17db3ebf6ece20f468a1fc84d8f772d8f1cb4cd1ebde92"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000340)={0x20, 0xb, 0xf9, "9b64650683f415771897115d39df338d77a087f3fbb0fe97fd232d5e7bde6d72c9ce7f15d40a17ed5207ed357147440e1907e5f02994baedc7554376476331b26bb935c7000adb7e6ee68368474f938a03e87604cb349846cf2b0d0b58cdafea6af0a55f364b618f69a2b9d2cb9a08abf4479cd3f58b258b7489fdadd079da76dc7fb8fa063058f33551d571e8fd389170411564817ec0643c93936786a265bc3463f87498b3f6791115712ffd7422e65258bda463dee43896ccd8d5a92e808dbd5d83389495bf1b1993898ba3857b96d15f8561318283620821c88ddab923dd136105d818c9de7dd7506b370f85d53abb7ee6d8a163a09d34"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x81, 0x1, 'W'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "8506"}, &(0x7f0000000840)=ANY=[@ANYBLOB="208303009ef332927751256124abd22709000082715d"], &(0x7f0000000740)={0x20, 0x84, 0x2, "dfe2"}, &(0x7f0000000780)={0x20, 0x85, 0x3, '7E#'}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)={0x1b4, 0x30, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x4, 0xf7, 0x0, 0x0, @binary}, @generic="b6f9e40aae7619", @nested={0xad, 0xeb, 0x0, 0x1, [@generic="0c4693c2fbf85ada0a26979507adcd47ba7250f87ac1bfe753263c8b94bf87c51304a6061d2b04410f66192e6eca16164551ce0601aadd9bfb011155baef30baa5816424d7d8b619e78cbf99fb9acef91032851504263feed11debfa2516dc6b0d30fe437e0fab0de28e6ec830dd042d7a3b089f0a0fa116250f318228ae710bb67fd1735271a4c6a701bc36a16d36d0778967bb5588433c901b7cac07f602915012e50a8071a93721"]}, @nested={0xe6, 0x8a, 0x0, 0x1, [@generic="3749716cf6886e303faa16c36d83017cbff25287b73815fc0fce709e2de3c406bf302e9e05e15a94fae9b49b87db6bba002de833e2ea74efe3486a71f23dcdcfd2f892a3f1911ee6e3fd69364f479ef44a949348d935bf94c902b9f23ea67a9410fd9f3b81c1b6e1b93df486e96981a1eeb46fab92169a555ad81418d0bfc01fbbefc72a32b7cdab8c20311e5dbfb1b113fbccb7b841f2c791e56c6d6c9c35bb67cfc306286fd8635118997c8482090d23e8746c22c510c031555499f8d78810b5a857a5e1da1df692f9fee8f01daa4fbb72b4bd33199b0969856e1268d5e26299ff"]}]}, 0x1b4}], 0x1}, 0x4000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000880), 0x151800, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 4m56.382755224s ago: executing program 2 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000086}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x1000000) 4m56.208665707s ago: executing program 2 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf250100000008000600ac1414bb08000b00", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) pread64(r2, &(0x7f0000001e80)=""/4096, 0x1000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000001e40)={&(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/201, 0xc9}, {&(0x7f0000001800)=""/95, 0x5f}, {&(0x7f0000001880)=""/81, 0x51}, {&(0x7f0000001900)=""/159, 0x9f}], 0x9, &(0x7f0000001dc0)=[@rdma_dest={0x18, 0x114, 0x2, {0xffffffff, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0xfffffff7}, {&(0x7f0000001a80)=""/213, 0xd5}, &(0x7f0000001d80)=[{&(0x7f0000001b80)=""/211, 0xd3}, {&(0x7f0000001c80)=""/19, 0x13}, {&(0x7f0000001cc0)=""/166, 0xa6}], 0x3, 0x6, 0x7}}], 0x60, 0x4050}, 0x4000) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xe3cf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x9}}, 0x7, 0xff, 0x7b3, 0xff, 0x4}, &(0x7f0000002e80)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000002ec0)={r7, 0x8, 0x30, 0x9, 0x1}, &(0x7f0000002f00)=0x18) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000000)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r9 = socket(0x15, 0x2400000001, 0xa) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, 0x0, &(0x7f0000002280)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028008000500800000000400120008000400"], 0x48}}, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x2) 4m56.186110265s ago: executing program 2 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="c2ff3df100001da668a443ada6e80886da67e76b6122e1e1d98505a00ee219e5953a66d8c0c26d9656346b7c0483cafc92aa0840b94d5b83b8b8260c0c9cef89a7c3c61d31ab4688ad225967ea40aca33d3b21e9b0047c3abca4098ffa44a103c6ae494d3ab479c57640ca3c3869ef9fe9a352707708db0adfec100b6f13cec76283582b8c20194000d47ddf5491020b54b284d698222f93253e624a4965db91a733ce11e22fd77e83384c0d7fdd8f427ecab1c731f53d425773d35b069ee66412c4adbbe86a1bbb7d3d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000080)='proc\x00', 0x1) fsmount(r2, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101000, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m56.119392976s ago: executing program 2 (id=1354): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a8000088a8000081000099", 0x1e, 0x40810, &(0x7f0000000080)={0x11, 0x3, r1, 0x1, 0xc, 0x6, @broadcast}, 0x14) 4m55.984208351s ago: executing program 2 (id=1355): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800b}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 4m40.600724956s ago: executing program 32 (id=1355): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) (async) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800b}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 14.334744872s ago: executing program 4 (id=3431): r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x3}, 0x8) 14.057478364s ago: executing program 4 (id=3432): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xffd7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) 13.361803956s ago: executing program 4 (id=3435): syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xff62, 0x1040, 0x0, 0x1000001}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.155560795s ago: executing program 4 (id=3438): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xaa, 0x8083) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) 12.962080197s ago: executing program 4 (id=3441): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000400), &(0x7f0000000440)=0x4) 12.812683887s ago: executing program 4 (id=3444): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.836162113s ago: executing program 1 (id=3549): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2.280011467s ago: executing program 3 (id=3555): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0xb0, 0x1403, 0x800, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40844) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.209252424s ago: executing program 3 (id=3556): syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xff62, 0x1040, 0x0, 0x1000001}, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.10026862s ago: executing program 1 (id=3557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 2.097126618s ago: executing program 3 (id=3558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000540000000030800024000000002080001400000000108000740000000000900010073797a30000000000900020073797a3200"], 0xac}}, 0x0) 1.879865798s ago: executing program 5 (id=3561): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x1f4, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000780)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) 1.768903249s ago: executing program 3 (id=3563): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) tee(r0, 0xffffffffffffffff, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) mbind(&(0x7f0000a74000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x1) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 1.598446552s ago: executing program 5 (id=3564): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f00000003c0)={{{0xf}}, 0x0, 0x7, &(0x7f0000000300)}) 1.431062124s ago: executing program 5 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14eb774a", @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000000800038004000380180001801400020073797a5f74756e00"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 1.330706678s ago: executing program 1 (id=3567): syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xff62, 0x1040, 0x0, 0x1000001}, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.07074066s ago: executing program 1 (id=3569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB="440002"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 710.607013ms ago: executing program 1 (id=3572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000540000000030800024000000002080001400000000108000740000000000900010073797a30000000000900020073797a3200"], 0xac}}, 0x0) 476.351012ms ago: executing program 0 (id=3573): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 466.447769ms ago: executing program 5 (id=3574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bb8}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 432.522344ms ago: executing program 0 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='e:mymsr1 m_', 0xb) 344.598666ms ago: executing program 0 (id=3576): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x2, 0x0, 0x7, 0x80, 0xe7ac}, 0x20) 343.508404ms ago: executing program 3 (id=3577): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0xb0, 0x1403, 0x800, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x40844) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000002c0)={0x1, "35360f9ca95d53f3b7ea55e9012c97388b0fe0a7521b283639fa7fa7f987d9881b4d4a5734bd304ab73164f52fcdd7589ad340778fc63c2c8d0bf8931a23398ae57325cf44cc5f93e81f4da3d9c7989a0661a11ce2bb3b1a1a719c8984f3ece357a5d60c82a71bd7736fc080368db89c6b0c2d39df00d255344c66cc0ec8d93d7edf8bc17938ca9a539dd2b67b30af7347ed6d187608679179ca4aca04a639cf1a6599dfd148e2fede1bba168fa258d3fdbf7f6100f1dd453df9d39c4d59a3c56bcd01af15cc55f3e79eccd4bdb9ebceee2eab9233bf6d371b6e89b6ca7e17f849f21069ea75c8b44875cf91f405a289b25fc3a801a22f6f0c3507b7831117ae"}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 315.697546ms ago: executing program 5 (id=3578): syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xff62, 0x1040, 0x0, 0x1000001}, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x5e}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 314.918102ms ago: executing program 1 (id=3579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 215.207613ms ago: executing program 0 (id=3580): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex, 0x23, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300), 0x11}}], 0x2, 0x0) 209.071457ms ago: executing program 3 (id=3581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB="440002"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 102.796462ms ago: executing program 0 (id=3582): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newnexthop={0x30, 0x68, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x3}, [@NHA_OIF={0x8, 0x5, 0x1}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x1ff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c8c5}, 0x0) 182.24µs ago: executing program 0 (id=3583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pselect6(0x40, &(0x7f00000001c0)={0x0, 0x80002, 0x3, 0xfffffffffffffffd, 0x3, 0x40000000080, 0x9}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14eb774a", @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000000800038004000380180001801400020073797a5f74756e00"], 0x34}}, 0x0) 0s ago: executing program 5 (id=3584): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): er_driver returned -16 [ 366.023848][ T5855] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 366.043405][ T31] usb 1-1: USB disconnect, device number 30 [ 366.192810][ T5855] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 366.192828][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.192839][ T5855] usb 2-1: Product: syz [ 366.192847][ T5855] usb 2-1: Manufacturer: syz [ 366.192855][ T5855] usb 2-1: SerialNumber: syz [ 366.280603][ T5704] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 366.430345][T10870] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 366.445947][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 366.506373][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 366.552777][ T5704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.552795][ T5704] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 366.599004][ T5704] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 366.599036][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.599056][ T5704] usb 4-1: Product: syz [ 366.599070][ T5704] usb 4-1: Manufacturer: syz [ 366.599197][ T5704] usb 4-1: SerialNumber: syz [ 366.722933][ T5855] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 366.722967][ T5855] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 366.722978][ T5855] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 366.815736][ T5855] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 367.009517][ T5855] usb 2-1: USB disconnect, device number 30 [ 367.184364][ T5704] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 367.186512][ T5704] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 367.528416][ T5704] usb 4-1: unit 37 not found! [ 367.528446][ T5704] usb 4-1: unit 0 not found! [ 367.553540][ T31] usb 6-1: USB disconnect, device number 3 [ 369.452885][T10893] syz.5.1748 (10893) used greatest stack depth: 19432 bytes left [ 369.678028][ T5704] usb 4-1: USB disconnect, device number 39 [ 369.885647][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.588353][T10908] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 371.617045][T10900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.619098][T10900] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 371.678287][T10900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 371.678390][T10900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 371.697817][T10911] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1752'. [ 371.744168][T10900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 371.744256][T10900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.806666][T10900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.806743][T10900] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 371.856327][T10900] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 371.856409][T10900] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 371.932308][T10900] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 372.322098][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 372.325631][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 372.614910][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 372.619204][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.621248][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.621272][ T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 372.624360][ T31] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 372.624389][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.624403][ T31] usb 2-1: Product: syz [ 372.624410][ T31] usb 2-1: Manufacturer: syz [ 372.624418][ T31] usb 2-1: SerialNumber: syz [ 372.766135][ T5713] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 372.950440][ T5713] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 372.950473][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.964513][ T5713] usb 4-1: config 0 descriptor?? [ 372.981412][ T5713] cp210x 4-1:0.0: cp210x converter detected [ 373.045902][ T31] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 373.045933][ T31] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 373.092989][ T31] usb 2-1: unit 37 not found! [ 373.093022][ T31] usb 2-1: unit 0 not found! [ 373.174233][ T5713] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 373.174263][ T5713] cp210x 4-1:0.0: querying part number failed [ 373.243918][T10949] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.302440][ T5713] usb 4-1: cp210x converter now attached to ttyUSB0 [ 373.425653][ T31] usb 2-1: USB disconnect, device number 31 [ 373.468454][T10951] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1764'. [ 373.623710][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.681419][ T4910] Bluetooth: hci1: command 0x0406 tx timeout [ 373.755153][ T4910] Bluetooth: hci3: command 0x0406 tx timeout [ 373.755162][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 373.834887][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 373.915615][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 375.237563][ T31] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 375.258699][ T4977] usb 4-1: USB disconnect, device number 40 [ 375.307268][ T1007] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 375.364061][ T4977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 375.386886][ T4977] cp210x 4-1:0.0: device disconnected [ 375.390208][ T31] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 375.390239][ T31] usb 2-1: config 0 has no interface number 0 [ 375.390284][ T31] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 375.390312][ T31] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 375.392635][ T31] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 375.392663][ T31] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 375.392683][ T31] usb 2-1: Manufacturer: syz [ 375.392698][ T31] usb 2-1: SerialNumber: syz [ 375.464789][ T1007] usb 1-1: Using ep0 maxpacket: 32 [ 375.495355][ T1007] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 375.495384][ T1007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.495404][ T1007] usb 1-1: Product: syz [ 375.495417][ T1007] usb 1-1: Manufacturer: syz [ 375.495430][ T1007] usb 1-1: SerialNumber: syz [ 375.556128][ T1007] usb 1-1: config 0 descriptor?? [ 375.559330][ T31] usb 2-1: config 0 descriptor?? [ 375.610006][ T1007] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 375.610167][ T1007] dvb-usb: bulk message failed: -22 (4/0) [ 375.610183][ T1007] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 375.610520][ T1007] dvb-usb: bulk message failed: -22 (5/0) [ 375.610536][ T1007] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 375.765958][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 375.812524][ T31] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71 [ 375.812923][ T31] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 375.834808][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 375.834835][ T4910] Bluetooth: hci2: command 0x0406 tx timeout [ 375.844547][ T1007] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.914982][ T1007] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 375.915041][ T1007] usb 1-1: media controller created [ 375.928001][ T4910] Bluetooth: hci4: command 0x0406 tx timeout [ 375.954254][ T31] usb 2-1: USB disconnect, device number 32 [ 375.995579][ T4910] Bluetooth: hci5: command 0x0c1a tx timeout [ 376.119571][ T1007] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 377.464189][ T1007] usb 1-1: selecting invalid altsetting 3 [ 377.464209][ T1007] ttusb2: set interface to alts=3 failed [ 377.623395][ T1007] DVB: Unable to find symbol tda10086_attach() [ 377.623411][ T1007] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 377.624223][ T1007] dvb-usb: bulk message failed: -22 (4/0) [ 377.624250][ T1007] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.624363][ T1007] dvb-usb: bulk message failed: -22 (5/0) [ 377.624377][ T1007] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 377.624440][ T1007] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 377.693785][ T1007] usb 1-1: USB disconnect, device number 31 [ 377.823707][ T1007] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 377.936744][T11004] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.048715][T11015] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1780'. [ 378.076501][ T4910] Bluetooth: hci5: command 0x0c1a tx timeout [ 378.589025][T11022] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1786'. [ 378.719185][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.719293][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.116458][ T1007] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 379.276677][ T1007] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 379.276707][ T1007] usb 5-1: config 0 has no interface number 0 [ 379.276753][ T1007] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 379.276781][ T1007] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 379.330280][ T1007] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 379.330314][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 379.330336][ T1007] usb 5-1: Manufacturer: syz [ 379.330351][ T1007] usb 5-1: SerialNumber: syz [ 379.425170][ T1007] usb 5-1: config 0 descriptor?? [ 379.678668][ T1007] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 379.679422][ T1007] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 379.735552][ T1007] usb 5-1: USB disconnect, device number 30 [ 380.224539][ T31] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 380.283549][T11050] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 380.387137][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.387166][ T31] usb 6-1: config 0 has no interface number 0 [ 380.387209][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 380.387236][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 380.387277][ T31] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 380.387298][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.400920][ T31] usb 6-1: config 0 descriptor?? [ 380.403637][T11043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.423574][ T31] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 383.099519][ T10] usb 6-1: USB disconnect, device number 4 [ 383.535306][ T5855] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 383.758647][ T5855] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 383.758676][ T5855] usb 1-1: config 0 has no interface number 0 [ 383.758718][ T5855] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 383.758744][ T5855] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 383.762553][ T5855] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 383.762584][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 383.762605][ T5855] usb 1-1: Manufacturer: syz [ 383.762619][ T5855] usb 1-1: SerialNumber: syz [ 383.828676][T11093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.887383][ T5855] usb 1-1: config 0 descriptor?? [ 383.920583][T11093] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1811'. [ 384.365849][ T5855] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 384.366118][ T5855] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 385.786064][ T5855] usb 1-1: USB disconnect, device number 32 [ 386.057395][T11116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.061036][T11116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 386.586876][ T1007] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 386.754167][ T1007] usb 2-1: Using ep0 maxpacket: 32 [ 386.769616][ T1007] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 386.769646][ T1007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.769665][ T1007] usb 2-1: Product: syz [ 386.769679][ T1007] usb 2-1: Manufacturer: syz [ 386.769692][ T1007] usb 2-1: SerialNumber: syz [ 386.781987][ T1007] usb 2-1: config 0 descriptor?? [ 386.800333][ T1007] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 387.176598][T11134] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.262932][T11139] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1824'. [ 387.334235][ T5855] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 387.487254][ T5855] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 387.487285][ T5855] usb 6-1: config 0 has no interface number 0 [ 387.487330][ T5855] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 387.487358][ T5855] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 387.490531][ T5855] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 387.490561][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 387.490579][ T5855] usb 6-1: Manufacturer: syz [ 387.490594][ T5855] usb 6-1: SerialNumber: syz [ 387.572924][ T5855] usb 6-1: config 0 descriptor?? [ 388.010485][ T5855] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 388.044982][ T5855] usb 6-1: USB disconnect, device number 5 [ 388.134333][ T1007] gspca_ov534_9: reg_w failed -110 [ 388.223111][ T6132] udevd[6132]: setting mode of /dev/bus/usb/006/005 to 020664 failed: No such file or directory [ 388.223318][ T6132] udevd[6132]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 388.454024][ T1007] gspca_ov534_9: Unknown sensor 0000 [ 388.454115][ T1007] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 388.707505][T11153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.728123][T11153] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 388.801261][T11155] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1833'. [ 389.706083][T11175] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 389.770180][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 389.883547][T11175] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1839'. [ 389.916582][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 389.916609][ T10] usb 1-1: config 0 has no interface number 0 [ 389.916653][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.916680][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.916716][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 389.916739][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.106491][ T10] usb 1-1: config 0 descriptor?? [ 390.385411][T11178] No buffer was provided with the request [ 390.509990][ T5713] usb 2-1: USB disconnect, device number 33 [ 390.576292][ T10] prodikeys 0003:041E:2801.0006: item fetching failed at offset 5/7 [ 390.580660][ T10] prodikeys 0003:041E:2801.0006: hid parse failed [ 390.580770][ T10] prodikeys 0003:041E:2801.0006: probe with driver prodikeys failed with error -22 [ 390.645899][T11183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.758822][ T1007] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 390.771894][ T31] usb 1-1: USB disconnect, device number 33 [ 390.820303][T11188] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1844'. [ 391.748158][ T1007] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 391.748188][ T1007] usb 4-1: config 0 has no interface number 0 [ 391.748233][ T1007] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 391.748261][ T1007] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 391.750249][ T1007] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 391.750277][ T1007] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 391.750297][ T1007] usb 4-1: Manufacturer: syz [ 391.750312][ T1007] usb 4-1: SerialNumber: syz [ 392.187979][T11198] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.197384][T11198] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 392.814897][ T1007] usb 4-1: config 0 descriptor?? [ 393.089019][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1848'. [ 393.593903][ T5713] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 393.673188][ T1007] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 393.686909][ T1007] usb 4-1: USB disconnect, device number 41 [ 394.497511][ T5713] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.497541][ T5713] usb 6-1: config 0 has no interface number 0 [ 394.497604][ T5713] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 394.497631][ T5713] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 394.497673][ T5713] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.497698][ T5713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.737449][T11226] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1856'. [ 394.797351][ T5713] usb 6-1: config 0 descriptor?? [ 394.798472][T11209] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 394.818228][ T5713] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 395.178769][ T1007] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 396.025207][ T36] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 396.115351][ T1007] usb 1-1: Using ep0 maxpacket: 32 [ 396.128273][ T1007] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 396.128303][ T1007] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.128322][ T1007] usb 1-1: Product: syz [ 396.128336][ T1007] usb 1-1: Manufacturer: syz [ 396.128351][ T1007] usb 1-1: SerialNumber: syz [ 396.220164][ T1007] usb 1-1: config 0 descriptor?? [ 396.235784][ T36] usb 5-1: Using ep0 maxpacket: 32 [ 396.255302][ T36] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 396.255334][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.255354][ T36] usb 5-1: Product: syz [ 396.255369][ T36] usb 5-1: Manufacturer: syz [ 396.255383][ T36] usb 5-1: SerialNumber: syz [ 396.287879][ T1007] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 396.328455][ T36] usb 5-1: config 0 descriptor?? [ 396.340825][ T36] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 396.348406][ T36] dvb-usb: bulk message failed: -22 (4/0) [ 396.348485][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 396.348674][ T36] dvb-usb: bulk message failed: -22 (5/0) [ 396.348689][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 396.618573][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 396.621902][ T36] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 396.622194][ T36] usb 5-1: media controller created [ 397.748364][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.802383][ T5731] usb 6-1: USB disconnect, device number 6 [ 397.811332][ T36] usb 5-1: selecting invalid altsetting 3 [ 397.811353][ T36] ttusb2: set interface to alts=3 failed [ 398.838150][ T36] DVB: Unable to find symbol tda10086_attach() [ 398.838167][ T36] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 398.914566][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.999381][T11259] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 399.088609][ T36] dvb-usb: bulk message failed: -22 (4/0) [ 399.088633][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 399.088761][ T36] dvb-usb: bulk message failed: -22 (5/0) [ 399.088777][ T36] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 399.088841][ T36] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 399.091717][ T36] usb 5-1: USB disconnect, device number 31 [ 399.091951][ T1007] gspca_ov534_9: reg_w failed -71 [ 399.199157][ T5713] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 399.363449][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 399.367579][ T5713] usb 2-1: config 0 has no interfaces? [ 399.372723][ T5713] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 399.372754][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.372774][ T5713] usb 2-1: Product: syz [ 399.372789][ T5713] usb 2-1: Manufacturer: syz [ 399.372803][ T5713] usb 2-1: SerialNumber: syz [ 399.393422][ T1007] gspca_ov534_9: Unknown sensor 0000 [ 399.393516][ T1007] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 399.402425][ T5713] usb 2-1: config 0 descriptor?? [ 399.453036][ T1007] usb 1-1: USB disconnect, device number 34 [ 399.537982][ T36] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 399.583475][ T5704] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 399.617124][T11270] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1869'. [ 399.738070][ T5704] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 399.738099][ T5704] usb 4-1: config 0 has no interface number 0 [ 399.738142][ T5704] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 399.738168][ T5704] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 399.743053][ T5704] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 399.743094][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 399.743116][ T5704] usb 4-1: Manufacturer: syz [ 399.743131][ T5704] usb 4-1: SerialNumber: syz [ 399.858777][ T5704] usb 4-1: config 0 descriptor?? [ 399.957836][T11278] loop8: detected capacity change from 0 to 7 [ 399.978713][T11278] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 400.032678][T11278] loop8: p1 start 1401545024 is beyond EOD, truncated [ 400.032707][T11278] loop8: p2 start 1879513920 is beyond EOD, truncated [ 400.032724][T11278] loop8: p3 start 2737222337 is beyond EOD, truncated [ 400.037572][T11278] loop8: p4 start 1399688579 is beyond EOD, truncated [ 400.037593][T11278] loop8: p5 start 1878206208 is beyond EOD, truncated [ 400.037610][T11278] loop8: p6 start 3948687153 is beyond EOD, truncated [ 400.037626][T11278] loop8: p7 start 1740591330 is beyond EOD, truncated [ 400.037642][T11278] loop8: p8 start 3394965712 is beyond EOD, truncated [ 400.037869][T11278] loop8: p9 start 99510641 is beyond EOD, truncated [ 400.037885][T11278] loop8: p10 start 1318944454 is beyond EOD, truncated [ 400.037901][T11278] loop8: p11 start 1842501597 is beyond EOD, truncated [ 400.037916][T11278] loop8: p12 start 4293143335 is beyond EOD, truncated [ 400.122041][ T197] usb 2-1: USB disconnect, device number 34 [ 400.307258][ T5704] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 400.337368][ T5704] usb 4-1: USB disconnect, device number 42 [ 400.553457][ T1007] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 400.620943][T11283] fuse: Unknown parameter '' [ 400.829627][ T1007] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 400.829655][ T1007] usb 1-1: config 0 has no interface number 0 [ 400.829701][ T1007] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 400.829727][ T1007] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 400.829764][ T1007] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.829795][ T1007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.865493][ T1007] usb 1-1: config 0 descriptor?? [ 401.872486][T11281] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.102267][ T1007] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 403.156222][ T1007] usb 1-1: USB disconnect, device number 35 [ 403.407207][ T4910] Bluetooth: hci5: unexpected event for opcode 0x0c26 [ 403.487836][T11301] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1881'. [ 403.903460][T11307] program syz.5.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.021367][ T31] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 404.074966][T11308] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.193162][ T31] usb 5-1: device descriptor read/64, error -71 [ 405.785586][T11308] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 406.380168][T11329] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1892'. [ 407.689862][T11347] can0: slcan on ttyS3. [ 407.850263][T11348] can0 (unregistered): slcan off ttyS3. [ 408.706231][T11373] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1906'. [ 408.773327][ T31] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 410.278908][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.349831][T11400] FAULT_INJECTION: forcing a failure. [ 410.349831][T11400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.349867][T11400] CPU: 0 UID: 0 PID: 11400 Comm: syz.0.1916 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 410.349894][T11400] Tainted: [L]=SOFTLOCKUP [ 410.349902][T11400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.349913][T11400] Call Trace: [ 410.349921][T11400] [ 410.349929][T11400] dump_stack_lvl+0xe8/0x150 [ 410.349962][T11400] should_fail_ex+0x467/0x600 [ 410.349997][T11400] _copy_to_user+0x31/0xb0 [ 410.350023][T11400] simple_read_from_buffer+0xe1/0x170 [ 410.350050][T11400] proc_fail_nth_read+0x1be/0x230 [ 410.350083][T11400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.350108][T11400] ? rw_verify_area+0x250/0x4d0 [ 410.350133][T11400] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.350154][T11400] vfs_read+0x219/0xa90 [ 410.350185][T11400] ? __pfx_vfs_read+0x10/0x10 [ 410.350209][T11400] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 410.350234][T11400] ? lockdep_hardirqs_on+0x7a/0x110 [ 410.350257][T11400] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 410.350280][T11400] ? mutex_lock_nested+0x152/0x1d0 [ 410.350298][T11400] ? fdget_pos+0x252/0x320 [ 410.350327][T11400] ksys_read+0x156/0x270 [ 410.350352][T11400] ? __pfx_ksys_read+0x10/0x10 [ 410.350383][T11400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.350405][T11400] do_syscall_64+0x174/0x580 [ 410.350431][T11400] ? clear_bhb_loop+0x40/0x90 [ 410.350455][T11400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.350477][T11400] RIP: 0033:0x7f9b63d8e84e [ 410.350495][T11400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.350510][T11400] RSP: 002b:00007f9b62025fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.350531][T11400] RAX: ffffffffffffffda RBX: 00007f9b620266c0 RCX: 00007f9b63d8e84e [ 410.350546][T11400] RDX: 000000000000000f RSI: 00007f9b620260a0 RDI: 0000000000000005 [ 410.350559][T11400] RBP: 00007f9b62026090 R08: 0000000000000000 R09: 0000000000000000 [ 410.350571][T11400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.350583][T11400] R13: 00007f9b64056038 R14: 00007f9b64055fa0 R15: 00007ffdebf60968 [ 410.350615][T11400] [ 411.024712][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 411.024740][ T31] usb 6-1: config 0 has no interface number 0 [ 411.024797][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 411.024825][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 411.024868][ T31] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 411.024893][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.042773][ T31] usb 6-1: config 0 descriptor?? [ 411.043777][T11358] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 411.072219][ T31] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 411.323190][ T5731] usb 6-1: USB disconnect, device number 7 [ 411.493109][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 411.649604][ T31] usb 1-1: device descriptor read/64, error -71 [ 411.952924][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 411.959184][T11425] program syz.5.1924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 412.082760][ T31] usb 1-1: device descriptor read/64, error -71 [ 412.272892][ T31] usb usb1-port1: attempt power cycle [ 413.343104][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 413.364196][ T31] usb 1-1: device descriptor read/8, error -71 [ 413.501296][T11456] FAULT_INJECTION: forcing a failure. [ 413.501296][T11456] name failslab, interval 1, probability 0, space 0, times 0 [ 413.501328][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.5.1936 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.501343][T11456] Tainted: [L]=SOFTLOCKUP [ 413.501347][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.501353][T11456] Call Trace: [ 413.501358][T11456] [ 413.501364][T11456] dump_stack_lvl+0xe8/0x150 [ 413.501385][T11456] should_fail_ex+0x467/0x600 [ 413.501405][T11456] should_failslab+0xa8/0x100 [ 413.501419][T11456] kmem_cache_alloc_noprof+0xa4/0x650 [ 413.501431][T11456] ? skb_clone+0x212/0x3a0 [ 413.501445][T11456] ? skb_clone+0x212/0x3a0 [ 413.501461][T11456] skb_clone+0x212/0x3a0 [ 413.501476][T11456] __netlink_deliver_tap+0x413/0x860 [ 413.501500][T11456] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.501579][T11456] netlink_deliver_tap+0x19c/0x1b0 [ 413.501593][T11456] netlink_unicast+0x7b8/0x990 [ 413.501611][T11456] netlink_sendmsg+0x813/0xb40 [ 413.501629][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.501643][T11456] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 413.501659][T11456] ? __kernel_text_address+0xd/0x30 [ 413.501671][T11456] ? unwind_get_return_address+0x4d/0x90 [ 413.501684][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.501697][T11456] sock_sendmsg_nosec+0x13a/0x180 [ 413.501715][T11456] ____sys_sendmsg+0x565/0x870 [ 413.501728][T11456] ? __might_fault+0xaf/0x130 [ 413.501743][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.501763][T11456] ? import_iovec+0x73/0xa0 [ 413.501784][T11456] ___sys_sendmsg+0x2a5/0x360 [ 413.501808][T11456] ? __lock_acquire+0x683/0x2ce0 [ 413.501832][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.501863][T11456] ? __fget_files+0x2a/0x420 [ 413.501875][T11456] ? __fget_files+0x3a8/0x420 [ 413.501890][T11456] __x64_sys_sendmsg+0x1b7/0x290 [ 413.501905][T11456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.501928][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.501949][T11456] do_syscall_64+0x174/0x580 [ 413.501972][T11456] ? trace_irq_disable+0x3b/0x140 [ 413.501989][T11456] ? clear_bhb_loop+0x40/0x90 [ 413.502010][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.502041][T11456] RIP: 0033:0x7fcc77fae019 [ 413.502058][T11456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.502071][T11456] RSP: 002b:00007fcc76206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.502098][T11456] RAX: ffffffffffffffda RBX: 00007fcc78235fa0 RCX: 00007fcc77fae019 [ 413.502110][T11456] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 413.502123][T11456] RBP: 00007fcc76206090 R08: 0000000000000000 R09: 0000000000000000 [ 413.502129][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.502135][T11456] R13: 00007fcc78236038 R14: 00007fcc78235fa0 R15: 00007ffe58393b98 [ 413.502152][T11456] [ 413.582619][ T1007] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 413.649186][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 413.679451][ T31] usb 1-1: device descriptor read/8, error -71 [ 413.792691][ T31] usb usb1-port1: unable to enumerate USB device [ 413.845351][ T1007] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 413.845379][ T1007] usb 2-1: config 0 has no interface number 0 [ 413.845418][ T1007] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 413.845444][ T1007] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 413.845494][ T1007] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 413.845502][T11461] FAULT_INJECTION: forcing a failure. [ 413.845502][T11461] name failslab, interval 1, probability 0, space 0, times 0 [ 413.845518][ T1007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.845535][T11461] CPU: 0 UID: 0 PID: 11461 Comm: syz.3.1940 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.845560][T11461] Tainted: [L]=SOFTLOCKUP [ 413.845571][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.845583][T11461] Call Trace: [ 413.845591][T11461] [ 413.845598][T11461] dump_stack_lvl+0xe8/0x150 [ 413.845630][T11461] should_fail_ex+0x467/0x600 [ 413.845663][T11461] should_failslab+0xa8/0x100 [ 413.845688][T11461] __kmalloc_noprof+0xfe/0x780 [ 413.845717][T11461] ? tomoyo_encode+0x2ad/0x570 [ 413.845740][T11461] ? tomoyo_encode+0x2ad/0x570 [ 413.845770][T11461] tomoyo_encode+0x2ad/0x570 [ 413.845800][T11461] tomoyo_realpath_from_path+0x5fa/0x640 [ 413.845835][T11461] ? tomoyo_path2_perm+0x299/0x760 [ 413.845857][T11461] tomoyo_path2_perm+0x2c5/0x760 [ 413.845885][T11461] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 413.845907][T11461] ? __asan_memset+0x22/0x50 [ 413.845934][T11461] ? current_check_refer_path+0x402/0x11f0 [ 413.845992][T11461] tomoyo_path_rename+0x14e/0x1b0 [ 413.846021][T11461] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 413.846058][T11461] security_path_rename+0x248/0x460 [ 413.846091][T11461] filename_renameat2+0x4ba/0x9b0 [ 413.846109][T11461] ? __might_fault+0xaf/0x130 [ 413.846142][T11461] ? __pfx_filename_renameat2+0x10/0x10 [ 413.846177][T11461] ? do_getname+0x151/0x250 [ 413.846207][T11461] __se_sys_renameat2+0x5a/0x2c0 [ 413.846226][T11461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.846248][T11461] do_syscall_64+0x174/0x580 [ 413.846272][T11461] ? trace_irq_disable+0x3b/0x140 [ 413.846292][T11461] ? clear_bhb_loop+0x40/0x90 [ 413.846314][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.846333][T11461] RIP: 0033:0x7fde0eafe019 [ 413.846352][T11461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.846368][T11461] RSP: 002b:00007fde0cd56028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 413.846389][T11461] RAX: ffffffffffffffda RBX: 00007fde0ed85fa0 RCX: 00007fde0eafe019 [ 413.846403][T11461] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 413.846417][T11461] RBP: 00007fde0cd56090 R08: 0000000000000000 R09: 0000000000000000 [ 413.846430][T11461] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 413.846442][T11461] R13: 00007fde0ed86038 R14: 00007fde0ed85fa0 R15: 00007ffdc647ed28 [ 413.846474][T11461] [ 413.846507][T11461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.038229][ T1007] usb 2-1: config 0 descriptor?? [ 414.039022][T11450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 414.200945][ T1007] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 414.569952][T11472] loop8: detected capacity change from 0 to 7 [ 414.616614][T11472] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 414.638897][T11472] loop8: p1 start 1401545024 is beyond EOD, truncated [ 414.638921][T11472] loop8: p2 start 1879513920 is beyond EOD, truncated [ 414.638931][T11472] loop8: p3 start 2737222337 is beyond EOD, truncated [ 414.638940][T11472] loop8: p4 start 1399688579 is beyond EOD, truncated [ 414.638953][T11472] loop8: p5 start 1878206208 is beyond EOD, truncated [ 414.638968][T11472] loop8: p6 start 3948687153 is beyond EOD, truncated [ 414.648255][T11472] loop8: p7 start 1740591330 is beyond EOD, truncated [ 414.648280][T11472] loop8: p8 start 3394965712 is beyond EOD, truncated [ 414.648296][T11472] loop8: p9 start 99510641 is beyond EOD, truncated [ 414.648311][T11472] loop8: p10 start 1318944454 is beyond EOD, truncated [ 414.648328][T11472] loop8: p11 start 1842501597 is beyond EOD, truncated [ 414.648344][T11472] loop8: p12 start 4293143335 is beyond EOD, truncated [ 415.147190][T11476] program syz.4.1946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.864701][ T5734] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 416.012676][ T5734] usb 1-1: device descriptor read/64, error -71 [ 416.196146][T11511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.254183][ T5734] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 416.280092][T11511] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 416.437312][ T5734] usb 1-1: device descriptor read/64, error -71 [ 416.508918][ T5704] usb 2-1: USB disconnect, device number 35 [ 416.552614][ T5734] usb usb1-port1: attempt power cycle [ 416.809988][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 416.922628][ T5734] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 416.946399][ T5734] usb 1-1: device descriptor read/8, error -71 [ 416.991643][T11532] loop8: detected capacity change from 0 to 7 [ 417.045949][T11533] program syz.1.1969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.046921][T11532] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 417.047440][T11532] loop8: p1 start 1401545024 is beyond EOD, truncated [ 417.047462][T11532] loop8: p2 start 1879513920 is beyond EOD, truncated [ 417.047477][T11532] loop8: p3 start 2737222337 is beyond EOD, truncated [ 417.047493][T11532] loop8: p4 start 1399688579 is beyond EOD, truncated [ 417.047509][T11532] loop8: p5 start 1878206208 is beyond EOD, truncated [ 417.047525][T11532] loop8: p6 start 3948687153 is beyond EOD, truncated [ 417.047541][T11532] loop8: p7 start 1740591330 is beyond EOD, truncated [ 417.047557][T11532] loop8: p8 start 3394965712 is beyond EOD, truncated [ 417.047573][T11532] loop8: p9 start 99510641 is beyond EOD, truncated [ 417.047588][T11532] loop8: p10 start 1318944454 is beyond EOD, truncated [ 417.047603][T11532] loop8: p11 start 1842501597 is beyond EOD, truncated [ 417.047619][T11532] loop8: p12 start 4293143335 is beyond EOD, truncated [ 417.197763][ T5734] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 417.213368][ T5734] usb 1-1: device descriptor read/8, error -71 [ 417.322972][ T5734] usb usb1-port1: unable to enumerate USB device [ 417.392458][ T1007] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 417.545848][ T1007] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.545879][ T1007] usb 5-1: config 0 has no interface number 0 [ 417.545920][ T1007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 417.545947][ T1007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 417.545987][ T1007] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 417.546010][ T1007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.552197][ T1007] usb 5-1: config 0 descriptor?? [ 417.568725][T11538] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 417.679386][ T1007] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 417.732796][T11559] FAULT_INJECTION: forcing a failure. [ 417.732796][T11559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.732831][T11559] CPU: 1 UID: 0 PID: 11559 Comm: syz.1.1982 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 417.732858][T11559] Tainted: [L]=SOFTLOCKUP [ 417.732869][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.732881][T11559] Call Trace: [ 417.732889][T11559] [ 417.732897][T11559] dump_stack_lvl+0xe8/0x150 [ 417.732929][T11559] should_fail_ex+0x467/0x600 [ 417.732963][T11559] _copy_from_user+0x2d/0xb0 [ 417.732987][T11559] snd_seq_oss_ioctl+0x46b/0x1160 [ 417.733012][T11559] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 417.733033][T11559] ? __lock_acquire+0x683/0x2ce0 [ 417.733069][T11559] ? smk_tskacc+0x2fb/0x370 [ 417.733101][T11559] ? do_raw_spin_lock+0x12b/0x2f0 [ 417.733140][T11559] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 417.733164][T11559] ? lockdep_hardirqs_on+0x7a/0x110 [ 417.733190][T11559] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 417.733208][T11559] ? odev_ioctl+0x84/0xf0 [ 417.733234][T11559] ? __pfx_odev_ioctl+0x10/0x10 [ 417.733259][T11559] odev_ioctl+0xb5/0xf0 [ 417.733286][T11559] __se_sys_ioctl+0xff/0x170 [ 417.733311][T11559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.733331][T11559] do_syscall_64+0x174/0x580 [ 417.733354][T11559] ? trace_irq_disable+0x3b/0x140 [ 417.733373][T11559] ? clear_bhb_loop+0x40/0x90 [ 417.733397][T11559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.733416][T11559] RIP: 0033:0x7f3b3131e019 [ 417.733434][T11559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.733458][T11559] RSP: 002b:00007f3b2f576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.733480][T11559] RAX: ffffffffffffffda RBX: 00007f3b315a5fa0 RCX: 00007f3b3131e019 [ 417.733494][T11559] RDX: 0000200000000000 RSI: 0000000040085112 RDI: 0000000000000003 [ 417.733507][T11559] RBP: 00007f3b2f576090 R08: 0000000000000000 R09: 0000000000000000 [ 417.733520][T11559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.733532][T11559] R13: 00007f3b315a6038 R14: 00007f3b315a5fa0 R15: 00007fff50394d78 [ 417.733563][T11559] [ 419.469446][T11579] FAULT_INJECTION: forcing a failure. [ 419.469446][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 419.469482][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.3.1990 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 419.469512][T11579] Tainted: [L]=SOFTLOCKUP [ 419.469520][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.469532][T11579] Call Trace: [ 419.469539][T11579] [ 419.469548][T11579] dump_stack_lvl+0xe8/0x150 [ 419.469588][T11579] should_fail_ex+0x467/0x600 [ 419.469623][T11579] should_failslab+0xa8/0x100 [ 419.469650][T11579] __kmalloc_noprof+0xfe/0x780 [ 419.469672][T11579] ? tomoyo_encode+0x2ad/0x570 [ 419.469695][T11579] ? tomoyo_encode+0x2ad/0x570 [ 419.469726][T11579] tomoyo_encode+0x2ad/0x570 [ 419.469756][T11579] tomoyo_realpath_from_path+0x5fa/0x640 [ 419.469790][T11579] ? tomoyo_path2_perm+0x299/0x760 [ 419.469813][T11579] tomoyo_path2_perm+0x2c5/0x760 [ 419.469840][T11579] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 419.469863][T11579] ? __asan_memset+0x22/0x50 [ 419.469891][T11579] ? current_check_refer_path+0x402/0x11f0 [ 419.469954][T11579] tomoyo_path_rename+0x14e/0x1b0 [ 419.469984][T11579] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 419.470024][T11579] security_path_rename+0x248/0x460 [ 419.470056][T11579] filename_renameat2+0x4ba/0x9b0 [ 419.470075][T11579] ? __might_fault+0xaf/0x130 [ 419.470107][T11579] ? __pfx_filename_renameat2+0x10/0x10 [ 419.470143][T11579] ? do_getname+0x151/0x250 [ 419.470173][T11579] __se_sys_renameat2+0x5a/0x2c0 [ 419.470193][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.470213][T11579] do_syscall_64+0x174/0x580 [ 419.470240][T11579] ? clear_bhb_loop+0x40/0x90 [ 419.470264][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.470284][T11579] RIP: 0033:0x7fde0eafe019 [ 419.470301][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.470318][T11579] RSP: 002b:00007fde0cd56028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 419.470339][T11579] RAX: ffffffffffffffda RBX: 00007fde0ed85fa0 RCX: 00007fde0eafe019 [ 419.470354][T11579] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 419.470374][T11579] RBP: 00007fde0cd56090 R08: 0000000000000000 R09: 0000000000000000 [ 419.470387][T11579] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 419.470400][T11579] R13: 00007fde0ed86038 R14: 00007fde0ed85fa0 R15: 00007ffdc647ed28 [ 419.470433][T11579] [ 419.481517][T11579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.520335][T11581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.538826][T11581] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 420.378466][ T5704] usb 5-1: USB disconnect, device number 34 [ 420.767458][T11604] loop8: detected capacity change from 0 to 7 [ 420.823141][T11604] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 420.823409][T11604] loop8: p1 start 1401545024 is beyond EOD, truncated [ 420.823431][T11604] loop8: p2 start 1879513920 is beyond EOD, truncated [ 420.823448][T11604] loop8: p3 start 2737222337 is beyond EOD, truncated [ 420.823464][T11604] loop8: p4 start 1399688579 is beyond EOD, truncated [ 420.823477][T11604] loop8: p5 start 1878206208 is beyond EOD, truncated [ 420.823493][T11604] loop8: p6 start 3948687153 is beyond EOD, truncated [ 420.823510][T11604] loop8: p7 start 1740591330 is beyond EOD, truncated [ 420.823532][T11604] loop8: p8 start 3394965712 is beyond EOD, truncated [ 420.823549][T11604] loop8: p9 start 99510641 is beyond EOD, truncated [ 420.823564][T11604] loop8: p10 start 1318944454 is beyond EOD, truncated [ 420.823581][T11604] loop8: p11 start 1842501597 is beyond EOD, truncated [ 420.823595][T11604] loop8: p12 start 4293143335 is beyond EOD, truncated [ 421.360484][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 421.360503][ T37] audit: type=1326 audit(1785811317.025:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.360551][ T37] audit: type=1326 audit(1785811317.035:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.360593][ T37] audit: type=1326 audit(1785811317.035:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384365][ T37] audit: type=1326 audit(1785811317.055:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384421][ T37] audit: type=1326 audit(1785811317.055:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384462][ T37] audit: type=1326 audit(1785811317.055:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384501][ T37] audit: type=1326 audit(1785811317.055:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384543][ T37] audit: type=1326 audit(1785811317.055:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384583][ T37] audit: type=1326 audit(1785811317.055:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 421.384622][ T37] audit: type=1326 audit(1785811317.055:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11617 comm="syz.0.2007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 422.139879][T11637] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 422.145929][T11637] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2013'. [ 422.362397][T11645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.396396][T11645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 422.977871][T11663] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 422.991044][T11663] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2025'. [ 423.105760][ T1007] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 423.295960][ T1007] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.295990][ T1007] usb 5-1: config 0 has no interface number 0 [ 423.296036][ T1007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 423.296064][ T1007] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 423.296107][ T1007] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.296131][ T1007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.366847][ T1007] usb 5-1: config 0 descriptor?? [ 423.368281][T11659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.438778][ T1007] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 423.863331][T11688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.899031][T11688] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 424.490454][T11701] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 424.502063][T11701] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2038'. [ 424.698550][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2040'. [ 425.894648][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 425.977281][ T31] usb 5-1: USB disconnect, device number 35 [ 429.307523][T11745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.331842][T11748] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 429.579978][T11760] gfs2: error -5 reading superblock [ 429.586547][T11761] gfs2: error -5 reading superblock [ 429.791772][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 429.922924][T11774] loop8: detected capacity change from 0 to 7 [ 429.923827][T11774] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 429.924047][T11774] loop8: p1 start 1401545024 is beyond EOD, truncated [ 429.924068][T11774] loop8: p2 start 1879513920 is beyond EOD, truncated [ 429.924085][T11774] loop8: p3 start 2737222337 is beyond EOD, truncated [ 429.924102][T11774] loop8: p4 start 1399688579 is beyond EOD, truncated [ 429.924118][T11774] loop8: p5 start 1878206208 is beyond EOD, truncated [ 429.924134][T11774] loop8: p6 start 3948687153 is beyond EOD, truncated [ 429.924149][T11774] loop8: p7 start 1740591330 is beyond EOD, truncated [ 429.924166][T11774] loop8: p8 start 3394965712 is beyond EOD, truncated [ 429.924182][T11774] loop8: p9 start 99510641 is beyond EOD, truncated [ 429.924198][T11774] loop8: p10 start 1318944454 is beyond EOD, truncated [ 429.924215][T11774] loop8: p11 start 1842501597 is beyond EOD, truncated [ 429.924230][T11774] loop8: p12 start 4293143335 is beyond EOD, truncated [ 430.121735][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 430.124165][ T31] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 430.124194][ T31] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 430.124225][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.129007][ T31] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 430.129036][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.129054][ T31] usb 6-1: Product: syz [ 430.129068][ T31] usb 6-1: Manufacturer: syz [ 430.129082][ T31] usb 6-1: SerialNumber: syz [ 430.136178][ T31] usb 6-1: config 0 descriptor?? [ 430.145435][T11780] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 430.338023][T11778] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2068'. [ 430.510834][T11786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.511440][T11786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.717649][ T31] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 430.761030][T11792] gfs2: error -5 reading superblock [ 430.929236][ T31] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 430.929736][ T31] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 430.960316][ T31] usb 6-1: USB disconnect, device number 8 [ 431.021858][T11801] FAULT_INJECTION: forcing a failure. [ 431.021858][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 431.021892][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.4.2077 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 431.021918][T11801] Tainted: [L]=SOFTLOCKUP [ 431.021925][T11801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.021936][T11801] Call Trace: [ 431.021944][T11801] [ 431.021952][T11801] dump_stack_lvl+0xe8/0x150 [ 431.021985][T11801] should_fail_ex+0x467/0x600 [ 431.022018][T11801] should_failslab+0xa8/0x100 [ 431.022042][T11801] __kmalloc_noprof+0xfe/0x780 [ 431.022062][T11801] ? trace_kmem_cache_alloc+0x29/0xe0 [ 431.022081][T11801] ? security_prepare_creds+0x52/0x360 [ 431.022103][T11801] ? security_prepare_creds+0x52/0x360 [ 431.022137][T11801] security_prepare_creds+0x52/0x360 [ 431.022163][T11801] prepare_creds+0x57d/0x820 [ 431.022186][T11801] __se_sys_capset+0x2c6/0x440 [ 431.022211][T11801] ? __pfx___se_sys_capset+0x10/0x10 [ 431.022243][T11801] ? __pfx_ksys_write+0x10/0x10 [ 431.022271][T11801] ? __secure_computing+0xe7/0x2b0 [ 431.022294][T11801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.022314][T11801] do_syscall_64+0x174/0x580 [ 431.022339][T11801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.022358][T11801] ? clear_bhb_loop+0x40/0x90 [ 431.022381][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.022401][T11801] RIP: 0033:0x7fa9d103e019 [ 431.022418][T11801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.022434][T11801] RSP: 002b:00007fa9cf296028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 431.022461][T11801] RAX: ffffffffffffffda RBX: 00007fa9d12c5fa0 RCX: 00007fa9d103e019 [ 431.022476][T11801] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040 [ 431.022492][T11801] RBP: 00007fa9cf296090 R08: 0000000000000000 R09: 0000000000000000 [ 431.022505][T11801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.022517][T11801] R13: 00007fa9d12c6038 R14: 00007fa9d12c5fa0 R15: 00007fff0bda3ca8 [ 431.022547][T11801] [ 431.728205][T11808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.783405][T11808] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 432.184838][T11820] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 432.254212][T11826] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2085'. [ 432.451659][ T197] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 432.574181][ T5855] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 432.603092][ T197] usb 2-1: device descriptor read/64, error -71 [ 432.749725][ T5855] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 432.749745][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.749756][ T5855] usb 5-1: Product: syz [ 432.749764][ T5855] usb 5-1: Manufacturer: syz [ 432.749772][ T5855] usb 5-1: SerialNumber: syz [ 432.792424][ T5704] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 432.885464][ T197] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 432.891971][ T1007] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 433.003864][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.003896][ T5704] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 433.003947][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.041266][ T5704] usb 6-1: config 0 descriptor?? [ 433.041632][ T197] usb 2-1: device descriptor read/64, error -71 [ 433.053298][ T1007] usb 1-1: device descriptor read/64, error -71 [ 433.057886][ T5855] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 433.057924][ T5855] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 433.057936][ T5855] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 433.126133][ T5855] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 433.151891][ T197] usb usb2-port1: attempt power cycle [ 433.169683][ T5855] usb 5-1: USB disconnect, device number 36 [ 433.296234][ T5704] usbhid 6-1:0.0: can't add hid device: -71 [ 433.296328][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 433.313795][ T5704] usb 6-1: USB disconnect, device number 9 [ 433.321524][ T1007] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 433.461575][ T1007] usb 1-1: device descriptor read/64, error -71 [ 433.511597][ T197] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 433.532153][ T197] usb 2-1: device descriptor read/8, error -71 [ 433.579793][ T1007] usb usb1-port1: attempt power cycle [ 433.731559][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 433.812503][ T197] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 433.833859][ T197] usb 2-1: device descriptor read/8, error -71 [ 433.923124][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.923176][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 433.923200][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.943135][ T197] usb usb2-port1: unable to enumerate USB device [ 433.971806][ T1007] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 433.982167][ T1007] usb 1-1: device descriptor read/8, error -71 [ 433.997022][ T31] usb 6-1: config 0 descriptor?? [ 434.231572][ T1007] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 434.262591][ T1007] usb 1-1: device descriptor read/8, error -71 [ 434.377142][ T1007] usb usb1-port1: unable to enumerate USB device [ 434.571640][ T5704] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 434.607980][T11830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.610571][T11830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.723993][ T5704] usb 5-1: Invalid ep0 maxpacket: 32 [ 434.851536][ T5704] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 435.001442][ T5704] usb 5-1: Invalid ep0 maxpacket: 32 [ 435.002247][ T5704] usb usb5-port1: attempt power cycle [ 435.341668][ T5704] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 435.362265][ T5704] usb 5-1: Invalid ep0 maxpacket: 32 [ 435.467093][T11890] fuse: Unknown parameter '' [ 435.492697][ T5704] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 435.512149][ T5704] usb 5-1: Invalid ep0 maxpacket: 32 [ 435.512492][ T5704] usb usb5-port1: unable to enumerate USB device [ 435.901577][ T5855] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 436.048743][ T31] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 436.054524][ T5855] usb 2-1: Using ep0 maxpacket: 32 [ 436.070929][ T31] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 436.094898][ T5855] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 436.094926][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.094945][ T5855] usb 2-1: Product: syz [ 436.094959][ T5855] usb 2-1: Manufacturer: syz [ 436.094975][ T5855] usb 2-1: SerialNumber: syz [ 436.146790][ T5704] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 436.354014][ T5704] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 436.354046][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.354066][ T5704] usb 1-1: Product: syz [ 436.354081][ T5704] usb 1-1: Manufacturer: syz [ 436.354095][ T5704] usb 1-1: SerialNumber: syz [ 436.424192][ T5855] usb 2-1: config 0 descriptor?? [ 436.441507][ T5855] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 436.441892][ T5855] dvb-usb: bulk message failed: -22 (4/0) [ 436.441909][ T5855] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 436.442954][ T5855] dvb-usb: bulk message failed: -22 (5/0) [ 436.442972][ T5855] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 436.543033][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.544088][ T5855] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 436.544238][ T5855] usb 2-1: media controller created [ 436.652055][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.739890][ T5855] usb 2-1: selecting invalid altsetting 3 [ 436.740108][ T5855] ttusb2: set interface to alts=3 failed [ 436.846790][ T5855] DVB: Unable to find symbol tda10086_attach() [ 436.846808][ T5855] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 436.847846][ T5855] dvb-usb: bulk message failed: -22 (4/0) [ 436.847865][ T5855] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 436.848041][ T5855] dvb-usb: bulk message failed: -22 (5/0) [ 436.848056][ T5855] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 436.848174][ T5855] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 437.017438][ T5704] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 437.017514][ T5704] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 437.017534][ T5704] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 437.095809][ T5855] usb 2-1: USB disconnect, device number 40 [ 437.190024][ T5855] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 437.337158][ T5704] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 439.628901][ T5704] usb 1-1: USB disconnect, device number 48 [ 439.687432][ C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 439.688245][ T31] usb 6-1: USB disconnect, device number 10 [ 440.158625][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158696][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.360463][T11962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.396789][T11962] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 441.311161][ T197] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 441.331049][ T5734] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 441.441202][ T197] usb 5-1: device descriptor read/64, error -71 [ 441.471273][ T5734] usb 6-1: device descriptor read/64, error -71 [ 441.681085][ T197] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 441.713461][ T5734] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 441.811102][ T197] usb 5-1: device descriptor read/64, error -71 [ 441.841278][ T5734] usb 6-1: device descriptor read/64, error -71 [ 441.921514][ T197] usb usb5-port1: attempt power cycle [ 441.951768][ T5734] usb usb6-port1: attempt power cycle [ 442.168288][T12026] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 442.261143][ T197] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 442.283454][ T197] usb 5-1: device descriptor read/8, error -71 [ 442.298174][ T5734] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 442.311884][ T5734] usb 6-1: device descriptor read/8, error -71 [ 442.521063][ T197] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 442.542823][ T197] usb 5-1: device descriptor read/8, error -71 [ 442.560419][ T5734] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 442.571979][ T5734] usb 6-1: device descriptor read/8, error -71 [ 442.655273][ T197] usb usb5-port1: unable to enumerate USB device [ 442.682620][ T5734] usb usb6-port1: unable to enumerate USB device [ 443.683850][ T31] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 443.822619][ T31] usb 2-1: device descriptor read/64, error -71 [ 443.855743][T12085] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 444.063838][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 444.205892][ T31] usb 2-1: device descriptor read/64, error -71 [ 444.321335][ T31] usb usb2-port1: attempt power cycle [ 444.700970][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 444.722580][ T31] usb 2-1: device descriptor read/8, error -71 [ 444.985648][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 445.002443][ T31] usb 2-1: device descriptor read/8, error -71 [ 445.111300][ T31] usb usb2-port1: unable to enumerate USB device [ 445.230887][ T5731] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 445.371812][ T5731] usb 1-1: device descriptor read/64, error -71 [ 445.621225][ T5731] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 445.750904][ T5731] usb 1-1: device descriptor read/64, error -71 [ 445.812244][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 445.864787][ T5731] usb usb1-port1: attempt power cycle [ 445.960922][ T31] usb 6-1: device descriptor read/64, error -71 [ 446.200827][ T5731] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 446.220808][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 446.223858][ T5731] usb 1-1: device descriptor read/8, error -71 [ 446.350834][ T31] usb 6-1: device descriptor read/64, error -71 [ 446.462448][ T31] usb usb6-port1: attempt power cycle [ 446.462681][ T5731] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 446.481686][ T5731] usb 1-1: device descriptor read/8, error -71 [ 446.603006][ T5731] usb usb1-port1: unable to enumerate USB device [ 446.722718][T12181] loop8: detected capacity change from 0 to 7 [ 446.729547][T12181] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 446.729797][T12181] loop8: p1 start 1401545024 is beyond EOD, truncated [ 446.729820][T12181] loop8: p2 start 1879513920 is beyond EOD, truncated [ 446.729836][T12181] loop8: p3 start 2737222337 is beyond EOD, truncated [ 446.729852][T12181] loop8: p4 start 1399688579 is beyond EOD, truncated [ 446.729866][T12181] loop8: p5 start 1878206208 is beyond EOD, truncated [ 446.729881][T12181] loop8: p6 start 3948687153 is beyond EOD, truncated [ 446.729896][T12181] loop8: p7 start 1740591330 is beyond EOD, truncated [ 446.729910][T12181] loop8: p8 start 3394965712 is beyond EOD, truncated [ 446.729925][T12181] loop8: p9 start 99510641 is beyond EOD, truncated [ 446.729946][T12181] loop8: p10 start 1318944454 is beyond EOD, truncated [ 446.729961][T12181] loop8: p11 start 1842501597 is beyond EOD, truncated [ 446.729977][T12181] loop8: p12 start 4293143335 is beyond EOD, truncated [ 446.810858][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 446.836929][ T31] usb 6-1: device descriptor read/8, error -71 [ 447.110814][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 447.131535][ T31] usb 6-1: device descriptor read/8, error -71 [ 447.242361][ T31] usb usb6-port1: unable to enumerate USB device [ 447.513725][ T197] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 447.660828][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 447.664865][ T197] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.666875][ T197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.666901][ T197] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 447.705511][ T197] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 447.705543][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.705565][ T197] usb 5-1: Product: syz [ 447.705580][ T197] usb 5-1: Manufacturer: syz [ 447.705594][ T197] usb 5-1: SerialNumber: syz [ 447.968572][ T197] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 447.968605][ T197] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 447.998331][ T197] usb 5-1: unit 37 not found! [ 447.998356][ T197] usb 5-1: unit 0 not found! [ 448.131539][ T197] usb 5-1: USB disconnect, device number 45 [ 448.268166][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.400763][ T5734] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 448.553516][ T5734] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 448.553546][ T5734] usb 1-1: config 0 has no interface number 0 [ 448.553590][ T5734] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 448.553617][ T5734] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 448.553660][ T5734] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 448.553683][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.616015][ T5734] usb 1-1: config 0 descriptor?? [ 448.616998][T12224] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 448.726828][ T5734] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 449.130726][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 449.138538][T12253] loop8: detected capacity change from 0 to 7 [ 449.150820][T12253] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 449.151047][T12253] loop8: p1 start 1401545024 is beyond EOD, truncated [ 449.151068][T12253] loop8: p2 start 1879513920 is beyond EOD, truncated [ 449.151085][T12253] loop8: p3 start 2737222337 is beyond EOD, truncated [ 449.151100][T12253] loop8: p4 start 1399688579 is beyond EOD, truncated [ 449.151131][T12253] loop8: p5 start 1878206208 is beyond EOD, truncated [ 449.151147][T12253] loop8: p6 start 3948687153 is beyond EOD, truncated [ 449.151164][T12253] loop8: p7 start 1740591330 is beyond EOD, truncated [ 449.151180][T12253] loop8: p8 start 3394965712 is beyond EOD, truncated [ 449.151196][T12253] loop8: p9 start 99510641 is beyond EOD, truncated [ 449.151212][T12253] loop8: p10 start 1318944454 is beyond EOD, truncated [ 449.151227][T12253] loop8: p11 start 1842501597 is beyond EOD, truncated [ 449.151243][T12253] loop8: p12 start 4293143335 is beyond EOD, truncated [ 449.300729][ T31] usb 2-1: device descriptor read/64, error -71 [ 449.402720][ T36] usb 1-1: USB disconnect, device number 53 [ 449.562306][ T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 449.861312][ T31] usb 2-1: device descriptor read/64, error -71 [ 450.299151][ T31] usb usb2-port1: attempt power cycle [ 452.411491][T12289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.456025][T12289] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 452.959419][ T197] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 453.150550][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 453.151460][ T197] usb 1-1: no configurations [ 453.151478][ T197] usb 1-1: can't read configurations, error -22 [ 453.280721][ T197] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 453.652162][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 453.652996][ T197] usb 1-1: no configurations [ 453.653014][ T197] usb 1-1: can't read configurations, error -22 [ 453.653716][ T197] usb usb1-port1: attempt power cycle [ 454.020454][ T197] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 454.041345][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 454.042288][ T197] usb 1-1: no configurations [ 454.042305][ T197] usb 1-1: can't read configurations, error -22 [ 454.170411][ T197] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 454.192595][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 454.193553][ T197] usb 1-1: no configurations [ 454.193570][ T197] usb 1-1: can't read configurations, error -22 [ 454.194205][ T197] usb usb1-port1: unable to enumerate USB device [ 454.770691][T12335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 454.817363][T12335] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 455.169529][T12346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.293609][T12377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.297889][T12378] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 458.070325][ T197] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 458.240227][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 458.241111][ T197] usb 1-1: no configurations [ 458.241133][ T197] usb 1-1: can't read configurations, error -22 [ 458.370327][ T197] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 458.520132][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 458.521167][ T197] usb 1-1: no configurations [ 458.521186][ T197] usb 1-1: can't read configurations, error -22 [ 458.521575][ T197] usb usb1-port1: attempt power cycle [ 458.872273][ T197] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 458.892985][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 458.893956][ T197] usb 1-1: no configurations [ 458.893973][ T197] usb 1-1: can't read configurations, error -22 [ 458.911635][ T5734] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 459.020089][ T197] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 459.040807][ T197] usb 1-1: Using ep0 maxpacket: 32 [ 459.041648][ T197] usb 1-1: no configurations [ 459.041666][ T197] usb 1-1: can't read configurations, error -22 [ 459.092832][ T197] usb usb1-port1: unable to enumerate USB device [ 459.101641][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 459.106878][ T5734] usb 5-1: no configurations [ 459.106899][ T5734] usb 5-1: can't read configurations, error -22 [ 459.250200][ T5734] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 459.360046][T12439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2356'. [ 459.400095][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 459.400970][ T5734] usb 5-1: no configurations [ 459.400986][ T5734] usb 5-1: can't read configurations, error -22 [ 459.401545][ T5734] usb usb5-port1: attempt power cycle [ 459.633318][T12450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 459.711443][ T5704] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 459.740119][ T5734] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 459.761016][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 459.761839][ T5734] usb 5-1: no configurations [ 459.761855][ T5734] usb 5-1: can't read configurations, error -22 [ 459.860078][ T5704] usb 6-1: Using ep0 maxpacket: 32 [ 459.890226][ T5734] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 459.912436][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 459.913060][ T5734] usb 5-1: no configurations [ 459.913076][ T5734] usb 5-1: can't read configurations, error -22 [ 459.913675][ T5734] usb usb5-port1: unable to enumerate USB device [ 459.914330][ T5704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 459.917183][ T5704] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.917209][ T5704] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 459.917279][ T5704] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 459.937976][ T5704] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 459.938008][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.938029][ T5704] usb 6-1: Product: syz [ 459.938044][ T5704] usb 6-1: Manufacturer: syz [ 459.938059][ T5704] usb 6-1: SerialNumber: syz [ 460.157425][T12465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.182321][T12465] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 460.326097][ T5704] usb 6-1: unit 37 not found! [ 460.326122][ T5704] usb 6-1: unit 0 not found! [ 460.512471][ T5704] usb 6-1: USB disconnect, device number 19 [ 460.766200][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 460.800283][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 460.844158][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 460.898836][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 460.910453][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.340969][T12484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.592965][T12489] gfs2: error -5 reading superblock [ 461.699961][ T5734] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 461.834341][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 461.847577][T12501] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 461.907019][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 461.936427][ T5734] usb 1-1: no configurations [ 461.936449][ T5734] usb 1-1: can't read configurations, error -22 [ 461.959997][ T197] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 462.060157][ T5734] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 462.119987][ T197] usb 6-1: Using ep0 maxpacket: 32 [ 462.144956][ T197] usb 6-1: no configurations [ 462.144977][ T197] usb 6-1: can't read configurations, error -22 [ 462.249951][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 462.255297][ T5734] usb 1-1: no configurations [ 462.255317][ T5734] usb 1-1: can't read configurations, error -22 [ 462.255686][ T5734] usb usb1-port1: attempt power cycle [ 462.290019][ T197] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 462.439950][ T197] usb 6-1: Using ep0 maxpacket: 32 [ 462.441713][ T197] usb 6-1: no configurations [ 462.441730][ T197] usb 6-1: can't read configurations, error -22 [ 462.447010][ T197] usb usb6-port1: attempt power cycle [ 462.590220][ T5734] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 462.617049][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 462.627710][ T5734] usb 1-1: no configurations [ 462.627729][ T5734] usb 1-1: can't read configurations, error -22 [ 463.121262][ T4910] Bluetooth: hci6: command tx timeout [ 463.494184][ T5734] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 463.559552][ T197] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 463.581900][ T197] usb 6-1: Using ep0 maxpacket: 32 [ 463.583324][ T197] usb 6-1: no configurations [ 463.583342][ T197] usb 6-1: can't read configurations, error -22 [ 463.710196][ T197] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 463.730937][ T197] usb 6-1: Using ep0 maxpacket: 32 [ 463.732215][ T197] usb 6-1: no configurations [ 463.732233][ T197] usb 6-1: can't read configurations, error -22 [ 463.732846][ T197] usb usb6-port1: unable to enumerate USB device [ 463.881928][ T5734] usb 1-1: Using ep0 maxpacket: 8 [ 463.882843][ T5734] usb 1-1: no configurations [ 463.882860][ T5734] usb 1-1: can't read configurations, error -22 [ 463.883208][ T5734] usb usb1-port1: unable to enumerate USB device [ 464.370679][ T197] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 464.453478][ T2376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.533291][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 464.537486][ T197] usb 5-1: no configurations [ 464.537509][ T197] usb 5-1: can't read configurations, error -22 [ 464.659866][ T197] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 464.743832][T12525] gfs2: error -5 reading superblock [ 464.809912][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 464.810862][ T197] usb 5-1: no configurations [ 464.810878][ T197] usb 5-1: can't read configurations, error -22 [ 464.812594][ T197] usb usb5-port1: attempt power cycle [ 465.144679][T12532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.159761][ T197] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 465.162729][T12532] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 465.182232][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 465.183042][ T197] usb 5-1: no configurations [ 465.183058][ T197] usb 5-1: can't read configurations, error -22 [ 465.200107][ T4910] Bluetooth: hci6: command tx timeout [ 465.309816][ T197] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 465.328022][ T2376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.343067][ T197] usb 5-1: Using ep0 maxpacket: 32 [ 465.343704][ T197] usb 5-1: no configurations [ 465.343719][ T197] usb 5-1: can't read configurations, error -22 [ 465.344106][ T197] usb usb5-port1: unable to enumerate USB device [ 466.005197][T12545] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 466.083278][T12544] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2395'. [ 466.389882][ T5731] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 466.411891][ T2376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.562915][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 466.567348][ T5731] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.567374][ T5731] usb 2-1: config 0 has no interfaces? [ 466.569659][ T5731] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 466.569693][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.569712][ T5731] usb 2-1: Product: syz [ 466.569723][ T5731] usb 2-1: Manufacturer: syz [ 466.569737][ T5731] usb 2-1: SerialNumber: syz [ 466.601325][ T5731] usb 2-1: config 0 descriptor?? [ 467.039840][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.045113][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.068107][ T197] usb 2-1: USB disconnect, device number 48 [ 467.376246][T12468] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.376463][T12468] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.376655][T12468] bridge_slave_0: entered allmulticast mode [ 467.401976][T12468] bridge_slave_0: entered promiscuous mode [ 467.422444][T12468] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.422681][T12468] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.423241][T12468] bridge_slave_1: entered allmulticast mode [ 467.426052][T12468] bridge_slave_1: entered promiscuous mode [ 467.556437][T12468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.573938][T12468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.719295][T12468] team0: Port device team_slave_0 added [ 467.734515][T12468] team0: Port device team_slave_1 added [ 467.837227][ T4910] Bluetooth: hci6: command tx timeout [ 467.895866][T12572] loop8: detected capacity change from 0 to 7 [ 468.119679][T12572] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 468.182266][T12572] loop8: p1 start 1401545024 is beyond EOD, truncated [ 468.182295][T12572] loop8: p2 start 1879513920 is beyond EOD, truncated [ 468.182313][T12572] loop8: p3 start 2737222337 is beyond EOD, truncated [ 468.182329][T12572] loop8: p4 start 1399688579 is beyond EOD, truncated [ 468.182347][T12572] loop8: p5 start 1878206208 is beyond EOD, truncated [ 468.182365][T12572] loop8: p6 start 3948687153 is beyond EOD, truncated [ 468.182383][T12572] loop8: p7 start 1740591330 is beyond EOD, truncated [ 468.182406][T12572] loop8: p8 start 3394965712 is beyond EOD, truncated [ 468.182422][T12572] loop8: p9 start 99510641 is beyond EOD, truncated [ 468.182438][T12572] loop8: p10 start 1318944454 is beyond EOD, truncated [ 468.182455][T12572] loop8: p11 start 1842501597 is beyond EOD, truncated [ 468.182471][T12572] loop8: p12 start 4293143335 is beyond EOD, truncated [ 468.186047][T12580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.014577][T12591] gfs2: error -5 reading superblock [ 469.254961][ T2376] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.509498][ T5731] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 469.631999][T12468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.632017][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.632045][T12468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.699480][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 469.702516][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 469.702552][ T5731] usb 5-1: can't read configurations, error -61 [ 469.751790][T12468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.751809][T12468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.751834][T12468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.862936][ T5731] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 469.911475][ T4910] Bluetooth: hci6: command tx timeout [ 470.031069][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 470.035255][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.035293][ T5731] usb 5-1: can't read configurations, error -61 [ 470.035701][ T5731] usb usb5-port1: attempt power cycle [ 470.429490][ T5731] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 470.450483][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 470.452958][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.452993][ T5731] usb 5-1: can't read configurations, error -61 [ 470.553374][T12468] hsr_slave_0: entered promiscuous mode [ 470.555928][T12468] hsr_slave_1: entered promiscuous mode [ 470.556544][T12468] debugfs: 'hsr0' already exists in 'hsr' [ 470.556560][T12468] Cannot create hsr debugfs directory [ 470.589516][ T5731] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 470.610928][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 470.623087][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 470.623122][ T5731] usb 5-1: can't read configurations, error -61 [ 470.645818][ T5731] usb usb5-port1: unable to enumerate USB device [ 470.788902][T12612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 470.804159][T12612] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 472.036380][T12631] gfs2: error -5 reading superblock [ 472.506958][T12640] loop8: detected capacity change from 0 to 7 [ 472.587743][T12640] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 472.588023][T12640] loop8: p1 start 1401545024 is beyond EOD, truncated [ 472.588045][T12640] loop8: p2 start 1879513920 is beyond EOD, truncated [ 472.588061][T12640] loop8: p3 start 2737222337 is beyond EOD, truncated [ 472.588074][T12640] loop8: p4 start 1399688579 is beyond EOD, truncated [ 472.588088][T12640] loop8: p5 start 1878206208 is beyond EOD, truncated [ 472.588102][T12640] loop8: p6 start 3948687153 is beyond EOD, truncated [ 472.588116][T12640] loop8: p7 start 1740591330 is beyond EOD, truncated [ 472.588130][T12640] loop8: p8 start 3394965712 is beyond EOD, truncated [ 472.588145][T12640] loop8: p9 start 99510641 is beyond EOD, truncated [ 472.588160][T12640] loop8: p10 start 1318944454 is beyond EOD, truncated [ 472.588174][T12640] loop8: p11 start 1842501597 is beyond EOD, truncated [ 472.588188][T12640] loop8: p12 start 4293143335 is beyond EOD, truncated [ 472.594416][ T2376] gretap0: left allmulticast mode [ 472.594524][ T2376] gretap0: left promiscuous mode [ 472.687872][ T2376] bridge0: port 3(gretap0) entered disabled state [ 473.157193][ T2376] bridge_slave_1: left allmulticast mode [ 473.157427][ T2376] bridge_slave_1: left promiscuous mode [ 473.157685][ T2376] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.464478][ T2376] bridge_slave_0: left allmulticast mode [ 473.464515][ T2376] bridge_slave_0: left promiscuous mode [ 473.509085][ T2376] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.233723][T12661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.242059][T12661] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 475.789894][ T2376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.869913][ T2376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.944896][T12675] gfs2: error -5 reading superblock [ 475.961203][ T2376] bond0 (unregistering): Released all slaves [ 476.070318][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 476.368843][T12684] loop8: detected capacity change from 0 to 7 [ 476.376302][ T2376] : left promiscuous mode [ 476.387684][T12684] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 476.388620][T12684] loop8: p1 start 1401545024 is beyond EOD, truncated [ 476.388640][T12684] loop8: p2 start 1879513920 is beyond EOD, truncated [ 476.388653][T12684] loop8: p3 start 2737222337 is beyond EOD, truncated [ 476.388665][T12684] loop8: p4 start 1399688579 is beyond EOD, truncated [ 476.388680][T12684] loop8: p5 start 1878206208 is beyond EOD, truncated [ 476.388696][T12684] loop8: p6 start 3948687153 is beyond EOD, truncated [ 476.388719][T12684] loop8: p7 start 1740591330 is beyond EOD, truncated [ 476.388734][T12684] loop8: p8 start 3394965712 is beyond EOD, truncated [ 476.388749][T12684] loop8: p9 start 99510641 is beyond EOD, truncated [ 476.388766][T12684] loop8: p10 start 1318944454 is beyond EOD, truncated [ 476.388783][T12684] loop8: p11 start 1842501597 is beyond EOD, truncated [ 476.388800][T12684] loop8: p12 start 4293143335 is beyond EOD, truncated [ 476.392446][ T5855] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 476.559205][ T5855] usb 1-1: Using ep0 maxpacket: 32 [ 476.563519][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.563555][ T5855] usb 1-1: config 0 has no interfaces? [ 476.566346][ T5855] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 476.566376][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.566397][ T5855] usb 1-1: Product: syz [ 476.566410][ T5855] usb 1-1: Manufacturer: syz [ 476.566425][ T5855] usb 1-1: SerialNumber: syz [ 476.638590][ T5855] usb 1-1: config 0 descriptor?? [ 477.083096][ T5731] usb 1-1: USB disconnect, device number 66 [ 477.227955][T12691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.232008][T12692] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 477.552537][T12705] fuse: Unknown parameter '' [ 477.908704][T12716] gfs2: error -5 reading superblock [ 478.827040][T12736] loop8: detected capacity change from 0 to 7 [ 478.836051][T12736] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 478.836381][T12736] loop8: p1 start 1401545024 is beyond EOD, truncated [ 478.836404][T12736] loop8: p2 start 1879513920 is beyond EOD, truncated [ 478.836420][T12736] loop8: p3 start 2737222337 is beyond EOD, truncated [ 478.836437][T12736] loop8: p4 start 1399688579 is beyond EOD, truncated [ 478.836452][T12736] loop8: p5 start 1878206208 is beyond EOD, truncated [ 478.836468][T12736] loop8: p6 start 3948687153 is beyond EOD, truncated [ 478.836484][T12736] loop8: p7 start 1740591330 is beyond EOD, truncated [ 478.836500][T12736] loop8: p8 start 3394965712 is beyond EOD, truncated [ 478.836515][T12736] loop8: p9 start 99510641 is beyond EOD, truncated [ 478.836530][T12736] loop8: p10 start 1318944454 is beyond EOD, truncated [ 478.836545][T12736] loop8: p11 start 1842501597 is beyond EOD, truncated [ 478.836560][T12736] loop8: p12 start 4293143335 is beyond EOD, truncated [ 480.046068][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 480.626951][T12751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.660335][T12751] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 481.361772][T12766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2454'. [ 484.039046][T12792] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 484.039372][T12792] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.039616][T12792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.039827][T12792] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 484.062878][T12792] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 484.063023][T12792] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 484.204179][ T2376] hsr_slave_0: left promiscuous mode [ 484.292371][ T2376] hsr_slave_1: left promiscuous mode [ 484.297074][ T2376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.297252][ T2376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.343139][T12792] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 484.405196][ T2376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.405225][ T2376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.853977][ T37] kauditd_printk_skb: 72 callbacks suppressed [ 484.853995][ T37] audit: type=1800 audit(1785811380.378:1413): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2480" name="idProduct" dev="configfs" ino=46033 res=0 errno=0 [ 485.422176][ T2376] veth1_macvtap: left promiscuous mode [ 485.504672][ T2376] veth0_macvtap: left promiscuous mode [ 485.505080][ T2376] veth1_vlan: left promiscuous mode [ 485.505305][ T2376] veth0_vlan: left promiscuous mode [ 486.078590][ T4910] Bluetooth: hci6: command 0x0c1a tx timeout [ 486.078649][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 486.078677][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 486.078703][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 486.078727][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 487.186762][T12944] cifs: Unknown parameter 'ӭ'4,Zz-#F<]%gC [ 487.186762][T12944] t77@$8 !YJ9T' [ 488.159833][ T5601] Bluetooth: hci6: command 0x0c1a tx timeout [ 489.176924][ T2376] team0 (unregistering): Port device team_slave_1 removed [ 489.375472][T12997] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2542'. [ 489.403732][ T2376] team0 (unregistering): Port device team_slave_0 removed [ 489.738877][T12957] syz.4.2526 (12957): drop_caches: 2 [ 490.228366][ T5601] Bluetooth: hci6: command 0x0c1a tx timeout [ 490.320158][T13024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2554'. [ 490.603305][T13022] tc_dump_action: action bad kind [ 490.842097][ T37] audit: type=1326 audit(1785811386.529:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13033 comm="syz.0.2557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 490.847562][ T37] audit: type=1326 audit(1785811386.529:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13033 comm="syz.0.2557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 490.851070][ T37] audit: type=1326 audit(1785811386.539:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13033 comm="syz.0.2557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 490.852741][ T37] audit: type=1326 audit(1785811386.539:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13033 comm="syz.0.2557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 490.852998][ T37] audit: type=1326 audit(1785811386.539:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13033 comm="syz.0.2557" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b63dce019 code=0x7ffc0000 [ 491.303477][T13045] syz_tun: entered allmulticast mode [ 491.902452][T13059] syzkaller0: entered promiscuous mode [ 491.902482][T13059] syzkaller0: entered allmulticast mode [ 491.906517][T13062] tipc: Started in network mode [ 491.906561][T13062] tipc: Node identity be0e657f7cee, cluster identity 4711 [ 491.964612][T13062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.965847][T13062] tipc: Enabled bearer , priority 0 [ 492.043466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.188264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.287607][T13044] tipc: Resetting bearer [ 492.721065][T13044] tipc: Disabling bearer [ 494.470677][ T37] audit: type=1800 audit(1785811390.159:1419): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2588" name="idProduct" dev="configfs" ino=47535 res=0 errno=0 [ 494.573598][T13131] ip6erspan0: entered allmulticast mode [ 494.870485][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 495.866219][T12468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 496.107997][ T37] audit: type=1800 audit(1785811391.789:1420): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2599" name="idProduct" dev="configfs" ino=47667 res=0 errno=0 [ 496.357429][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.399521][T12468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 496.637283][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.637659][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 496.637681][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2608'. [ 496.637745][T13175] netlink: 'syz.0.2608': attribute type 4 has an invalid length. [ 496.724256][T12468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.754727][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.759760][T12468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 496.920141][T12468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.924821][ T37] audit: type=1800 audit(1785811392.609:1421): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2613" name="idProduct" dev="configfs" ino=47006 res=0 errno=0 [ 497.724789][T12468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.970505][T12468] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.021613][ T2376] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.024967][ T2376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.194553][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.194737][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.886094][T13262] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2644'. [ 498.886124][T13262] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2644'. [ 498.886140][T13262] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2644'. [ 499.904984][T13296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2656'. [ 500.901400][T12468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.618122][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.618180][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.801751][T13357] bond2 (unregistering): Released all slaves [ 501.862284][T13363] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2686'. [ 502.066077][T12468] veth0_vlan: entered promiscuous mode [ 502.291526][T12468] veth1_vlan: entered promiscuous mode [ 502.467367][T12468] veth0_macvtap: entered promiscuous mode [ 502.497094][T12468] veth1_macvtap: entered promiscuous mode [ 502.672183][T12468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.894592][T12468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.562189][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.562648][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.586188][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.590544][ T1177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.523441][ T2152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.523463][ T2152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.266074][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.266094][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.785487][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 506.841032][T13514] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 506.841065][T13514] CIFS mount error: No usable UNC path provided in device string! [ 506.841065][T13514] [ 506.841328][T13514] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 509.939392][T13609] macsec0: entered promiscuous mode [ 510.017425][T13606] macsec0: left promiscuous mode [ 513.041907][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 513.491215][T13676] syz_tun (unregistering): left allmulticast mode [ 513.556699][T13687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2829'. [ 514.274977][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 515.091663][T13735] sock: sock_timestamping_bind_phc: sock not bind to device [ 515.680109][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 517.567567][ T36] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 517.602905][T13821] tipc: Started in network mode [ 517.602937][T13821] tipc: Node identity 32317164ed4e, cluster identity 4711 [ 517.666357][T13821] tipc: Enabled bearer , priority 0 [ 517.724452][ T36] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 517.724483][ T36] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 517.724533][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 517.731258][ T36] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 517.731286][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.731306][ T36] usb 6-1: Product: syz [ 517.731320][ T36] usb 6-1: Manufacturer: syz [ 517.731334][ T36] usb 6-1: SerialNumber: syz [ 517.772603][ T36] rtl8150 6-1:1.0: couldn't find required endpoints [ 517.773002][ T36] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 518.614425][ T10] usb 6-1: USB disconnect, device number 24 [ 518.770092][ T5734] tipc: Node number set to 3749671268 [ 519.110576][T13851] tipc: Started in network mode [ 519.110606][T13851] tipc: Node identity f2763bb29926, cluster identity 4711 [ 519.111779][T13851] tipc: Enabled bearer , priority 0 [ 519.650895][T13876] sctp: [Deprecated]: syz.3.2917 (pid 13876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.650895][T13876] Use struct sctp_sack_info instead [ 519.902423][T13885] tipc: Enabling of bearer rejected, failed to enable media [ 520.231869][ T5704] tipc: Node number set to 1800420274 [ 520.460971][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2931'. [ 520.909070][T13915] syzkaller0: entered promiscuous mode [ 520.909098][T13915] syzkaller0: entered allmulticast mode [ 521.488052][T13929] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2942'. [ 522.428676][T13956] syzkaller0: entered promiscuous mode [ 522.428703][T13956] syzkaller0: entered allmulticast mode [ 523.752893][T13991] syzkaller0: entered promiscuous mode [ 523.752922][T13991] syzkaller0: entered allmulticast mode [ 524.823628][T14018] syzkaller0: entered promiscuous mode [ 524.823656][T14018] syzkaller0: entered allmulticast mode [ 525.569983][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 525.999657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806056f000: rx timeout, send abort [ 526.005979][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803b668400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 526.503441][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806056f000: abort rx timeout. Force session deactivation [ 526.897770][T14079] random: crng reseeded on system resumption [ 527.619367][T14095] netlink: 'syz.0.3013': attribute type 10 has an invalid length. [ 527.655058][T14095] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 527.715048][T14095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.849057][T14095] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 527.953426][T14104] netlink: 'syz.5.3016': attribute type 1 has an invalid length. [ 528.059685][T14104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.217269][T14107] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 528.625244][T14104] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 528.708053][T14127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3023'. [ 528.825271][ T10] kernel read not supported for file /1497/net/mcfilter (pid: 10 comm: kworker/0:1) [ 529.180723][T14136] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3026'. [ 530.075198][T14168] tipc: Enabling of bearer rejected, already enabled [ 530.157935][ T37] audit: type=1800 audit(1785811425.821:1422): pid=14177 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3044" name="idProduct" dev="configfs" ino=50747 res=0 errno=0 [ 530.546472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.877541][T14204] tipc: Enabling of bearer rejected, already enabled [ 531.174831][ T37] audit: type=1800 audit(1785811426.851:1423): pid=14214 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3062" name="idProduct" dev="configfs" ino=50798 res=0 errno=0 [ 531.585998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.900485][T14239] tipc: Started in network mode [ 531.900516][T14239] tipc: Node identity ceaadc328c4f, cluster identity 4711 [ 531.900996][T14239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.901025][T14239] tipc: Enabled bearer , priority 0 [ 531.918755][T14246] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3075'. [ 532.036599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.183623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.316020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.441189][T14257] random: crng reseeded on system resumption [ 532.456027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.679189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.679368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.715701][ T10] tipc: Node number set to 1122360370 [ 533.748962][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.825928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.095943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.625907][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.786388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.816244][T14280] syz.3.3089 (14280) used greatest stack depth: 18552 bytes left [ 535.825764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.865945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.101713][T14363] futex_wake_op: syz.3.3124 tries to shift op by 144; fix this program [ 537.307300][T14366] team0: Device wg0 is of different type [ 537.497085][T14366] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 537.703066][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3135'. [ 537.716057][T14389] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3134'. [ 537.905733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.298363][T14419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3142'. [ 538.497509][T14427] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3149'. [ 538.945718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.101856][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3163'. [ 539.103149][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3163'. [ 539.105453][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3163'. [ 539.227959][T14462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3164'. [ 539.401973][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'. [ 539.472364][T14475] netlink: 'syz.0.3170': attribute type 49 has an invalid length. [ 539.978635][T14492] usb usb8: usbfs: process 14492 (syz.5.3179) did not claim interface 0 before use [ 539.985584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.026289][T14494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3180'. [ 540.889476][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 540.959941][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 540.962909][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 540.976471][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 540.979742][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.029827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.353202][T14524] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 [ 542.085162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.072852][T14583] __nla_validate_parse: 1 callbacks suppressed [ 543.072872][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 543.105388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.266322][ T5601] Bluetooth: hci2: command tx timeout [ 543.986393][T14615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 544.145338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.437367][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.438176][T14518] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.438387][T14518] bridge_slave_0: entered allmulticast mode [ 544.441487][T14518] bridge_slave_0: entered promiscuous mode [ 544.472430][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.472642][T14518] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.496129][T14518] bridge_slave_1: entered allmulticast mode [ 544.498971][T14518] bridge_slave_1: entered promiscuous mode [ 544.601701][T14636] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3236'. [ 544.611866][T14518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.668927][T14518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.898479][T14518] team0: Port device team_slave_0 added [ 544.916275][T14518] team0: Port device team_slave_1 added [ 545.317425][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3243'. [ 545.345817][ T5601] Bluetooth: hci2: command tx timeout [ 545.372487][T14518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.372503][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.372527][T14518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.421728][T14518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.421746][T14518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.421773][T14518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.914947][T14518] hsr_slave_0: entered promiscuous mode [ 545.918647][T14518] hsr_slave_1: entered promiscuous mode [ 545.919631][T14518] debugfs: 'hsr0' already exists in 'hsr' [ 545.919655][T14518] Cannot create hsr debugfs directory [ 547.425172][ T5601] Bluetooth: hci2: command tx timeout [ 547.912075][T14518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.509610][ T5601] Bluetooth: hci2: command tx timeout [ 549.676444][T14518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.055598][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3299'. [ 550.765233][T14518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.333490][T14518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.521109][T14818] syzkaller0: entered promiscuous mode [ 551.521136][T14818] syzkaller0: entered allmulticast mode [ 554.149828][T14913] netlink: 'syz.5.3351': attribute type 4 has an invalid length. [ 554.153155][T14518] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 554.292633][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.308272][T14518] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 554.532820][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 554.535667][T14518] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.703421][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 554.766761][T14518] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.990454][T14518] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 555.713348][T14518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.069541][T14518] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.172328][ T733] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.172456][ T733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.293010][ T2152] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.294023][ T2152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.457181][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3375'. [ 556.719601][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3383'. [ 558.163219][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 558.187443][T15030] Invalid argument reading file caps for ./file0 [ 559.542641][T15073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3408'. [ 559.582564][T14518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.075303][T14518] veth0_vlan: entered promiscuous mode [ 560.091547][T14518] veth1_vlan: entered promiscuous mode [ 560.595892][T14518] veth0_macvtap: entered promiscuous mode [ 560.735322][T14518] veth1_macvtap: entered promiscuous mode [ 560.933115][T14518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.972233][T14518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.034692][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.034764][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.034822][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.034852][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.116235][T15123] sg_write: data in/out 1852793403/120 bytes for SCSI command 0x0-- guessing data in; [ 562.116235][T15123] program syz.1.3427 not setting count and/or reply_len properly [ 562.441799][ T2376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.441818][ T2376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.046522][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.046584][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.579340][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.579361][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.072082][ T37] audit: type=1326 audit(1785811459.763:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15160 comm="syz.1.3443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3131e019 code=0x7fc00000 [ 564.072143][ T37] audit: type=1326 audit(1785811459.763:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15160 comm="syz.1.3443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b312bf399 code=0x7fc00000 [ 564.072185][ T37] audit: type=1326 audit(1785811459.763:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15160 comm="syz.1.3443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3b312bf45d code=0x7fc00000 [ 564.072288][ T37] audit: type=1326 audit(1785811459.763:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15160 comm="syz.1.3443" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3b3131e019 code=0x7fc00000 [ 564.800273][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.843655][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.847919][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.857579][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.866370][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.382511][T15181] Process accounting resumed [ 567.126219][ T5601] Bluetooth: hci1: command tx timeout [ 567.915738][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'. [ 568.321802][ T5876] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.187127][ T5601] Bluetooth: hci1: command tx timeout [ 569.558302][ T5876] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.574343][T15301] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3490'. [ 570.768155][T15328] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 571.032866][ T5876] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.155058][T15341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3510'. [ 571.263762][ T5601] Bluetooth: hci1: command tx timeout [ 571.862951][ T5876] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.262334][T15174] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.262507][T15174] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.262776][T15174] bridge_slave_0: entered allmulticast mode [ 573.302855][T15174] bridge_slave_0: entered promiscuous mode [ 573.325290][T15174] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.325501][T15174] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.325810][T15174] bridge_slave_1: entered allmulticast mode [ 573.328768][T15174] bridge_slave_1: entered promiscuous mode [ 573.353747][ T5601] Bluetooth: hci1: command tx timeout [ 574.578183][T15174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.766518][T15174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.580720][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3566'. [ 575.630439][T15174] team0: Port device team_slave_0 added [ 575.650732][T15174] team0: Port device team_slave_1 added [ 575.738220][T15478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3569'. [ 576.016368][T15174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.016388][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.016417][T15174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.026353][T15174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.026370][T15174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.026396][T15174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.244597][ T5876] gretap0: left allmulticast mode [ 576.244630][ T5876] gretap0: left promiscuous mode [ 576.244845][ T5876] bridge0: port 3(gretap0) entered disabled state [ 576.430848][ T5876] bridge_slave_1: left allmulticast mode [ 576.430886][ T5876] bridge_slave_1: left promiscuous mode [ 576.514425][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.549641][T15503] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3581'. [ 576.691096][ T5876] bridge_slave_0: left allmulticast mode [ 576.691147][ T5876] bridge_slave_0: left promiscuous mode [ 576.691379][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.735369][ T5876] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN PTI [ 576.735389][ T5876] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 576.735408][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 576.735427][ T5876] Tainted: [L]=SOFTLOCKUP [ 576.735432][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 576.735442][ T5876] Workqueue: netns cleanup_net [ 576.735464][ T5876] RIP: 0010:br_del_frame+0xd4/0x160 [ 576.735483][ T5876] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 56 e3 19 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 2d e4 19 f8 4d 89 37 4d 85 f6 74 [ 576.735495][ T5876] RSP: 0018:ffffc900060af7e0 EFLAGS: 00010a06 [ 576.735506][ T5876] RAX: 1bd5a00000000024 RBX: ffffffff8fb197d8 RCX: ffff88802e919f00 [ 576.735517][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fb197d0 [ 576.735525][ T5876] RBP: 000000000000001c R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 576.735535][ T5876] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: dffffc0000000000 [ 576.735545][ T5876] R13: 1ffffffff1f632fb R14: 0000000000000000 R15: dead000000000122 [ 576.735555][ T5876] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 576.735566][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.735576][ T5876] CR2: 000055558c264a38 CR3: 0000000037778000 CR4: 00000000003526f0 [ 576.735593][ T5876] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 576.735602][ T5876] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 576.735611][ T5876] Call Trace: [ 576.735617][ T5876] [ 576.735624][ T5876] br_cfm_port_del+0x106/0x1a0 [ 576.735642][ T5876] ? del_nbp+0x14c/0xa10 [ 576.735655][ T5876] del_nbp+0x199/0xa10 [ 576.735671][ T5876] br_dev_delete+0x6e/0x130 [ 576.735687][ T5876] br_net_exit_rtnl+0xb1/0x120 [ 576.735705][ T5876] ? __pfx_br_net_exit_rtnl+0x10/0x10 [ 576.735721][ T5876] ops_undo_list+0x319/0x8d0 [ 576.735737][ T5876] ? __pfx_ops_undo_list+0x10/0x10 [ 576.735750][ T5876] ? rt_spin_unlock+0x157/0x200 [ 576.735765][ T5876] ? idr_destroy+0x21b/0x2a0 [ 576.735781][ T5876] ? rt_spin_unlock+0x163/0x200 [ 576.735795][ T5876] cleanup_net+0x575/0x810 [ 576.735809][ T5876] ? __pfx_cleanup_net+0x10/0x10 [ 576.735825][ T5876] ? rcu_is_watching+0x15/0xb0 [ 576.735842][ T5876] ? process_scheduled_works+0xa20/0x14e0 [ 576.735858][ T5876] process_scheduled_works+0xa8e/0x14e0 [ 576.735881][ T5876] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.735898][ T5876] ? assign_work+0x3cf/0x5d0 [ 576.735914][ T5876] worker_thread+0xa47/0xfb0 [ 576.735934][ T5876] ? __kthread_parkme+0x71/0x1f0 [ 576.735954][ T5876] kthread+0x388/0x470 [ 576.735972][ T5876] ? __pfx_worker_thread+0x10/0x10 [ 576.735987][ T5876] ? __pfx_kthread+0x10/0x10 [ 576.736012][ T5876] ret_from_fork+0x514/0xb70 [ 576.736033][ T5876] ? __pfx_ret_from_fork+0x10/0x10 [ 576.736052][ T5876] ? __switch_to+0xc89/0x1420 [ 576.736070][ T5876] ? __pfx_kthread+0x10/0x10 [ 576.736088][ T5876] ret_from_fork_asm+0x1a/0x30 [ 576.736106][ T5876] [ 576.736118][ T5876] Modules linked in: [ 576.736141][ T5876] ---[ end trace 0000000000000000 ]--- [ 576.736154][ T5876] RIP: 0010:br_del_frame+0xd4/0x160 [ 576.736172][ T5876] Code: f8 4c 8b 73 10 48 83 c3 18 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 56 e3 19 f8 4c 8b 3b 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 2d e4 19 f8 4d 89 37 4d 85 f6 74 [ 576.736184][ T5876] RSP: 0018:ffffc900060af7e0 EFLAGS: 00010a06 [ 576.736195][ T5876] RAX: 1bd5a00000000024 RBX: ffffffff8fb197d8 RCX: ffff88802e919f00 [ 576.736206][ T5876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8fb197d0 [ 576.736215][ T5876] RBP: 000000000000001c R08: ffffffff8fafa337 R09: 1ffffffff1f5f466 [ 576.736225][ T5876] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: dffffc0000000000 [ 576.736235][ T5876] R13: 1ffffffff1f632fb R14: 0000000000000000 R15: dead000000000122 [ 576.736245][ T5876] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 576.736257][ T5876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.736268][ T5876] CR2: 000055558c264a38 CR3: 0000000037778000 CR4: 00000000003526f0 [ 576.736281][ T5876] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 576.736291][ T5876] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 576.736303][ T5876] Kernel panic - not syncing: Fatal exception [ 576.737540][ T5876] Kernel Offset: disabled