last executing test programs: 8m23.006367781s ago: executing program 32 (id=729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x42404) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x10, 0x3ff, @l2={'eth', 0x3a, 'vlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) 7m15.691260654s ago: executing program 33 (id=1281): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 6m25.51306004s ago: executing program 1 (id=1623): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040844}, 0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd, 0x3f, 0x6, "3eccd25569e20900"}) 6m25.009818871s ago: executing program 1 (id=1626): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040100010300000009210000800122f80409058103"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x85, 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 6m22.980080861s ago: executing program 1 (id=1644): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000009200)=[{{&(0x7f0000000540)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x8800) 6m22.474055789s ago: executing program 1 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x4) 6m22.07013461s ago: executing program 1 (id=1651): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040bd28050900000000000109022400010000000009040200010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00017c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 6m19.71495397s ago: executing program 1 (id=1668): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b502f3ff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m19.304737563s ago: executing program 34 (id=1668): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b502f3ff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m39.5553786s ago: executing program 2 (id=1981): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r1, 0xf, 0x0, 0x0) 5m39.320126238s ago: executing program 2 (id=1985): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002d80)={0xe, {"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", 0x1000}}, 0x1006) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 5m38.981735433s ago: executing program 2 (id=1990): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x401003, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) 5m38.727149028s ago: executing program 2 (id=1994): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 5m38.345460475s ago: executing program 2 (id=1998): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 5m37.06882751s ago: executing program 2 (id=2005): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x193, 0x0, &(0x7f0000000180)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 5m36.737599324s ago: executing program 35 (id=2005): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x193, 0x0, &(0x7f0000000180)="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", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4m48.932453544s ago: executing program 4 (id=2367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6a144b89, @private2, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="fe", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000400)="1a", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0)={0xb, 0x1c, 0x5, 0x8, 0x6, 0x8, 0xff, 0x6, 0x9, 0x5, 0x38, 0x5, 0xff, 0x6}, 0xe) 4m48.584661118s ago: executing program 4 (id=2370): gettid() timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}}, &(0x7f0000000140)) 4m48.108593793s ago: executing program 4 (id=2374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000f3, 0x0, 0x5}]}) 4m47.409410159s ago: executing program 4 (id=2380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, &(0x7f0000000700)={[{@stats}]}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x7ff) 4m47.005103689s ago: executing program 4 (id=2383): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='P'], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000380)) 4m46.610708124s ago: executing program 4 (id=2387): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) 4m31.461250226s ago: executing program 36 (id=2387): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) 2m23.069818005s ago: executing program 9 (id=3538): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x109801, 0x0) ptrace$cont(0x9, r0, 0x5, 0x401) 2m22.687805557s ago: executing program 9 (id=3541): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000002f00)={'custom0\x00'}) 2m22.289788959s ago: executing program 9 (id=3546): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbde252100000008000300", @ANYRES32=r2, @ANYBLOB='8\x00-'], 0x54}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4000) 2m21.977344457s ago: executing program 9 (id=3550): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 2m21.685849732s ago: executing program 9 (id=3552): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m21.432368158s ago: executing program 9 (id=3555): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync_file_range(0xffffffffffffffff, 0x1000000000000006, 0x4, 0x1) 2m6.332079425s ago: executing program 37 (id=3555): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync_file_range(0xffffffffffffffff, 0x1000000000000006, 0x4, 0x1) 1m11.449415187s ago: executing program 6 (id=4012): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x244}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8", 0x1aa}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e5053", 0x94}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/215, 0xd7}], 0x1}, 0xffff}], 0x1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m11.133511191s ago: executing program 6 (id=4017): mkdir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000180)) 1m10.871452635s ago: executing program 6 (id=4022): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000740)={0x2, 0x11, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1m10.459962748s ago: executing program 6 (id=4026): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m10.165726219s ago: executing program 6 (id=4029): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) 1m8.541372132s ago: executing program 6 (id=4042): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xee01, 0xffffffffffffffff]) setregid(r1, r2) 1m8.149520556s ago: executing program 38 (id=4042): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xee01, 0xffffffffffffffff]) setregid(r1, r2) 3.907876585s ago: executing program 0 (id=4462): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r1 = dup2(r0, r0) read$char_usb(r1, 0x0, 0x0) 3.485163867s ago: executing program 3 (id=4465): unshare(0x28000600) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x2000, 0x800) msgsnd(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) msgctl$IPC_RMID(0x0, 0x0) 3.107667063s ago: executing program 5 (id=4467): io_cancel(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x40000000001}}, [@mark={0xc, 0x15, {0x35075a, 0x2}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) 3.018734647s ago: executing program 3 (id=4468): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 2.486961233s ago: executing program 8 (id=4470): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000"], 0x10}}], 0x1, 0x240040c4) 2.486021868s ago: executing program 5 (id=4471): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x8, 0x0, 0x9}, &(0x7f00000000c0)=0x10) 2.457666916s ago: executing program 3 (id=4472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x40000) 2.304593887s ago: executing program 7 (id=4473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.119959838s ago: executing program 8 (id=4474): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r1, &(0x7f00000000c0)='./cgroup\x00', r1, &(0x7f0000000000)='./cgroup\x00', 0x5) 2.119765681s ago: executing program 5 (id=4475): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 2.118758505s ago: executing program 0 (id=4476): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 1.979872493s ago: executing program 7 (id=4477): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_b, @broadcast, @initial, {0x3, 0x6}}, 0x0, 0x2, 0x63, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 1.860294665s ago: executing program 3 (id=4478): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x2400c414}, 0x4000) 1.592915286s ago: executing program 7 (id=4479): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x10000, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x3) r2 = syz_pidfd_open(r0, 0x0) process_madvise(r2, 0x0, 0x0, 0x10, 0x0) 1.481245437s ago: executing program 8 (id=4480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000940)={&(0x7f00000003c0)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x810) 1.446391714s ago: executing program 0 (id=4481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x482, 0x0, 0xffffffffffffffff}]}) 1.394067966s ago: executing program 3 (id=4482): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) 1.227254576s ago: executing program 7 (id=4483): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800dd88a8", 0x20, 0x24040011, &(0x7f0000000300)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) 1.0251346s ago: executing program 8 (id=4484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 799.29587ms ago: executing program 7 (id=4485): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8d}], 0x1, 0x40000000, 0x0) 755.954244ms ago: executing program 0 (id=4486): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x40091) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) 709.450566ms ago: executing program 8 (id=4487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1}, "0100000000000100"}}}}}, 0x32) 626.861139ms ago: executing program 5 (id=4488): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 525.634567ms ago: executing program 7 (id=4489): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) ppoll(&(0x7f00000003c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 458.063801ms ago: executing program 0 (id=4490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x30, r1, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2f8}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 365.315172ms ago: executing program 5 (id=4491): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 239.906201ms ago: executing program 3 (id=4492): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) 15.774536ms ago: executing program 5 (id=4493): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r0, &(0x7f0000000740)={0x0, 0x700df6df844ba292, 0x0, 0x0, 0xffffffffffffffff, 0x5a}, 0x2041) 8.696643ms ago: executing program 0 (id=4494): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 0s ago: executing program 8 (id=4495): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): : hci2: command 0x0405 tx timeout [ 447.932350][ T819] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 448.082374][ T819] usb 9-1: Using ep0 maxpacket: 16 [ 448.084717][ T819] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.084746][ T819] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.084766][ T819] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 448.084789][ T819] usb 9-1: config 0 interface 0 has no altsetting 0 [ 448.084819][ T819] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 448.084839][ T819] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.163411][ T819] usb 9-1: config 0 descriptor?? [ 448.241972][T13610] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2956'. [ 448.585554][ T819] hid (null): nested delimiters [ 448.585566][ T819] hid (null): nested delimiters [ 448.585572][ T819] hid (null): nested delimiters [ 448.585680][ T819] hid (null): unknown global tag 0xd [ 448.782609][ T5614] usb 9-1: USB disconnect, device number 13 [ 450.262907][T12751] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 450.417954][T12751] usb 7-1: unable to get BOS descriptor or descriptor too short [ 450.419498][T12751] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 450.420849][T12751] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.420874][T12751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 450.420893][T12751] usb 7-1: SerialNumber: syz [ 451.052336][ T5608] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 451.087004][T12751] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 451.194183][T13668] netlink: 'syz.8.2981': attribute type 8 has an invalid length. [ 451.214167][ T5608] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.214190][ T5608] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.216754][ T5608] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.216778][ T5608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 451.216796][ T5608] usb 6-1: SerialNumber: syz [ 451.328852][T12751] usb 7-1: USB disconnect, device number 18 [ 451.446190][ T5608] usb 6-1: 0:2 : does not exist [ 451.621337][ T5608] usb 6-1: USB disconnect, device number 20 [ 452.002303][ T5702] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 452.157331][ T5702] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 452.157363][ T5702] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.157383][ T5702] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.157421][ T5702] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 452.157441][ T5702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.214832][ T5702] usb 9-1: config 0 descriptor?? [ 452.660524][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660560][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660586][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660611][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660636][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660661][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660687][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660712][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660736][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.660759][ T5702] hid-multitouch 0003:0457:07DA.0023: unknown main item tag 0x0 [ 452.687935][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2990'. [ 452.770312][ T5702] hid-multitouch 0003:0457:07DA.0023: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 452.801594][T13688] bond0: entered promiscuous mode [ 452.801614][T13688] bond_slave_0: entered promiscuous mode [ 452.801872][T13688] bond_slave_1: entered promiscuous mode [ 452.826929][T13688] team0: entered promiscuous mode [ 452.826948][T13688] team_slave_0: entered promiscuous mode [ 452.827276][T13688] team_slave_1: entered promiscuous mode [ 452.838301][T13688] hsr1: entered promiscuous mode [ 452.839019][T13688] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 453.067216][ T5702] usb 9-1: USB disconnect, device number 14 [ 453.929356][T13712] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3001'. [ 455.252892][T13750] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3019'. [ 455.402326][ T36] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 455.562410][ T36] usb 8-1: Using ep0 maxpacket: 16 [ 455.564242][ T36] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 455.564274][ T36] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 455.564293][ T36] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 455.564310][ T36] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 455.566576][ T36] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.566599][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.566615][ T36] usb 8-1: Product: syz [ 455.566627][ T36] usb 8-1: Manufacturer: syz [ 455.566639][ T36] usb 8-1: SerialNumber: syz [ 455.667798][ T36] usb 8-1: 0:2 : does not exist [ 455.873495][ T36] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 455.944201][ T36] usb 8-1: USB disconnect, device number 14 [ 456.108947][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.602359][ T36] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 456.782947][ T36] usb 10-1: Using ep0 maxpacket: 8 [ 456.786609][ T36] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.786638][ T36] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 456.786662][ T36] usb 10-1: config 0 interface 0 has no altsetting 0 [ 456.786683][ T36] usb 10-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 456.786694][ T36] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.789722][ T36] usb 10-1: config 0 descriptor?? [ 457.259750][ T36] sony 0003:054C:024B.0024: unexpected long global item [ 457.272988][ T36] sony 0003:054C:024B.0024: parse failed [ 457.273092][ T36] sony 0003:054C:024B.0024: probe with driver sony failed with error -22 [ 457.429067][ T5608] usb 10-1: USB disconnect, device number 3 [ 457.641614][T13785] netlink: 192 bytes leftover after parsing attributes in process `syz.6.3035'. [ 457.769980][T13789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.918237][T13793] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.3039'. [ 458.414469][T13806] binder: 13805:13806 unknown command 0 [ 458.414589][T13806] binder: 13805:13806 ioctl c0306201 2000000003c0 returned -22 [ 458.683577][T13814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3047'. [ 458.979087][T13826] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3054'. [ 459.092278][ T36] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 459.254497][ T36] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 459.254541][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.254557][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.254568][ T36] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 459.255609][ T36] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 459.255633][ T36] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 459.255644][ T36] usb 10-1: Manufacturer: syz [ 459.339282][ T36] usb 10-1: config 0 descriptor?? [ 459.757152][ T36] hid_parser_main: 17 callbacks suppressed [ 459.757167][ T36] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 459.825812][ T36] appleir 0003:05AC:8243.0025: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 460.169250][T12752] usb 10-1: USB disconnect, device number 4 [ 460.182339][ T5702] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 460.349425][ T5702] usb 6-1: unable to get BOS descriptor or descriptor too short [ 460.360783][ T5702] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.360806][ T5702] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.375516][ T5702] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 460.375543][ T5702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.375560][ T5702] usb 6-1: Product: syz [ 460.375572][ T5702] usb 6-1: Manufacturer: syz [ 460.375585][ T5702] usb 6-1: SerialNumber: syz [ 460.419816][ T5702] usb 6-1: selecting invalid altsetting 1 [ 460.420396][ T5702] usb 6-1: unit 6 not found! [ 461.250494][ T5702] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 461.598894][ T5702] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 461.608149][ T5702] usb 6-1: USB disconnect, device number 21 [ 461.897088][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.223238][T12752] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 462.373908][T12752] usb 8-1: Using ep0 maxpacket: 8 [ 462.376182][T12752] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.376206][T12752] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.376228][T12752] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.376250][T12752] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.376288][T12752] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.376309][T12752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.525407][T13881] vivid-002: disconnect [ 462.563338][T13880] vivid-002: reconnect [ 462.708344][T12752] usb 8-1: GET_CAPABILITIES returned 0 [ 462.708389][T12752] usbtmc 8-1:16.0: can't read capabilities [ 462.928576][ T5614] usb 8-1: USB disconnect, device number 15 [ 463.814716][T13909] input: syz0 as /devices/virtual/input/input28 [ 464.607287][T13926] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 464.607430][T13926] syzkaller0: linktype set to 768 [ 465.491249][T13943] program syz.9.3110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 467.532320][ T5702] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 467.692457][ T5702] usb 7-1: Using ep0 maxpacket: 16 [ 467.694712][ T5702] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.694740][ T5702] usb 7-1: config 0 interface 0 has no altsetting 0 [ 467.694771][ T5702] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 467.694791][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.754185][ T5702] usb 7-1: config 0 descriptor?? [ 468.245734][ T5702] mcp2221 0003:04D8:00DD.0026: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 468.901499][ T5702] usb 7-1: USB disconnect, device number 19 [ 471.275630][T14062] loop9: detected capacity change from 0 to 524287936 [ 471.380749][ T37] audit: type=1326 audit(1780486475.639:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.380786][ T37] audit: type=1326 audit(1780486475.639:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.381207][ T37] audit: type=1326 audit(1780486475.639:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.388412][ T37] audit: type=1326 audit(1780486475.639:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.389008][ T37] audit: type=1326 audit(1780486475.649:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.389049][ T37] audit: type=1326 audit(1780486475.649:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.394195][ T37] audit: type=1326 audit(1780486475.659:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.396347][ T37] audit: type=1326 audit(1780486475.659:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.396388][ T37] audit: type=1326 audit(1780486475.659:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.412432][ T37] audit: type=1326 audit(1780486475.669:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14065 comm="syz.8.3165" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd9a5e1ce59 code=0x7ffc0000 [ 471.552816][ T5702] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 471.751076][ T5702] usb 8-1: unable to get BOS descriptor or descriptor too short [ 471.756973][ T5702] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 471.757005][ T5702] usb 8-1: can't read configurations, error -71 [ 472.795576][T14092] Bluetooth: hci0: Frame reassembly failed (-84) [ 472.970969][ T3374] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.971016][ T3374] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.971049][ T3374] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.971081][ T3374] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.825944][T12752] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 474.843848][ T5610] Bluetooth: hci0: command 0x1003 tx timeout [ 474.848924][ T5618] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 474.980660][T12752] usb 9-1: unable to get BOS descriptor or descriptor too short [ 474.996300][T12752] usb 9-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 474.996401][T12752] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 474.996426][T12752] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 475.049259][T12752] usb 9-1: string descriptor 0 read error: -22 [ 475.049337][T12752] usb 9-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 475.049348][T12752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.212360][T12751] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 475.362307][T12751] usb 10-1: Using ep0 maxpacket: 32 [ 475.371801][T12751] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 475.371956][T12751] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 475.371982][T12751] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.372004][T12751] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 475.391826][T12751] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 475.391852][T12751] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.397758][T12751] usb 10-1: Product: syz [ 475.397775][T12751] usb 10-1: Manufacturer: syz [ 475.397789][T12751] usb 10-1: SerialNumber: syz [ 475.649857][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 475.736044][T12752] usb 9-1: current rate 47891 is different from the runtime rate 48000 [ 476.105218][T12751] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input29 [ 476.547794][T12751] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 476.547812][T12751] (id 0x00) [ 476.580607][T12752] usb 9-1: USB disconnect, device number 15 [ 476.643146][ T5608] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 476.702559][T12751] rc_core: IR keymap rc-imon-pad not found [ 476.702576][T12751] Registered IR keymap rc-empty [ 476.702655][T12751] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 476.702671][T12751] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 476.802243][ T5608] usb 6-1: Using ep0 maxpacket: 16 [ 476.804219][ T5608] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.804259][ T5608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.804292][ T5608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 476.804311][ T5608] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 476.804332][ T5608] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.805435][ T5608] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 476.805459][ T5608] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 476.805477][ T5608] usb 6-1: Manufacturer: syz [ 476.816397][T12751] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 476.977267][T12751] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input30 [ 476.985815][ T5608] usb 6-1: config 0 descriptor?? [ 477.373315][ T5608] rc_core: IR keymap rc-hauppauge not found [ 477.373336][ T5608] Registered IR keymap rc-empty [ 477.373629][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.393951][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.420433][ T5608] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 477.435337][T12751] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:5> initialized [ 477.461689][ T5608] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input31 [ 477.498989][T12751] usb 10-1: USB disconnect, device number 5 [ 477.568874][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.598952][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.616537][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.634253][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.660902][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.680570][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.694925][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.712320][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.749115][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 477.764199][ T5608] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.185197][ T5608] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 478.185222][ T5608] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 478.268884][ T5608] usb 6-1: USB disconnect, device number 22 [ 479.262273][ T5702] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 479.402463][ T819] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 479.422235][ T5702] usb 8-1: Using ep0 maxpacket: 16 [ 479.425150][ T5702] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.425177][ T5702] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 479.425200][ T5702] usb 8-1: config 0 interface 0 has no altsetting 0 [ 479.425230][ T5702] usb 8-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 479.425249][ T5702] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.499571][ T5702] usb 8-1: config 0 descriptor?? [ 479.572300][ T819] usb 10-1: Using ep0 maxpacket: 32 [ 479.581078][ T819] usb 10-1: config 0 has no interfaces? [ 479.581119][ T819] usb 10-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 479.581212][ T819] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.673575][ T819] usb 10-1: config 0 descriptor?? [ 479.922392][ T5702] uclogic 0003:28BD:0055.0027: interface is invalid, ignoring [ 479.943435][ T5702] usb 10-1: USB disconnect, device number 6 [ 480.122696][ T948] usb 8-1: USB disconnect, device number 18 [ 480.931433][T14217] loop5: detected capacity change from 0 to 6 [ 480.940720][T14217] Dev loop5: unable to read RDB block 6 [ 480.940823][T14217] loop5: AHDI p1 p2 [ 480.940851][T14217] loop5: partition table partially beyond EOD, truncated [ 480.941087][T14217] loop5: p1 start 1702059890 is beyond EOD, truncated [ 482.904094][T14253] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3249'. [ 484.088353][T14286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3265'. [ 484.322790][T14290] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 485.140220][T14310] netlink: 'syz.6.3275': attribute type 1 has an invalid length. [ 485.140244][T14310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.292588][ T5608] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 485.444414][ T5608] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 485.444443][ T5608] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.453174][ T5608] usb 9-1: config 0 descriptor?? [ 485.485454][ T5608] cp210x 9-1:0.0: cp210x converter detected [ 485.530485][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3278'. [ 485.812509][T14320] macvlan0: entered promiscuous mode [ 485.862188][T14320] netlink: 'syz.5.3280': attribute type 1 has an invalid length. [ 485.862207][T14320] netlink: 'syz.5.3280': attribute type 2 has an invalid length. [ 485.889361][ T5608] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 485.961912][ T5608] usb 9-1: cp210x converter now attached to ttyUSB0 [ 486.042259][ T5703] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 486.109098][ T819] usb 9-1: USB disconnect, device number 16 [ 486.172704][ T819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 486.217159][ T5703] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 486.217176][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.240900][ T5703] usb 8-1: config 0 descriptor?? [ 486.405756][ T819] cp210x 9-1:0.0: device disconnected [ 486.428106][T14332] netlink: 'syz.5.3285': attribute type 32 has an invalid length. [ 486.428224][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 486.459372][ T5703] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 486.471320][T14332] bond2: option coupled_control: invalid value (7) [ 486.517115][T14332] bond2 (unregistering): Released all slaves [ 486.663330][ T5703] [drm:udl_init] *ERROR* Selecting channel failed [ 486.902911][ T5703] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 486.902935][ T5703] [drm] Initialized udl on minor 2 [ 486.925549][ T5703] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 486.973980][ T5703] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 487.028387][ T5703] usb 8-1: USB disconnect, device number 19 [ 487.057322][ T819] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 488.106850][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3299'. [ 488.106873][T14366] netlink: 'syz.6.3299': attribute type 30 has an invalid length. [ 488.158083][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3299'. [ 488.158115][T14367] netlink: 'syz.6.3299': attribute type 30 has an invalid length. [ 488.376994][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3303'. [ 488.377013][T14376] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3303'. [ 488.377028][T14376] netlink: 'syz.8.3303': attribute type 19 has an invalid length. [ 489.252645][ T5608] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 489.387638][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3314'. [ 489.402559][ T5608] usb 10-1: Using ep0 maxpacket: 8 [ 489.406858][ T5608] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.406883][ T5608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 489.406904][ T5608] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.406925][ T5608] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.406962][ T5608] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.406983][ T5608] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.452258][ T819] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 489.636739][ T819] usb 7-1: Using ep0 maxpacket: 32 [ 489.652401][ T819] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 489.652428][ T819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.703687][ T5608] usb 10-1: GET_CAPABILITIES returned 0 [ 489.703727][ T5608] usbtmc 10-1:16.0: can't read capabilities [ 489.929258][ T819] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 490.025516][ T36] usb 10-1: USB disconnect, device number 7 [ 490.107694][ T819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.112540][ T819] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 490.112591][ T819] usb 7-1: media controller created [ 490.458051][ T819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.892705][ T819] az6027: usb out operation failed. (-71) [ 490.892722][ T819] stb0899_attach: Driver disabled by Kconfig [ 490.892732][ T819] az6027: no front-end attached [ 490.892732][ T819] [ 490.893115][ T819] az6027: usb out operation failed. (-71) [ 490.893127][ T819] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 490.916074][ T819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input33 [ 490.945740][ T819] dvb-usb: schedule remote query interval to 400 msecs. [ 490.945759][ T819] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 491.001122][ T819] usb 7-1: USB disconnect, device number 20 [ 491.360962][ T819] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 491.682380][ T948] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 491.839679][ T948] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 491.839707][ T948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.839725][ T948] usb 10-1: Product: syz [ 491.839737][ T948] usb 10-1: Manufacturer: syz [ 491.839748][ T948] usb 10-1: SerialNumber: syz [ 491.884821][ T948] usb 10-1: config 0 descriptor?? [ 492.325184][ T948] usb 10-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 492.325200][ T948] usb 10-1: Firmware version (0.0) predates our first public release. [ 492.325209][ T948] usb 10-1: Please update to version 0.2 or newer [ 492.714997][ T948] usb 10-1: USB disconnect, device number 8 [ 495.520627][T14515] netlink: 'syz.8.3362': attribute type 64 has an invalid length. [ 495.520641][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3362'. [ 495.627036][ T819] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 495.792254][ T819] usb 8-1: Using ep0 maxpacket: 16 [ 495.794565][ T819] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 495.794588][ T819] usb 8-1: config 0 has no interface number 0 [ 495.794630][ T819] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 495.794652][ T819] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 495.796979][ T819] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 495.797004][ T819] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.797021][ T819] usb 8-1: Product: syz [ 495.797033][ T819] usb 8-1: Manufacturer: syz [ 495.797045][ T819] usb 8-1: SerialNumber: syz [ 495.799992][ T819] usb 8-1: config 0 descriptor?? [ 495.832568][T14509] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 495.832686][T14509] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 496.080412][T14509] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 496.080595][T14509] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 496.285991][ T819] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 496.527608][T14535] netlink: 'syz.8.3371': attribute type 12 has an invalid length. [ 496.527627][T14535] netlink: 'syz.8.3371': attribute type 29 has an invalid length. [ 496.527640][T14535] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3371'. [ 496.689719][ T819] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 496.690072][ T819] asix 8-1:0.34: probe with driver asix failed with error -71 [ 496.738514][ T819] usb 8-1: USB disconnect, device number 20 [ 496.757995][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3373'. [ 496.758027][T14539] netlink: 'syz.5.3373': attribute type 15 has an invalid length. [ 496.758040][T14539] netlink: 'syz.5.3373': attribute type 25 has an invalid length. [ 496.758052][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3373'. [ 497.944334][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 497.944350][ T37] audit: type=1326 audit(1780486502.199:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944391][ T37] audit: type=1326 audit(1780486502.199:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944429][ T37] audit: type=1326 audit(1780486502.199:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944469][ T37] audit: type=1326 audit(1780486502.199:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944510][ T37] audit: type=1326 audit(1780486502.199:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944549][ T37] audit: type=1326 audit(1780486502.199:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944588][ T37] audit: type=1326 audit(1780486502.199:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944626][ T37] audit: type=1326 audit(1780486502.199:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944664][ T37] audit: type=1326 audit(1780486502.199:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 497.944702][ T37] audit: type=1326 audit(1780486502.209:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14556 comm="syz.7.3381" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2dc0e1d9 code=0x7ffc0000 [ 498.280068][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3383'. [ 499.164275][T14577] gretap0: entered promiscuous mode [ 499.165230][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3389'. [ 499.165361][T14577] gretap0: left promiscuous mode [ 499.910273][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3395'. [ 501.052444][ T5608] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 501.203083][ T5608] usb 10-1: Using ep0 maxpacket: 8 [ 501.207463][ T5608] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.207484][ T5608] usb 10-1: config 0 has no interfaces? [ 501.209916][ T5608] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 501.209940][ T5608] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.209958][ T5608] usb 10-1: Product: syz [ 501.209971][ T5608] usb 10-1: Manufacturer: syz [ 501.209984][ T5608] usb 10-1: SerialNumber: syz [ 501.283424][ T5608] usb 10-1: config 0 descriptor?? [ 501.385274][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.385330][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.402258][T12751] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 501.517502][ T819] usb 10-1: USB disconnect, device number 9 [ 501.552296][T12751] usb 9-1: Using ep0 maxpacket: 16 [ 501.554683][T12751] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.554742][T12751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.554766][T12751] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.554786][T12751] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.554807][T12751] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.556405][T12751] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.556429][T12751] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.556447][T12751] usb 9-1: Manufacturer: syz [ 501.655518][T12751] usb 9-1: config 0 descriptor?? [ 501.942300][T12751] rc_core: IR keymap rc-hauppauge not found [ 501.942319][T12751] Registered IR keymap rc-empty [ 501.943063][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 501.970392][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 501.986917][T12751] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 502.006982][T12751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input34 [ 502.011500][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.032291][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.052751][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.072343][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.092413][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.112667][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.132405][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.152320][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.172961][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.195140][T12751] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.221093][T12751] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 502.221113][T12751] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 502.341396][T12751] usb 9-1: USB disconnect, device number 17 [ 503.692960][ T36] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 503.847355][ T36] usb 9-1: unable to get BOS descriptor or descriptor too short [ 503.855552][ T36] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.855575][ T36] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 503.855619][ T36] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 503.855664][ T36] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 503.855701][ T36] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 503.855725][ T36] usb 9-1: config 1 interface 1 has no altsetting 0 [ 503.924093][ T36] usb 9-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 503.924119][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.924137][ T36] usb 9-1: Product: syz [ 503.924150][ T36] usb 9-1: Manufacturer: syz [ 503.924162][ T36] usb 9-1: SerialNumber: syz [ 504.253756][ T36] usb 9-1: 2:0: failed to get current value for ch 0 (-71) [ 504.265120][ T36] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 504.265136][ T36] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 504.265144][ T36] usb 9-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 504.334924][ T36] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 504.354174][ T36] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 504.378750][ T36] usb 9-1: USB disconnect, device number 18 [ 505.500010][T14705] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 505.501803][T14705] team0: Port device batadv1 added [ 505.860125][T14717] sg_write: data in/out 286720/136 bytes for SCSI command 0x0-- guessing data in; [ 505.860125][T14717] program syz.7.3450 not setting count and/or reply_len properly [ 507.042297][ T819] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 507.192282][ T819] usb 6-1: Using ep0 maxpacket: 16 [ 507.218072][ T819] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.218095][ T819] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.241613][ T819] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.241641][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.241658][ T819] usb 6-1: Product: syz [ 507.241672][ T819] usb 6-1: Manufacturer: syz [ 507.241685][ T819] usb 6-1: SerialNumber: syz [ 507.296641][ T819] usb 6-1: 0:2 : does not exist [ 507.351210][T14739] 9p: Could not find request transport: !— [ 507.499246][ T819] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 507.595945][ T819] usb 6-1: USB disconnect, device number 23 [ 507.858689][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 508.122818][T14759] input: syz1 as /devices/virtual/input/input35 [ 509.248874][T14784] program syz.8.3478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.342284][ T5608] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 509.492827][ T5608] usb 8-1: Using ep0 maxpacket: 32 [ 509.494769][ T5608] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 509.494792][ T5608] usb 8-1: config 0 has no interface number 0 [ 509.494822][ T5608] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 167, changing to 11 [ 509.494836][ T5608] usb 8-1: config 0 interface 85 has no altsetting 0 [ 509.497635][ T5608] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 509.497658][ T5608] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.497675][ T5608] usb 8-1: Product: syz [ 509.497682][ T5608] usb 8-1: Manufacturer: syz [ 509.497688][ T5608] usb 8-1: SerialNumber: syz [ 509.516375][ T5608] usb 8-1: config 0 descriptor?? [ 510.197342][ T5608] appletouch 8-1:0.85: Geyser mode initialized. [ 510.204871][ T5608] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input36 [ 510.441248][ T5608] usb 8-1: USB disconnect, device number 21 [ 510.441324][ C0] appletouch 8-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 510.648702][ T5608] appletouch 8-1:0.85: input: appletouch disconnected [ 511.367296][T14819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.009046][ T37] kauditd_printk_skb: 4639 callbacks suppressed [ 512.009063][ T37] audit: type=1326 audit(1780486516.269:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.009105][ T37] audit: type=1326 audit(1780486516.269:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.082489][ T37] audit: type=1326 audit(1780486516.269:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.082610][ T37] audit: type=1326 audit(1780486516.349:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.083874][ T37] audit: type=1326 audit(1780486516.349:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.083917][ T37] audit: type=1326 audit(1780486516.349:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.083954][ T37] audit: type=1326 audit(1780486516.349:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.083993][ T37] audit: type=1326 audit(1780486516.349:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.084031][ T37] audit: type=1326 audit(1780486516.349:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.084070][ T37] audit: type=1326 audit(1780486516.349:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14836 comm="syz.7.3501" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ffc0000 [ 512.255714][T14844] netlink: 'syz.5.3502': attribute type 3 has an invalid length. [ 512.255732][T14844] netlink: 768 bytes leftover after parsing attributes in process `syz.5.3502'. [ 512.617741][T14850] Bluetooth: MGMT ver 1.23 [ 512.833919][T14854] netlink: 'syz.7.3508': attribute type 4 has an invalid length. [ 512.887659][T14856] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3509'. [ 513.141184][ T1181] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.144875][ T1181] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.144915][ T1181] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.144948][ T1181] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.729763][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3519'. [ 514.338948][T14894] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3527'. [ 514.991722][T14911] program syz.9.3536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.582595][ T36] kernel read not supported for file /swradio7 (pid: 36 comm: kworker/1:1) [ 515.901324][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3543'. [ 515.944674][T14926] ipvlan2: entered allmulticast mode [ 515.944695][T14926] syz_tun: entered allmulticast mode [ 516.020823][T14929] program syz.5.3542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.401299][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3550'. [ 516.723251][ T36] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 516.836233][ T819] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 516.982659][ T36] usb 8-1: Using ep0 maxpacket: 16 [ 517.010768][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.010798][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.010833][ T36] usb 8-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 517.010854][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.017130][ T819] usb 9-1: unable to get BOS descriptor or descriptor too short [ 517.079089][ T36] usb 8-1: config 0 descriptor?? [ 517.079866][ T819] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.079897][ T819] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 517.109326][ T819] usb 9-1: string descriptor 0 read error: -22 [ 517.109472][ T819] usb 9-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 517.109494][ T819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.664380][ T819] usb 9-1: USB disconnect, device number 19 [ 517.725870][ T5608] usb 8-1: USB disconnect, device number 22 [ 518.419927][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 518.419943][ T37] audit: type=1800 audit(1780486522.679:4900): pid=14962 uid=0 auid=0 ses=1 subj=_ op=collect_data cause=failed(directio) comm="syz.5.3559" name="bus" dev="tmpfs" ino=2971 res=0 errno=0 [ 519.506146][ T819] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 519.652374][ T819] usb 6-1: Using ep0 maxpacket: 32 [ 519.658584][ T819] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 519.658608][ T819] usb 6-1: config 0 has no interface number 0 [ 519.660988][ T819] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 519.661015][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.661031][ T819] usb 6-1: Product: syz [ 519.661044][ T819] usb 6-1: Manufacturer: syz [ 519.661057][ T819] usb 6-1: SerialNumber: syz [ 519.722593][ T819] usb 6-1: config 0 descriptor?? [ 519.738099][ T819] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 519.995806][ T819] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 520.026196][ T819] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 520.145169][T14983] m>e5: entered promiscuous mode [ 520.395049][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 520.412315][ T948] usb 6-1: USB disconnect, device number 24 [ 520.454393][ T948] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 520.509909][ T948] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 520.512068][ T948] quatech2 6-1:0.51: device disconnected [ 521.096921][T14993] netlink: 'syz.6.3572': attribute type 83 has an invalid length. [ 521.425348][ T948] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 521.575413][ T948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 521.575445][ T948] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.575484][ T948] usb 8-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 521.575505][ T948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.628177][ T948] usb 8-1: config 0 descriptor?? [ 522.074044][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074090][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074116][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074142][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074168][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074192][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074217][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074241][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074266][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074290][ T948] megaworld 0003:07B5:0312.0029: unknown main item tag 0x0 [ 522.074847][ T948] megaworld 0003:07B5:0312.0029: unexpected long global item [ 522.075584][ T948] megaworld 0003:07B5:0312.0029: parse failed [ 522.075650][ T948] megaworld 0003:07B5:0312.0029: probe with driver megaworld failed with error -22 [ 522.272434][ T948] usb 8-1: USB disconnect, device number 23 [ 523.682255][ T5614] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 523.833169][ T5614] usb 8-1: Using ep0 maxpacket: 32 [ 523.836988][ T5614] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 523.837014][ T5614] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.870228][ T5614] usb 8-1: config 0 descriptor?? [ 524.090930][ T5614] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 524.133362][ T5614] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.136263][ T5614] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 524.136314][ T5614] usb 8-1: media controller created [ 524.201064][ T5614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.305175][ T5614] az6027: usb out operation failed. (-71) [ 524.305576][ T5614] az6027: usb out operation failed. (-71) [ 524.305590][ T5614] stb0899_attach: Driver disabled by Kconfig [ 524.305599][ T5614] az6027: no front-end attached [ 524.305599][ T5614] [ 524.306334][ T5614] az6027: usb out operation failed. (-71) [ 524.306349][ T5614] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 524.336242][T15045] program syz.8.3597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 524.362071][ T5614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input37 [ 524.381457][ T5614] dvb-usb: schedule remote query interval to 400 msecs. [ 524.381477][ T5614] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 524.405122][ T5614] usb 8-1: USB disconnect, device number 24 [ 524.732942][ T5614] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 526.008472][T15080] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3613'. [ 526.969873][T15100] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 527.314987][T15105] program syz.7.3625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.338658][T15123] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3634'. [ 528.552336][ T948] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 528.733490][ T948] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 528.733545][ T948] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 528.733569][ T948] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 528.733600][ T948] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.733636][ T948] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.733656][ T948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.004620][ T948] usb 7-1: GET_CAPABILITIES returned 0 [ 529.004664][ T948] usbtmc 7-1:16.0: can't read capabilities [ 529.245938][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 529.247783][T15124] usbtmc 7-1:16.0: Unable to send data, error -71 [ 529.249221][ T948] usb 7-1: USB disconnect, device number 21 [ 529.864012][T12752] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 530.021786][T12752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.021818][T12752] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 530.021843][T12752] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 530.021880][T12752] usb 8-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 530.021901][T12752] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.048807][T12752] usb 8-1: config 0 descriptor?? [ 530.049838][T15146] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 530.513676][T12752] hid_parser_main: 45 callbacks suppressed [ 530.513698][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513727][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513752][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513778][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513802][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513827][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513852][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513876][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513901][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.513927][T12752] lenovo 0003:17EF:6062.002A: unknown main item tag 0x0 [ 530.547325][T12752] lenovo 0003:17EF:6062.002A: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.7-1/input0 [ 530.687070][ T36] usb 8-1: USB disconnect, device number 25 [ 530.719840][T15164] fido_id[15164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 530.992516][ T948] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 531.170941][ T948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 531.176717][ T948] usb 7-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 531.176800][ T948] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 531.176824][ T948] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 531.180865][ T948] usb 7-1: string descriptor 0 read error: -22 [ 531.180993][ T948] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 531.181013][ T948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.555511][T15175] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 531.840803][ T948] usb 7-1: failed to read current rate; disabling the check [ 532.188928][T15185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.225846][T15185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.230823][T15185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.322699][T15185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.325294][T15185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.483363][ T948] usb 7-1: USB disconnect, device number 22 [ 532.501446][ T37] audit: type=1326 audit(1780487048.761:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15191 comm="syz.8.3662" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9a5e1ce59 code=0x0 [ 533.647135][ T36] IPVS: starting estimator thread 0... [ 533.666175][T15210] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.732476][T15214] IPVS: using max 8 ests per chain, 19200 per kthread [ 534.434247][ T5618] Bluetooth: hci0: command tx timeout [ 535.345708][T15252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3680'. [ 535.510580][ T100] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.592302][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.592421][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.592585][T15184] bridge_slave_0: entered allmulticast mode [ 535.595783][T15184] bridge_slave_0: entered promiscuous mode [ 535.598934][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.599158][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.599320][T15184] bridge_slave_1: entered allmulticast mode [ 535.601914][T15184] bridge_slave_1: entered promiscuous mode [ 535.731978][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.741605][T15184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.938654][T15263] kvm: user requested TSC rate below hardware speed [ 536.030526][ T100] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.198786][T15184] team0: Port device team_slave_0 added [ 536.277871][T15184] team0: Port device team_slave_1 added [ 536.488427][ T100] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.515404][ T5618] Bluetooth: hci0: command tx timeout [ 536.925427][T15184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.925443][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.925466][T15184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.932108][T15184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.968340][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.968370][T15184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.358812][ T100] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.563015][T15184] hsr_slave_0: entered promiscuous mode [ 537.564314][T15184] hsr_slave_1: entered promiscuous mode [ 537.567655][T15184] debugfs: 'hsr0' already exists in 'hsr' [ 537.567677][T15184] Cannot create hsr debugfs directory [ 537.567864][T15290] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3696'. [ 537.751005][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3698'. [ 538.592403][ T5618] Bluetooth: hci0: command tx timeout [ 540.662430][ T5618] Bluetooth: hci0: command tx timeout [ 541.092717][T15342] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3716'. [ 541.969851][ T100] bridge_slave_1: left allmulticast mode [ 541.969883][ T100] bridge_slave_1: left promiscuous mode [ 541.970085][ T100] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.135781][ T100] bridge_slave_0: left allmulticast mode [ 542.135813][ T100] bridge_slave_0: left promiscuous mode [ 542.136047][ T100] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.332333][ T5702] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 542.502652][ T5702] usb 7-1: Using ep0 maxpacket: 8 [ 542.506515][ T5702] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.506540][ T5702] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.506561][ T5702] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.506582][ T5702] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.506621][ T5702] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.506641][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.716547][T15372] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3723'. [ 542.788412][ T5702] usb 7-1: GET_CAPABILITIES returned 0 [ 542.788440][ T5702] usbtmc 7-1:16.0: can't read capabilities [ 542.990923][ T5702] usb 7-1: USB disconnect, device number 23 [ 543.494063][ T100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.575515][ T100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.604138][ T100] bond0 (unregistering): Released all slaves [ 543.639035][ T5264] 8021q: adding VLAN 0 to HW filter on device eth21 [ 546.285349][ T5264] 8021q: adding VLAN 0 to HW filter on device eth22 [ 548.000504][ T100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.000530][ T100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.067388][ T100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.067414][ T100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.303580][ T100] hsr0: left allmulticast mode [ 548.304371][ T100] veth1_macvtap: left promiscuous mode [ 548.304464][ T100] veth0_macvtap: left promiscuous mode [ 548.304703][ T100] veth1_vlan: left promiscuous mode [ 548.304863][ T100] veth0_vlan: left promiscuous mode [ 549.037623][T15462] input: syz1 as /devices/virtual/input/input39 [ 549.037656][T15462] input: failed to attach handler leds to device input39, error: -6 [ 549.304881][ T100] team0 (unregistering): Port device batadv1 removed [ 550.562984][ T100] team0 (unregistering): Port device team_slave_1 removed [ 550.602914][ T100] team0 (unregistering): Port device team_slave_0 removed [ 551.306587][T15184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.351136][T15184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 551.369776][T15184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.423731][T15184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 551.425099][T15184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.457536][T15184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 551.715050][T15184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.758971][T15184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 551.933376][ T5702] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 551.941651][T15184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.982346][T15184] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.001384][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.001592][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.149299][ T5702] usb 7-1: Using ep0 maxpacket: 32 [ 552.151774][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.151803][ T5702] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.151837][ T5702] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 552.151857][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.204237][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3759'. [ 552.225985][ T5702] usb 7-1: config 0 descriptor?? [ 552.303146][ T1195] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.303277][ T1195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.974208][ T5702] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 553.174215][ T5702] usb 7-1: USB disconnect, device number 24 [ 553.381430][T15536] fido_id[15536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 553.651024][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 554.017228][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3767'. [ 554.028965][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3767'. [ 554.198531][T15184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.390249][T15184] veth0_vlan: entered promiscuous mode [ 554.410476][T15184] veth1_vlan: entered promiscuous mode [ 554.497746][T15184] veth0_macvtap: entered promiscuous mode [ 554.527681][T15184] veth1_macvtap: entered promiscuous mode [ 554.730585][T15184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.755567][T15184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.799791][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.813735][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.833694][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.834678][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.527725][ T5264] 8021q: adding VLAN 0 to HW filter on device eth23 [ 555.774092][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.774111][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.043462][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.043481][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.742073][T15687] netlink: 212336 bytes leftover after parsing attributes in process `syz.7.3801'. [ 559.009641][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3803'. [ 560.002545][ T37] audit: type=1326 audit(1780487076.271:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7ffc0000 [ 560.002676][ T37] audit: type=1326 audit(1780487076.271:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7ffc0000 [ 560.009652][ T37] audit: type=1326 audit(1780487076.271:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7ffc0000 [ 560.009698][ T37] audit: type=1326 audit(1780487076.271:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7ffc0000 [ 560.010285][ T37] audit: type=1326 audit(1780487076.271:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1dcdad68e code=0x7ffc0000 [ 560.012059][ T37] audit: type=1326 audit(1780487076.271:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd1dcdee157 code=0x7ffc0000 [ 560.073611][ T37] audit: type=1326 audit(1780487076.341:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7ffc0000 [ 560.073658][ T37] audit: type=1326 audit(1780487076.341:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1dcdecbc2 code=0x7ffc0000 [ 560.073696][ T37] audit: type=1326 audit(1780487076.341:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd1dcdecc57 code=0x7ffc0000 [ 560.073733][ T37] audit: type=1326 audit(1780487076.341:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15725 comm="syz.5.3811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd1dcda9b51 code=0x7ffc0000 [ 560.737286][T15746] Bluetooth: MGMT ver 1.23 [ 561.106663][T15757] loop2: detected capacity change from 0 to 7 [ 561.209889][T15757] Dev loop2: unable to read RDB block 7 [ 561.209923][T15757] loop2: AHDI p1 p2 p3 p4 [ 561.209948][T15757] loop2: partition table partially beyond EOD, truncated [ 561.215524][T15757] loop2: p1 start 1601398130 is beyond EOD, truncated [ 561.215547][T15757] loop2: p2 start 1702059890 is beyond EOD, truncated [ 561.215562][T15757] loop2: p3 start 8 is beyond EOD, truncated [ 561.636152][T15767] netlink: 'syz.6.3821': attribute type 2 has an invalid length. [ 561.767624][T15772] netlink: 'syz.3.3824': attribute type 11 has an invalid length. [ 562.311527][T15789] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 562.321388][T15789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.808437][T15789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.847876][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.847928][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.582613][T15185] Bluetooth: hci5: command 0x1003 tx timeout [ 564.626908][ T5618] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 565.503285][ T37] kauditd_printk_skb: 47 callbacks suppressed [ 565.503301][ T37] audit: type=1326 audit(1780487081.761:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15880 comm="syz.3.3850" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f400e64ce59 code=0x0 [ 566.102502][ T5703] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 566.266480][ T5703] usb 8-1: Using ep0 maxpacket: 8 [ 566.271946][ T5703] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.272000][ T5703] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 566.272020][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.370861][ T5703] usb 8-1: config 0 descriptor?? [ 566.409139][ T5703] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 566.409159][ T5703] uvcvideo 8-1:0.0: No valid video chain found. [ 566.591749][ T948] usb 8-1: USB disconnect, device number 26 [ 566.892363][ T5608] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 567.044355][ T5608] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 567.044382][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.071052][ T5608] usb 4-1: config 0 descriptor?? [ 567.292377][ T5608] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 567.689558][ T5608] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 567.689583][ T5608] [drm] Initialized udl on minor 2 [ 567.716977][ T5608] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 567.717785][ T5608] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 567.791235][ T5614] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 567.826414][ T5608] usb 4-1: USB disconnect, device number 6 [ 567.871398][T15185] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 567.890351][T15185] Bluetooth: hci4: Injecting HCI hardware error event [ 567.896714][ T5618] Bluetooth: hci4: hardware error 0x00 [ 568.252432][ T36] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 568.404944][T15937] netlink: 45 bytes leftover after parsing attributes in process `syz.8.3866'. [ 568.423769][ T36] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.423830][ T36] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.423855][ T36] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 568.423866][ T36] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.425908][ T36] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.425933][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.425948][ T36] usb 7-1: Product: syz [ 568.425955][ T36] usb 7-1: Manufacturer: syz [ 568.425962][ T36] usb 7-1: SerialNumber: syz [ 568.540397][ T36] cdc_mbim 7-1:1.0: skipping garbage [ 568.776813][T15943] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 568.898910][T15959] loop9: detected capacity change from 0 to 4096 [ 569.391827][T15943] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 569.593252][ T36] cdc_mbim 7-1:1.0: bind() failure [ 569.621057][ T36] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 569.630962][ T36] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 569.644896][ T36] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 569.667975][ T36] usb 7-1: USB disconnect, device number 25 [ 569.946798][ T5618] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 570.793350][T15984] netlink: 'syz.6.3883': attribute type 12 has an invalid length. [ 571.433646][T16006] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.3891'. [ 571.594744][T16010] binder: 16009:16010 ioctl c018620b 0 returned -14 [ 571.818016][T16014] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 572.544448][T16035] netlink: 'syz.7.3903': attribute type 10 has an invalid length. [ 572.544468][T16035] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.3903'. [ 573.622878][T16068] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.3917'. [ 574.990969][ T5608] IPVS: starting estimator thread 0... [ 575.011709][T16094] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 575.072337][T16097] IPVS: using max 15 ests per chain, 36000 per kthread [ 575.785509][ T37] audit: type=1800 audit(1780487092.051:4960): pid=16105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.3930" name="bus" dev="tmpfs" ino=2770 res=0 errno=0 [ 576.195863][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3935'. [ 576.345063][T16121] Invalid argument reading file caps for ./file0 [ 577.264869][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 577.403518][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3948'. [ 577.403541][T16154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3948'. [ 577.442252][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 577.445905][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.445932][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 577.445968][ T36] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 577.445988][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.452328][T15940] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 577.510804][ T36] usb 4-1: config 0 descriptor?? [ 577.604583][T15940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.604613][T15940] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.604657][T15940] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 577.604678][T15940] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.629068][T15940] usb 9-1: config 0 descriptor?? [ 577.995688][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 577.995797][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 578.058972][ T36] usb 4-1: USB disconnect, device number 7 [ 578.127182][T15940] hid_parser_main: 31 callbacks suppressed [ 578.127204][T15940] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 578.381666][T15940] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 578.432967][T15940] cp2112 0003:10C4:EA90.002C: error requesting version [ 578.477942][T15940] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -71 [ 578.609285][T15940] usb 9-1: USB disconnect, device number 20 [ 578.672975][T16175] fido_id[16175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 579.072441][ T36] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 579.261470][ T36] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 579.261505][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.261522][ T36] usb 7-1: Product: syz [ 579.261534][ T36] usb 7-1: Manufacturer: syz [ 579.261546][ T36] usb 7-1: SerialNumber: syz [ 579.341889][ T36] usb 7-1: config 0 descriptor?? [ 579.642992][T12751] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 579.855370][T12751] usb 6-1: Using ep0 maxpacket: 8 [ 579.858713][T12751] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 579.858742][T12751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.858764][T12751] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.858785][T12751] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.858824][T12751] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.858844][T12751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.126191][T12751] usb 6-1: GET_CAPABILITIES returned 0 [ 580.126238][T12751] usbtmc 6-1:16.0: can't read capabilities [ 580.218632][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 580.360216][ C1] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 580.400804][ T36] usb 7-1: Firmware version (0.0) predates our first public release. [ 580.400828][ T36] usb 7-1: Please update to version 0.2 or newer [ 580.444757][ T5703] usb 6-1: USB disconnect, device number 25 [ 580.466543][T16219] netlink: 'syz.8.3964': attribute type 1 has an invalid length. [ 580.702911][ T36] usb 7-1: USB disconnect, device number 26 [ 583.052373][T15940] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 583.204746][T15940] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 583.204775][T15940] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.204812][T15940] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 583.204823][T15940] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.440211][T15940] usb 8-1: usb_control_msg returned -32 [ 583.440256][T15940] usbtmc 8-1:16.0: can't read capabilities [ 583.462873][T12751] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 583.616137][T12751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.616168][T12751] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.616200][T12751] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 583.616213][T12751] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.619341][T12751] usb 7-1: config 0 descriptor?? [ 583.817436][T16300] netlink: 'syz.8.3993': attribute type 2 has an invalid length. [ 583.817456][T16300] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3993'. [ 584.057701][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057737][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057762][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057787][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057812][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057836][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.057861][T12751] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 584.098169][T12751] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 584.252859][T12751] cp2112 0003:10C4:EA90.002D: Part Number: 0x00 Device Version: 0x00 [ 584.661656][T12751] cp2112 0003:10C4:EA90.002D: error setting SMBus config [ 584.704213][T12751] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -71 [ 584.721984][T12751] usb 7-1: USB disconnect, device number 27 [ 585.182388][ T36] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 585.374026][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.374056][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.374099][ T36] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 585.374110][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.379478][ T36] usb 4-1: config 0 descriptor?? [ 585.797119][ T5614] usb 8-1: USB disconnect, device number 27 [ 585.825577][ T36] hid-thrustmaster 0003:044F:B65D.002E: unknown main item tag 0x0 [ 585.825612][ T36] hid-thrustmaster 0003:044F:B65D.002E: unknown main item tag 0x0 [ 585.825638][ T36] hid-thrustmaster 0003:044F:B65D.002E: unknown main item tag 0x0 [ 585.865982][ T36] hid-thrustmaster 0003:044F:B65D.002E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 585.866259][ T36] hid-thrustmaster 0003:044F:B65D.002E: Wrong number of endpoints? [ 586.031928][ C1] hid-thrustmaster 0003:044F:B65D.002E: Wheel with model id 0x2 is a Thrustmaster T500RS [ 586.234962][ C1] hid-thrustmaster 0003:044F:B65D.002E: Success?! The wheel should have been initialized! [ 586.280474][ T5614] usb 4-1: USB disconnect, device number 8 [ 586.878428][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4011'. [ 587.056315][T16351] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 589.428002][T16403] sctp: [Deprecated]: syz.7.4038 (pid 16403) Use of int in maxseg socket option. [ 589.428002][T16403] Use struct sctp_assoc_value instead [ 590.347203][ T5703] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 590.374413][T15185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 590.445196][T15185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 590.447794][T15185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 590.477935][T15185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 590.497529][T15185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 590.544100][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 590.567632][ T5703] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92 [ 590.567658][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.709930][ T5703] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 590.896210][ T3411] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.896243][ T3411] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.595350][ T3411] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.595386][ T3411] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.726733][ T5703] gspca_nw80x: reg_w err -71 [ 591.726821][ T5703] nw80x 4-1:16.0: probe with driver nw80x failed with error -71 [ 591.744048][ T5703] usb 4-1: USB disconnect, device number 9 [ 591.959991][ T3411] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.960012][ T3411] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.407933][ T3411] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.407965][ T3411] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.737484][T16457] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4057'. [ 592.742491][ T5618] Bluetooth: hci3: command tx timeout [ 593.292363][ T5614] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 593.445291][ T5614] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.445337][ T5614] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 593.447496][ T5614] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.447520][ T5614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.447537][ T5614] usb 6-1: Product: syz [ 593.447550][ T5614] usb 6-1: Manufacturer: syz [ 593.447561][ T5614] usb 6-1: SerialNumber: syz [ 593.519772][ T5614] cdc_mbim 6-1:1.0: skipping garbage [ 593.746950][T16461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 594.039181][T16419] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.039301][T16419] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.039502][T16419] bridge_slave_0: entered allmulticast mode [ 594.063877][T16419] bridge_slave_0: entered promiscuous mode [ 594.072094][T16419] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.073859][T16419] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.074356][T16419] bridge_slave_1: entered allmulticast mode [ 594.084503][T16419] bridge_slave_1: entered promiscuous mode [ 594.221892][T16419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.247496][T16419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.358281][T16461] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 594.358869][ T5614] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 594.365386][ T5614] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 594.628518][ T5614] wwan wwan0: port wwan0mbim0 attached [ 594.652848][ T3411] bridge_slave_1: left allmulticast mode [ 594.652881][ T3411] bridge_slave_1: left promiscuous mode [ 594.653671][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.828112][ T5618] Bluetooth: hci3: command tx timeout [ 594.829844][ T3411] bridge_slave_0: left allmulticast mode [ 594.829864][ T3411] bridge_slave_0: left promiscuous mode [ 594.859343][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.098702][ T37] audit: type=1326 audit(1780487111.361:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16489 comm="syz.7.4069" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d2dc6ce59 code=0x0 [ 596.281161][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4076'. [ 596.354457][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.433392][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.478723][ T3411] bond0 (unregistering): Released all slaves [ 596.770224][T16488] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.4068'. [ 596.770220][ T5614] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, be:40:9d:2a:06:2d [ 596.905626][ T5614] usb 6-1: USB disconnect, device number 26 [ 596.908045][ T5614] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 596.932635][ T5618] Bluetooth: hci3: command tx timeout [ 597.077162][T16508] team0: Port device team_slave_0 removed [ 597.517312][T16419] team0: Port device team_slave_0 added [ 597.521084][T16419] team0: Port device team_slave_1 added [ 597.621553][T16419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.621568][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.621590][T16419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.694441][ T5614] wwan wwan0: port wwan0mbim0 disconnected [ 597.788312][T16419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.788323][T16419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 597.788337][T16419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.221269][T16419] hsr_slave_0: entered promiscuous mode [ 598.241159][T16419] hsr_slave_1: entered promiscuous mode [ 598.245281][T16419] debugfs: 'hsr0' already exists in 'hsr' [ 598.245303][T16419] Cannot create hsr debugfs directory [ 598.638954][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4083'. [ 598.990570][ T5618] Bluetooth: hci3: command tx timeout [ 599.417449][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 600.160663][T16556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 601.034315][T12751] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 601.200211][T16566] macsec1: entered allmulticast mode [ 601.200234][T16566] veth1_macvtap: entered allmulticast mode [ 601.217092][T12751] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 601.217116][T12751] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 601.217133][T12751] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 601.217150][T12751] usb 8-1: config 220 has no interface number 2 [ 601.217227][T12751] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 601.217251][T12751] usb 8-1: config 220 interface 0 has no altsetting 0 [ 601.217267][T12751] usb 8-1: config 220 interface 76 has no altsetting 0 [ 601.217282][T12751] usb 8-1: config 220 interface 1 has no altsetting 0 [ 601.232645][T12751] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 601.232672][T12751] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.232689][T12751] usb 8-1: Product: syz [ 601.232701][T12751] usb 8-1: Manufacturer: syz [ 601.232713][T12751] usb 8-1: SerialNumber: syz [ 601.498428][T12751] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 601.498459][T12751] uvcvideo 8-1:220.0: No valid video chain found. [ 601.498534][T12751] usb 8-1: selecting invalid altsetting 0 [ 601.614908][T12751] usb 8-1: selecting invalid altsetting 0 [ 601.614959][T12751] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 601.652931][T12751] usb 8-1: USB disconnect, device number 28 [ 601.797588][ T3411] hsr_slave_0: left promiscuous mode [ 601.839976][ T3411] hsr_slave_1: left promiscuous mode [ 601.840630][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.840645][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.888435][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.888460][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.954792][ T3411] batman_adv: batadv0: Removing interface: vlan2 [ 601.972402][T11471] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 602.136696][T11471] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.136728][T11471] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.136750][T11471] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.136789][T11471] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.136810][T11471] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.158317][ T3411] veth1_macvtap: left promiscuous mode [ 602.158429][ T3411] veth0_macvtap: left promiscuous mode [ 602.158653][ T3411] veth1_vlan: left promiscuous mode [ 602.158810][ T3411] veth0_vlan: left promiscuous mode [ 602.226722][T11471] usb 9-1: config 0 descriptor?? [ 602.657691][T11471] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd [ 602.737563][T11471] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 602.938100][T15940] usb 9-1: USB disconnect, device number 21 [ 602.975119][T16594] fido_id[16594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 603.655309][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 603.757479][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 604.458926][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 605.012108][ T37] audit: type=1326 audit(1780487121.271:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012308][ T37] audit: type=1326 audit(1780487121.271:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012349][ T37] audit: type=1326 audit(1780487121.271:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012390][ T37] audit: type=1326 audit(1780487121.271:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012428][ T37] audit: type=1326 audit(1780487121.271:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012465][ T37] audit: type=1326 audit(1780487121.271:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012501][ T37] audit: type=1326 audit(1780487121.271:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012539][ T37] audit: type=1326 audit(1780487121.271:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.012576][ T37] audit: type=1326 audit(1780487121.271:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.021909][ T37] audit: type=1326 audit(1780487121.281:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16618 comm="syz.7.4107" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2dc6ce59 code=0x7ff00000 [ 605.595103][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 607.150323][ T3411] IPVS: stop unused estimator thread 0... [ 607.665934][ T5264] 8021q: adding VLAN 0 to HW filter on device eth24 [ 607.687607][T16419] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 607.788703][T16419] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.811812][T16419] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 607.877938][T16419] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.887571][T16419] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.009236][T16419] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.015840][T16419] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.065391][T16419] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.115069][T16687] netlink: 'syz.5.4123': attribute type 10 has an invalid length. [ 608.153505][T16686] bridge_slave_0: left allmulticast mode [ 608.153534][T16686] bridge_slave_0: left promiscuous mode [ 608.239926][T16686] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.443198][T16686] bridge_slave_1: left allmulticast mode [ 608.443228][T16686] bridge_slave_1: left promiscuous mode [ 608.445000][T16686] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.673514][T16686] bond0: (slave bond_slave_0): Releasing backup interface [ 608.758229][T16686] bond0: (slave bond_slave_1): Releasing backup interface [ 608.790257][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4127'. [ 608.858065][T16686] team0: Port device team_slave_0 removed [ 608.898359][T16686] team0: Port device team_slave_1 removed [ 608.901847][T16686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.901872][T16686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.950315][T16686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.950339][T16686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.998679][T16686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.135472][T16687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.138258][T16687] team0: Port device bond0 added [ 609.374634][T16720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 609.588771][T16419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.607656][T16419] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.631574][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.631648][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.679736][ T1034] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.679867][ T1034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.532234][ T5703] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 610.682253][ T5703] usb 8-1: Using ep0 maxpacket: 16 [ 610.684394][ T5703] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.684480][ T5703] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.689160][ T5703] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.689186][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.689204][ T5703] usb 8-1: Product: syz [ 610.689217][ T5703] usb 8-1: Manufacturer: syz [ 610.689229][ T5703] usb 8-1: SerialNumber: syz [ 610.764265][ T5703] usb 8-1: 0:2 : does not exist [ 611.010584][ T5703] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 611.073638][ T5703] usb 8-1: USB disconnect, device number 29 [ 611.263202][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.285294][T16768] syzkaller1: entered promiscuous mode [ 611.285317][T16768] syzkaller1: entered allmulticast mode [ 611.711527][T16419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.830962][T16419] veth0_vlan: entered promiscuous mode [ 611.888941][T16419] veth1_vlan: entered promiscuous mode [ 611.934994][T16419] veth0_macvtap: entered promiscuous mode [ 611.940699][T16419] veth1_macvtap: entered promiscuous mode [ 612.019450][T16419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.051138][T16419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.227128][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.227393][ T2184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.228499][ T1444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.231068][ T1444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.414561][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4143'. [ 612.578548][T16798] team1: entered promiscuous mode [ 612.593809][T16798] team1: entered allmulticast mode [ 612.594679][T16798] 8021q: adding VLAN 0 to HW filter on device team1 [ 613.948908][ T2184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.948928][ T2184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.089590][ T37] kauditd_printk_skb: 129 callbacks suppressed [ 614.089606][ T37] audit: type=1326 audit(1780487130.351:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.089730][ T37] audit: type=1326 audit(1780487130.351:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.108196][ T37] audit: type=1326 audit(1780487130.371:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130748][ T37] audit: type=1326 audit(1780487130.391:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130793][ T37] audit: type=1326 audit(1780487130.391:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130831][ T37] audit: type=1326 audit(1780487130.391:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130866][ T37] audit: type=1326 audit(1780487130.391:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130904][ T37] audit: type=1326 audit(1780487130.391:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130940][ T37] audit: type=1326 audit(1780487130.391:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.130974][ T37] audit: type=1326 audit(1780487130.391:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16820 comm="syz.3.4148" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f400e64ce59 code=0x7ffc0000 [ 614.252931][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.252949][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.581164][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4167'. [ 618.922321][ T5614] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 619.074291][ T5614] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.074315][ T5614] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.075639][ T5614] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.075662][ T5614] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.075680][ T5614] usb 9-1: SerialNumber: syz [ 619.237345][T16937] Invalid argument reading file caps for ./file0 [ 619.351982][ T5614] usb 9-1: 0:2 : does not exist [ 619.436784][ T5614] usb 9-1: USB disconnect, device number 22 [ 619.549078][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 619.549094][ T37] audit: type=1326 audit(1780487135.811:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16922 comm="syz.5.4176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1dcdece59 code=0x7fc00000 [ 620.334919][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.936875][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4187'. [ 620.936903][T16976] block nbd3: Unsupported socket: should be TCP or UNIX. [ 621.435745][T16986] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4189'. [ 621.921434][T17004] input: syz0 as /devices/virtual/input/input42 [ 622.049222][T17010] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4196'. [ 622.276944][T17014] Invalid argument reading file caps for ./file0 [ 622.574818][T17028] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4201'. [ 623.351507][T17048] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4206'. [ 624.277471][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.277510][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.651482][ T5723] hid_parser_main: 4 callbacks suppressed [ 624.651495][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651514][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651528][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651543][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651557][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651571][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651586][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651601][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.651615][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.652240][ T5723] hid-generic 00A0:0006:0003.0030: unknown main item tag 0x0 [ 624.863268][ T5723] hid-generic 00A0:0006:0003.0030: hidraw0: HID v0.05 Device [syz1] on syz0 [ 624.893657][T11471] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 625.073799][T11471] usb 4-1: Using ep0 maxpacket: 16 [ 625.075935][T11471] usb 4-1: config 0 has no interfaces? [ 625.078801][T11471] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 625.078825][T11471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.078843][T11471] usb 4-1: Product: syz [ 625.078855][T11471] usb 4-1: Manufacturer: syz [ 625.078867][T11471] usb 4-1: SerialNumber: syz [ 625.088097][T11471] usb 4-1: config 0 descriptor?? [ 625.264285][T17095] tipc: Started in network mode [ 625.264386][T17095] tipc: Node identity ac14142f, cluster identity 4711 [ 625.264661][T17095] tipc: New replicast peer: 0.0.0.0 [ 625.265295][T17095] tipc: Enabled bearer , priority 10 [ 625.265888][T17095] tipc: New replicast peer: 224.0.0.1 [ 625.279267][T17090] serio: Serial port ptm0 [ 625.328038][T11471] usb 4-1: USB disconnect, device number 10 [ 625.489065][T17097] ALSA: mixer_oss: invalid OSS volume '' [ 625.650695][T17101] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 626.311502][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4235'. [ 626.382268][ T5608] tipc: Node number set to 2886997039 [ 627.059937][T17140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.322270][T11438] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 627.482258][T11438] usb 6-1: Using ep0 maxpacket: 8 [ 627.484616][T11438] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 627.486825][T11438] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 627.486850][T11438] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 627.486867][T11438] usb 6-1: Product: syz [ 627.486880][T11438] usb 6-1: Manufacturer: syz [ 627.486892][T11438] usb 6-1: SerialNumber: syz [ 627.698381][T11438] usb 6-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 627.698396][T11438] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 627.698404][T11438] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 627.901624][T11438] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 627.901700][T11438] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 627.945285][T11438] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 627.961307][T11438] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 627.995831][T11438] usb 6-1: USB disconnect, device number 27 [ 628.047031][T11438] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 628.126535][T11438] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 628.128491][T11438] visor 6-1:1.0: device disconnected [ 630.086807][T17210] overlay: filesystem on ./file0 is read-only [ 631.902254][T11438] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 632.099007][T11438] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 632.099035][T11438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.099053][T11438] usb 4-1: Product: syz [ 632.099066][T11438] usb 4-1: Manufacturer: syz [ 632.099079][T11438] usb 4-1: SerialNumber: syz [ 632.140056][T11438] usb 4-1: config 0 descriptor?? [ 632.225666][T17267] batadv_slave_1: entered promiscuous mode [ 632.236549][T17266] batadv_slave_1: left promiscuous mode [ 632.566779][T11438] usb 4-1: Firmware: major: 0, minor: 49, hardware type: UNKNOWN (56) [ 632.767289][T11438] usb 4-1: Firmware: build [ 632.967962][T11438] usb 4-1: failed to fetch extended address, random address set [ 632.967991][T11438] usb 4-1: atusb_probe: initialization failed, error = -524 [ 632.968226][T11438] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 633.016379][T11438] usb 4-1: USB disconnect, device number 11 [ 633.194717][T17287] netlink: 'syz.5.4298': attribute type 38 has an invalid length. [ 633.194736][T17287] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4298'. [ 633.627995][T17294] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4301'. [ 633.919545][T17305] binder: 17304:17305 ioctl 4018620d 0 returned -22 [ 634.072276][T12751] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 634.230718][T12751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 634.230757][T12751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.230777][T12751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.230813][T12751] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.230833][T12751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.247634][T12751] usb 4-1: config 0 descriptor?? [ 634.824721][T12751] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 634.838942][T17326] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 634.839012][T17326] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 636.110379][ C1] plantronics 0003:047F:FFFF.0031: usb_submit_urb(ctrl) failed: -1 [ 637.566948][T11471] usb 4-1: USB disconnect, device number 12 [ 638.282245][T11471] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 638.444471][T11471] usb 9-1: Using ep0 maxpacket: 16 [ 638.449547][T11471] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 638.451844][T11471] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 638.451870][T11471] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.451886][T11471] usb 9-1: Product: syz [ 638.451898][T11471] usb 9-1: Manufacturer: syz [ 638.451911][T11471] usb 9-1: SerialNumber: syz [ 638.491668][T11471] usb 9-1: config 0 descriptor?? [ 638.517908][T11471] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 638.526631][T11471] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 639.133627][T11471] em28xx 9-1:0.0: chip ID is em2765 [ 639.685532][T11471] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 639.685647][T11471] em28xx 9-1:0.0: board has no eeprom [ 639.752504][T11471] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 639.752626][T11471] em28xx 9-1:0.0: dvb set to bulk mode. [ 639.753937][ T5702] em28xx 9-1:0.0: Binding DVB extension [ 639.795010][T11471] usb 9-1: USB disconnect, device number 23 [ 639.858629][T11471] em28xx 9-1:0.0: Disconnecting em28xx [ 640.006754][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4350'. [ 640.006787][T17453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4350'. [ 640.319955][ T5702] em28xx 9-1:0.0: Registering input extension [ 640.320942][T11471] em28xx 9-1:0.0: Closing input extension [ 640.843505][T11471] em28xx 9-1:0.0: Freeing device [ 641.606722][T17484] mac80211_hwsim hwsim13 ..ãc¤±: renamed from wlan1 (while UP) [ 641.795190][T17490] netem: change failed [ 643.692316][T12751] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 643.842322][T12751] usb 1-1: Using ep0 maxpacket: 8 [ 643.846077][T12751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 643.846121][T12751] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 643.846142][T12751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.902375][T12751] usb 1-1: config 0 descriptor?? [ 644.165971][T12751] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 644.299615][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4386'. [ 644.299635][T17537] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4386'. [ 644.299654][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4386'. [ 644.370808][T12751] usb 1-1: USB disconnect, device number 10 [ 645.212100][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4394'. [ 645.212680][T17558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4394'. [ 645.414439][T17563] input: syz0 as /devices/virtual/input/input44 [ 646.612552][T12751] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 646.767815][T12751] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 646.767843][T12751] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 646.767866][T12751] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 646.767884][T12751] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 646.770889][T12751] usb 8-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 646.770913][T12751] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.770930][T12751] usb 8-1: Product: syz [ 646.770943][T12751] usb 8-1: Manufacturer: syz [ 646.770955][T12751] usb 8-1: SerialNumber: syz [ 646.876611][T12751] usb 8-1: config 0 descriptor?? [ 646.880624][T12751] ums-isd200 8-1:0.0: USB Mass Storage device detected [ 647.154221][T12751] scsi host1: usb-storage 8-1:0.0 [ 647.353957][ T5614] usb 8-1: USB disconnect, device number 30 [ 652.032251][T11438] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 652.185955][T11438] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 652.187005][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.187054][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.187078][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.188062][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.188109][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.188134][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.189126][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.189173][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.189197][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.190909][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.190957][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.190981][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.192077][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.194871][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.194898][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.257628][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.257680][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.257704][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.259702][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.259748][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.259772][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.264568][T11438] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 652.264616][T11438] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 652.264640][T11438] usb 4-1: config 0 interface 0 has no altsetting 0 [ 652.267471][T11438] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 652.267495][T11438] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 652.267514][T11438] usb 4-1: Product: syz [ 652.267526][T11438] usb 4-1: Manufacturer: syz [ 652.267538][T11438] usb 4-1: SerialNumber: syz [ 652.273543][T11438] usb 4-1: config 0 descriptor?? [ 652.361187][T11438] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 652.649303][T12751] usb 4-1: USB disconnect, device number 13 [ 652.702294][ T948] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 652.790234][T12751] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 652.864662][ T948] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 652.864695][ T948] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 652.864707][ T948] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.864728][ T948] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 652.864740][ T948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.094237][ T948] usb 1-1: usb_control_msg returned -32 [ 653.094282][ T948] usbtmc 1-1:16.0: can't read capabilities [ 653.490259][T17690] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 653.697114][T11471] usb 1-1: USB disconnect, device number 11 [ 653.723624][T17697] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4452'. [ 653.723648][T17697] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4452'. [ 654.702533][T11471] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 654.732422][ T36] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 654.854159][T11471] usb 8-1: too many configurations: 53, using maximum allowed: 8 [ 654.881998][T11471] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 654.882025][T11471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.882043][T11471] usb 8-1: Product: syz [ 654.882056][T11471] usb 8-1: Manufacturer: syz [ 654.882068][T11471] usb 8-1: SerialNumber: syz [ 654.918338][ T36] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.918357][ T36] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.918377][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.918388][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.963065][T17720] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 655.026491][ T36] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.278218][T11471] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 655.278278][T11471] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 655.278377][T11471] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 655.372455][T11471] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 655.462226][T11471] usb 8-1: USB disconnect, device number 31 [ 655.540779][ T36] usb 1-1: USB disconnect, device number 12 [ 656.365801][ T5618] Bluetooth: hci3: command tx timeout [ 656.582495][ T5614] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 656.732549][ T5614] usb 6-1: Using ep0 maxpacket: 16 [ 656.736209][ T5614] usb 6-1: config 0 has no interfaces? [ 656.737347][ T5614] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 656.737371][ T5614] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 656.737389][ T5614] usb 6-1: Manufacturer: syz [ 656.740216][ T5614] usb 6-1: config 0 descriptor?? [ 656.951513][ T5614] usb 6-1: USB disconnect, device number 28 [ 657.063396][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 658.226848][T15185] block nbd3: Receive control failed (result -107) [ 658.318525][T17791] [ 658.318533][T17791] ====================================================== [ 658.318537][T17791] WARNING: possible circular locking dependency detected [ 658.318557][T17791] syzkaller #0 Tainted: G L [ 658.318564][T17791] ------------------------------------------------------ [ 658.318567][T17791] syz.3.4492/17791 is trying to acquire lock: [ 658.318573][T17791] ffffffff8e0ee220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.318607][T17791] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 658.318607][T17791] but task is already holding lock: [ 658.318610][T17791] ffffffff8f6f3c78 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 658.318633][T17791] [ 658.318633][T17791] which lock already depends on the new lock. [ 658.318633][T17791] [ 658.318636][T17791] [ 658.318636][T17791] the existing dependency chain (in reverse order) is: [ 658.318641][T17791] [ 658.318641][T17791] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 658.318654][T17791] mutex_lock_nested+0x5a/0x1d0 [ 658.318665][T17791] kobject_uevent_net_broadcast+0x281/0x560 [ 658.318679][T17791] kobject_uevent_env+0x55f/0x9e0 [ 658.318695][T17791] device_add+0x557/0xbb0 [ 658.318717][T17791] device_create+0x269/0x300 [ 658.318732][T17791] msr_device_create+0x33/0x50 [ 658.318754][T17791] cpuhp_invoke_callback+0x445/0x860 [ 658.318773][T17791] cpuhp_thread_fun+0x36b/0x780 [ 658.318787][T17791] smpboot_thread_fn+0x541/0xa50 [ 658.318796][T17791] kthread+0x388/0x470 [ 658.318806][T17791] ret_from_fork+0x514/0xb70 [ 658.318816][T17791] ret_from_fork_asm+0x1a/0x30 [ 658.318825][T17791] [ 658.318825][T17791] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 658.318838][T17791] cpuhp_thread_fun+0x127/0x780 [ 658.318847][T17791] smpboot_thread_fn+0x541/0xa50 [ 658.318856][T17791] kthread+0x388/0x470 [ 658.318866][T17791] ret_from_fork+0x514/0xb70 [ 658.318874][T17791] ret_from_fork_asm+0x1a/0x30 [ 658.318883][T17791] [ 658.318883][T17791] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 658.318895][T17791] cpus_read_lock+0x42/0x160 [ 658.318902][T17791] static_key_disable+0x12/0x20 [ 658.318913][T17791] __inet_hash_connect+0x2623/0x2630 [ 658.318932][T17791] tcp_v4_connect+0xd5f/0x19b0 [ 658.318940][T17791] __inet_stream_connect+0x25a/0xdd0 [ 658.318952][T17791] inet_stream_connect+0x66/0xa0 [ 658.318963][T17791] __sys_connect+0x315/0x450 [ 658.318981][T17791] __x64_sys_connect+0x7a/0x90 [ 658.319000][T17791] do_syscall_64+0x174/0x580 [ 658.319021][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.319036][T17791] [ 658.319036][T17791] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 658.319058][T17791] lock_sock_nested+0x41/0x130 [ 658.319069][T17791] inet_shutdown+0x6a/0x390 [ 658.319081][T17791] nbd_mark_nsock_dead+0x2e9/0x560 [ 658.319094][T17791] recv_work+0x1c4c/0x1d60 [ 658.319102][T17791] process_scheduled_works+0xb5d/0x1860 [ 658.319111][T17791] worker_thread+0xa53/0xfc0 [ 658.319119][T17791] kthread+0x388/0x470 [ 658.319129][T17791] ret_from_fork+0x514/0xb70 [ 658.319137][T17791] ret_from_fork_asm+0x1a/0x30 [ 658.319147][T17791] [ 658.319147][T17791] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 658.319159][T17791] mutex_lock_nested+0x5a/0x1d0 [ 658.319168][T17791] nbd_queue_rq+0x37b/0x1100 [ 658.319180][T17791] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 658.319189][T17791] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 658.319199][T17791] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 658.319209][T17791] blk_mq_run_hw_queue+0x368/0x520 [ 658.319217][T17791] blk_mq_dispatch_list+0xd1f/0xe20 [ 658.319227][T17791] blk_mq_flush_plug_list+0x48d/0x570 [ 658.319236][T17791] __blk_flush_plug+0x3ed/0x4d0 [ 658.319245][T17791] __submit_bio+0x28d/0x580 [ 658.319254][T17791] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 658.319263][T17791] block_read_full_folio+0x599/0x830 [ 658.319276][T17791] filemap_read_folio+0x137/0x3b0 [ 658.319284][T17791] do_read_cache_folio+0x2bf/0x560 [ 658.319293][T17791] read_part_sector+0xb8/0x2b0 [ 658.319302][T17791] adfspart_check_ICS+0xb1/0x960 [ 658.319312][T17791] bdev_disk_changed+0x817/0x1770 [ 658.319320][T17791] blkdev_get_whole+0x2e5/0x480 [ 658.319330][T17791] bdev_open+0x31e/0xcc0 [ 658.319338][T17791] blkdev_open+0x485/0x620 [ 658.319348][T17791] do_dentry_open+0x83d/0x13e0 [ 658.319360][T17791] vfs_open+0x3b/0x350 [ 658.319370][T17791] path_openat+0x2e43/0x38a0 [ 658.319380][T17791] do_file_open+0x23e/0x4a0 [ 658.319388][T17791] do_sys_openat2+0x113/0x200 [ 658.319399][T17791] __x64_sys_openat+0x138/0x170 [ 658.319406][T17791] do_syscall_64+0x174/0x580 [ 658.319418][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.319432][T17791] [ 658.319432][T17791] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 658.319445][T17791] mutex_lock_nested+0x5a/0x1d0 [ 658.319454][T17791] nbd_queue_rq+0xc6/0x1100 [ 658.319466][T17791] blk_mq_dispatch_rq_list+0xa77/0x1910 [ 658.319476][T17791] __blk_mq_sched_dispatch_requests+0xddb/0x1610 [ 658.319486][T17791] blk_mq_sched_dispatch_requests+0xda/0x1a0 [ 658.319497][T17791] blk_mq_run_hw_queue+0x368/0x520 [ 658.319506][T17791] blk_mq_dispatch_list+0xd1f/0xe20 [ 658.319516][T17791] blk_mq_flush_plug_list+0x48d/0x570 [ 658.319526][T17791] __blk_flush_plug+0x3ed/0x4d0 [ 658.319535][T17791] __submit_bio+0x28d/0x580 [ 658.319544][T17791] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 658.319553][T17791] block_read_full_folio+0x599/0x830 [ 658.319564][T17791] filemap_read_folio+0x137/0x3b0 [ 658.319573][T17791] do_read_cache_folio+0x2bf/0x560 [ 658.319582][T17791] read_part_sector+0xb8/0x2b0 [ 658.319590][T17791] adfspart_check_ICS+0xb1/0x960 [ 658.319599][T17791] bdev_disk_changed+0x817/0x1770 [ 658.319608][T17791] blkdev_get_whole+0x2e5/0x480 [ 658.319617][T17791] bdev_open+0x31e/0xcc0 [ 658.319626][T17791] blkdev_open+0x485/0x620 [ 658.319635][T17791] do_dentry_open+0x83d/0x13e0 [ 658.319646][T17791] vfs_open+0x3b/0x350 [ 658.319657][T17791] path_openat+0x2e43/0x38a0 [ 658.319666][T17791] do_file_open+0x23e/0x4a0 [ 658.319674][T17791] do_sys_openat2+0x113/0x200 [ 658.319685][T17791] __x64_sys_openat+0x138/0x170 [ 658.319692][T17791] do_syscall_64+0x174/0x580 [ 658.319704][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.319712][T17791] [ 658.319712][T17791] -> #3 (set->srcu){.+.+}-{0:0}: [ 658.319724][T17791] __synchronize_srcu+0xca/0x300 [ 658.319734][T17791] elevator_switch+0x1e8/0x7a0 [ 658.319743][T17791] elevator_change+0x2cc/0x450 [ 658.319751][T17791] elevator_set_default+0x36c/0x430 [ 658.319760][T17791] blk_register_queue+0x3e9/0x4e0 [ 658.319769][T17791] __add_disk+0x677/0xd50 [ 658.319780][T17791] add_disk_fwnode+0xfb/0x480 [ 658.319790][T17791] nbd_dev_add+0x72c/0xb50 [ 658.319801][T17791] nbd_init+0x168/0x1f0 [ 658.319814][T17791] do_one_initcall+0x250/0x870 [ 658.319832][T17791] do_initcall_level+0x104/0x190 [ 658.319849][T17791] do_initcalls+0x59/0xa0 [ 658.319864][T17791] kernel_init_freeable+0x2a6/0x3e0 [ 658.319879][T17791] kernel_init+0x1d/0x1d0 [ 658.319895][T17791] ret_from_fork+0x514/0xb70 [ 658.319911][T17791] ret_from_fork_asm+0x1a/0x30 [ 658.319929][T17791] [ 658.319929][T17791] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 658.319942][T17791] mutex_lock_nested+0x5a/0x1d0 [ 658.319952][T17791] elevator_change+0x1b3/0x450 [ 658.319962][T17791] elevator_set_none+0xb5/0x140 [ 658.319971][T17791] blk_mq_update_nr_hw_queues+0x607/0x1a80 [ 658.319983][T17791] nbd_start_device+0x17f/0xb20 [ 658.319995][T17791] nbd_genl_connect+0x1651/0x1c80 [ 658.320006][T17791] genl_family_rcv_msg_doit+0x22a/0x330 [ 658.320016][T17791] genl_rcv_msg+0x61c/0x7a0 [ 658.320023][T17791] netlink_rcv_skb+0x232/0x4b0 [ 658.320034][T17791] genl_rcv+0x28/0x40 [ 658.320041][T17791] netlink_unicast+0x780/0x920 [ 658.320051][T17791] netlink_sendmsg+0x813/0xb40 [ 658.320062][T17791] ____sys_sendmsg+0x94c/0x9c0 [ 658.320073][T17791] ___sys_sendmsg+0x2a5/0x360 [ 658.320084][T17791] __x64_sys_sendmsg+0x1c3/0x2a0 [ 658.320104][T17791] do_syscall_64+0x174/0x580 [ 658.320125][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.320140][T17791] [ 658.320140][T17791] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 658.320167][T17791] blk_alloc_queue+0x54e/0x690 [ 658.320181][T17791] __blk_mq_alloc_disk+0x197/0x390 [ 658.320192][T17791] nbd_dev_add+0x499/0xb50 [ 658.320203][T17791] nbd_init+0x168/0x1f0 [ 658.320211][T17791] do_one_initcall+0x250/0x870 [ 658.320221][T17791] do_initcall_level+0x104/0x190 [ 658.320229][T17791] do_initcalls+0x59/0xa0 [ 658.320237][T17791] kernel_init_freeable+0x2a6/0x3e0 [ 658.320245][T17791] kernel_init+0x1d/0x1d0 [ 658.320254][T17791] ret_from_fork+0x514/0xb70 [ 658.320262][T17791] ret_from_fork_asm+0x1a/0x30 [ 658.320272][T17791] [ 658.320272][T17791] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 658.320285][T17791] __lock_acquire+0x15a5/0x2cf0 [ 658.320295][T17791] lock_acquire+0x106/0x350 [ 658.320305][T17791] fs_reclaim_acquire+0x71/0x100 [ 658.320315][T17791] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.320325][T17791] __alloc_skb+0x1d0/0x7d0 [ 658.320335][T17791] alloc_uevent_skb+0x7d/0x230 [ 658.320344][T17791] kobject_uevent_net_broadcast+0x2fd/0x560 [ 658.320353][T17791] kobject_uevent_env+0x55f/0x9e0 [ 658.320362][T17791] nbd_set_size+0x546/0x670 [ 658.320369][T17791] nbd_ioctl+0x57b/0xe40 [ 658.320376][T17791] blkdev_ioctl+0x5e6/0x750 [ 658.320386][T17791] __se_sys_ioctl+0xff/0x170 [ 658.320395][T17791] do_syscall_64+0x174/0x580 [ 658.320407][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.320415][T17791] [ 658.320415][T17791] other info that might help us debug this: [ 658.320415][T17791] [ 658.320420][T17791] Chain exists of: [ 658.320420][T17791] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 658.320420][T17791] [ 658.320435][T17791] Possible unsafe locking scenario: [ 658.320435][T17791] [ 658.320438][T17791] CPU0 CPU1 [ 658.320441][T17791] ---- ---- [ 658.320444][T17791] lock(uevent_sock_mutex); [ 658.320450][T17791] lock(cpuhp_state-up); [ 658.320456][T17791] lock(uevent_sock_mutex); [ 658.320463][T17791] lock(fs_reclaim); [ 658.320468][T17791] [ 658.320468][T17791] *** DEADLOCK *** [ 658.320468][T17791] [ 658.320471][T17791] 2 locks held by syz.3.4492/17791: [ 658.320477][T17791] #0: ffff888026b80a48 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb20 [ 658.320502][T17791] #1: ffffffff8f6f3c78 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 658.320525][T17791] [ 658.320525][T17791] stack backtrace: [ 658.320545][T17791] CPU: 0 UID: 0 PID: 17791 Comm: syz.3.4492 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 658.320559][T17791] Tainted: [L]=SOFTLOCKUP [ 658.320563][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 658.320571][T17791] Call Trace: [ 658.320576][T17791] [ 658.320581][T17791] dump_stack_lvl+0xe8/0x150 [ 658.320592][T17791] print_circular_bug+0x2e1/0x300 [ 658.320606][T17791] check_noncircular+0x12e/0x150 [ 658.320621][T17791] __lock_acquire+0x15a5/0x2cf0 [ 658.320636][T17791] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 658.320651][T17791] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.320660][T17791] lock_acquire+0x106/0x350 [ 658.320671][T17791] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.320683][T17791] fs_reclaim_acquire+0x71/0x100 [ 658.320693][T17791] ? kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.320703][T17791] kmem_cache_alloc_node_noprof+0x4b/0x6e0 [ 658.320713][T17791] ? __alloc_skb+0x1d0/0x7d0 [ 658.320723][T17791] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.320736][T17791] __alloc_skb+0x1d0/0x7d0 [ 658.320748][T17791] alloc_uevent_skb+0x7d/0x230 [ 658.320759][T17791] kobject_uevent_net_broadcast+0x2fd/0x560 [ 658.320770][T17791] kobject_uevent_env+0x55f/0x9e0 [ 658.320781][T17791] nbd_set_size+0x546/0x670 [ 658.320790][T17791] ? __pfx_nbd_set_size+0x10/0x10 [ 658.320802][T17791] ? nbd_start_device+0x8dd/0xb20 [ 658.320816][T17791] nbd_ioctl+0x57b/0xe40 [ 658.320825][T17791] ? __pfx_nbd_ioctl+0x10/0x10 [ 658.320832][T17791] ? __asan_memset+0x22/0x50 [ 658.320840][T17791] ? smack_file_ioctl+0x263/0x360 [ 658.320853][T17791] ? __pfx_smack_file_ioctl+0x10/0x10 [ 658.320865][T17791] ? __pfx_nbd_ioctl+0x10/0x10 [ 658.320872][T17791] blkdev_ioctl+0x5e6/0x750 [ 658.320884][T17791] ? __pfx_blkdev_ioctl+0x10/0x10 [ 658.320894][T17791] ? __fget_files+0x2a/0x420 [ 658.320903][T17791] ? bpf_lsm_file_ioctl+0x9/0x20 [ 658.320913][T17791] ? __pfx_blkdev_ioctl+0x10/0x10 [ 658.320929][T17791] __se_sys_ioctl+0xff/0x170 [ 658.320947][T17791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.320964][T17791] do_syscall_64+0x174/0x580 [ 658.320987][T17791] ? trace_irq_disable+0x3b/0x140 [ 658.321006][T17791] ? clear_bhb_loop+0x40/0x90 [ 658.321024][T17791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.321044][T17791] RIP: 0033:0x7f400e64ce59 [ 658.321057][T17791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.321065][T17791] RSP: 002b:00007f400c885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.321077][T17791] RAX: ffffffffffffffda RBX: 00007f400e8c6090 RCX: 00007f400e64ce59 [ 658.321084][T17791] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 658.321090][T17791] RBP: 00007f400e6e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 658.321096][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.321102][T17791] R13: 00007f400e8c6128 R14: 00007f400e8c6090 R15: 00007fff9c174f48 [ 658.321113][T17791] [ 658.337059][T17789] block nbd3: shutting down sockets [ 658.419974][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.517639][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.517729][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.517797][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.517868][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.517941][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.518006][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.518253][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 658.518328][T17795] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 661.323304][ T2184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.533157][ T2184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.763257][ T2184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.993967][ T2184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.593034][ T2184] bridge_slave_1: left promiscuous mode [ 662.593179][ T2184] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.722699][ T2184] bridge_slave_0: left allmulticast mode [ 662.722717][ T2184] bridge_slave_0: left promiscuous mode [ 662.722816][ T2184] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.512645][ T2184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.592984][ T2184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.613180][ T2184] bond0 (unregistering): Released all slaves [ 663.655367][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 664.185290][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 664.524796][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 664.802265][ T2184] hsr_slave_0: left promiscuous mode [ 664.842398][ T2184] hsr_slave_1: left promiscuous mode [ 664.843067][ T2184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.843080][ T2184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.892987][ T2184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.893006][ T2184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.942461][ T2184] veth1_macvtap: left promiscuous mode [ 664.942495][ T2184] veth0_macvtap: left promiscuous mode [ 664.942565][ T2184] veth1_vlan: left promiscuous mode [ 664.942609][ T2184] veth0_vlan: left promiscuous mode [ 665.474752][ T2184] team0 (unregistering): Port device team_slave_1 removed [ 665.513429][ T2184] team0 (unregistering): Port device team_slave_0 removed [ 665.753161][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 666.983938][ T2184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.203381][ T2184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.413161][ T2184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.613633][ T2184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.242341][ T2184] bridge_slave_1: left allmulticast mode [ 668.242359][ T2184] bridge_slave_1: left promiscuous mode [ 668.242461][ T2184] bridge0: port 2(bridge_slave_1) entered disabled state