last executing test programs: 18m0.970901393s ago: executing program 0 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 18m0.78160748s ago: executing program 0 (id=786): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) sched_getattr(r0, &(0x7f0000000100)={0x38}, 0x38, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7b, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[0x0]) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 17m59.62897651s ago: executing program 0 (id=788): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17m57.632321s ago: executing program 0 (id=790): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 17m57.438625169s ago: executing program 0 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x10001) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 17m56.337269324s ago: executing program 0 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 17m39.73543553s ago: executing program 32 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) 16m57.476681488s ago: executing program 4 (id=899): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16m56.942049602s ago: executing program 4 (id=902): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 16m55.725680282s ago: executing program 4 (id=905): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0xffff0000}}, 0xa1208dba3ae2eea9) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181900, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x75, 0x7f, 0x2, 0x3ff, 0x9, 0x7fffffff, 0x5, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8c], 0xeeee8000, 0x284a93}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m52.379176172s ago: executing program 4 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2b40, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) 16m45.148660077s ago: executing program 4 (id=924): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) sendfile(0xffffffffffffffff, r3, 0x0, 0x3a) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 16m42.62632421s ago: executing program 4 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x6, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x16) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write(r7, &(0x7f0000000200)="c021", 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_80211_join_ibss(&(0x7f0000000440)='wlan0\x00', &(0x7f00000004c0)=@default_ap_ssid, 0x6, 0x2) 16m27.225041474s ago: executing program 33 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x6, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x16) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write(r7, &(0x7f0000000200)="c021", 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_80211_join_ibss(&(0x7f0000000440)='wlan0\x00', &(0x7f00000004c0)=@default_ap_ssid, 0x6, 0x2) 5m12.872157741s ago: executing program 2 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x4800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040445}, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x6, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f00000001c0)) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000040)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000100)=@req={0x2, 0x4, 0x1, 0x1}, 0x10) 5m10.255898767s ago: executing program 2 (id=1829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x40000000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, 0x0}) 5m5.820840297s ago: executing program 2 (id=1833): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="7f6705d26559"}) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 5m5.624507808s ago: executing program 2 (id=1835): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 5m5.412594166s ago: executing program 2 (id=1837): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x5420, 0x0) 5m3.035912779s ago: executing program 2 (id=1844): syz_open_dev$video(&(0x7f0000000040), 0x8, 0x143042) syz_open_dev$media(0x0, 0x7fdffffe, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000009b40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f00000005c0)={0x10200, 0x100, 0x280, &(0x7f00000001c0)=[0x8, 0x3, 0x8, 0x68, 0x3, 0x3, 0x6, 0xb268, 0x3, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x3, 0x7, 0xff, 0xb6d1, 0x2, 0x8, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1000, 0x1, 0x8, 0x2, 0x6, 0x8, 0x5, 0x1, 0x9, 0xe5, 0xa, 0xff, 0x1, 0x8, 0x3, 0xfffffffffffffe01, 0x2, 0x9, 0x7835c44d, 0x8000000000000000, 0x6403, 0x6, 0x2, 0x4, 0x27, 0x7, 0x9, 0x7fff, 0x3c7, 0x8001, 0x7, 0x2, 0x996, 0x100000000, 0x12000000000000, 0x2, 0x3, 0x8bfc, 0x5, 0x9, 0x80000000, 0x7, 0xad, 0x8, 0x4d84, 0x6, 0x800000000000000, 0x2, 0x3, 0x523a, 0x1ff, 0x932, 0x1, 0x100, 0x4, 0x8, 0xf, 0x5, 0xc0, 0x5, 0x0, 0xfffffffffffffff3, 0x2fd9, 0x93f9, 0xf0, 0x0, 0xe, 0x4, 0xd, 0x3, 0xffffffffffffffc0, 0xffffffffffff8001, 0x3a37f234, 0x100, 0x1, 0xec, 0x8b30, 0x4, 0xfff, 0xe, 0x6, 0x0, 0x6, 0x10001, 0x6, 0x3, 0xffffffffffff2d91, 0x7ff, 0x3, 0x1000, 0x6dd, 0x5, 0x3, 0x8000000000000000, 0x7ff, 0x1, 0x8000000000000001, 0x4653, 0x4, 0x9, 0x5, 0x101, 0x101, 0x7f7, 0x401, 0x936e, 0x6, 0x3]}) ioprio_set$uid(0x3, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000) 4m46.642202219s ago: executing program 34 (id=1844): syz_open_dev$video(&(0x7f0000000040), 0x8, 0x143042) syz_open_dev$media(0x0, 0x7fdffffe, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101301, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000009b40)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f00000005c0)={0x10200, 0x100, 0x280, &(0x7f00000001c0)=[0x8, 0x3, 0x8, 0x68, 0x3, 0x3, 0x6, 0xb268, 0x3, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x3, 0x7, 0xff, 0xb6d1, 0x2, 0x8, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1000, 0x1, 0x8, 0x2, 0x6, 0x8, 0x5, 0x1, 0x9, 0xe5, 0xa, 0xff, 0x1, 0x8, 0x3, 0xfffffffffffffe01, 0x2, 0x9, 0x7835c44d, 0x8000000000000000, 0x6403, 0x6, 0x2, 0x4, 0x27, 0x7, 0x9, 0x7fff, 0x3c7, 0x8001, 0x7, 0x2, 0x996, 0x100000000, 0x12000000000000, 0x2, 0x3, 0x8bfc, 0x5, 0x9, 0x80000000, 0x7, 0xad, 0x8, 0x4d84, 0x6, 0x800000000000000, 0x2, 0x3, 0x523a, 0x1ff, 0x932, 0x1, 0x100, 0x4, 0x8, 0xf, 0x5, 0xc0, 0x5, 0x0, 0xfffffffffffffff3, 0x2fd9, 0x93f9, 0xf0, 0x0, 0xe, 0x4, 0xd, 0x3, 0xffffffffffffffc0, 0xffffffffffff8001, 0x3a37f234, 0x100, 0x1, 0xec, 0x8b30, 0x4, 0xfff, 0xe, 0x6, 0x0, 0x6, 0x10001, 0x6, 0x3, 0xffffffffffff2d91, 0x7ff, 0x3, 0x1000, 0x6dd, 0x5, 0x3, 0x8000000000000000, 0x7ff, 0x1, 0x8000000000000001, 0x4653, 0x4, 0x9, 0x5, 0x101, 0x101, 0x7f7, 0x401, 0x936e, 0x6, 0x3]}) ioprio_set$uid(0x3, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80000) 2m25.970971883s ago: executing program 5 (id=2343): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2100, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m25.612603405s ago: executing program 5 (id=2345): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m25.444455819s ago: executing program 5 (id=2348): r0 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8e) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 2m23.470468585s ago: executing program 5 (id=2355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./gadget\x00', &(0x7f00000000c0)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget/dummy_udc\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x0, 0x0) 2m23.203330889s ago: executing program 5 (id=2357): r0 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x2007) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_emit_vhci(&(0x7f0000001940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x428}}}, 0x7) 2m21.642778511s ago: executing program 5 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 2m21.405566664s ago: executing program 35 (id=2367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 9.567058202s ago: executing program 1 (id=3134): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e, 0x0, 0x1}, 0x8d0) 9.395105976s ago: executing program 1 (id=3139): read$hidraw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = memfd_secret(0x0) ftruncate(r4, 0x51a9495) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) read$FUSE(r5, 0x0, 0x0) unshare(0x8040480) syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0xa, 0x0, 0x4) 6.949034081s ago: executing program 1 (id=3148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 6.874331153s ago: executing program 1 (id=3149): socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x1ea) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) close(0x3) 5.673753999s ago: executing program 1 (id=3154): bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x70bd29, 0x25dfdbfc, {0x0, 0x7, 0x0, 0x2d, {0x4e23, 0x4, [0x0, 0x8, 0x81], [0x1, 0xfffffff9, 0x10000], 0x0, [0x3, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000) 5.441212909s ago: executing program 1 (id=3158): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc) close(r4) 5.0749641s ago: executing program 3 (id=3164): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) 5.055321053s ago: executing program 8 (id=3165): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 4.81753462s ago: executing program 3 (id=3168): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) 4.622958045s ago: executing program 3 (id=3170): close(0x3) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 4.39554927s ago: executing program 7 (id=3172): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) 4.395030738s ago: executing program 3 (id=3173): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = io_uring_setup(0x2a69, &(0x7f0000002240)={0x0, 0x0, 0x2, 0x2}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000940)=@add_del={0x2, &(0x7f0000000900)='syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0xd4, 0x81}]}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="14010000210001000000000000000000058159800c000100"], 0x114}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="170000005500e502000000000000000007"], 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x18, &(0x7f0000000000), 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 3.312726668s ago: executing program 8 (id=3175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x25, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x9, @pix_mp={0x4, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0xb}, {0x7, 0x9}, {0x1}, {0xd, 0xc2c}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x80000002, 0x3}, {0x7f, 0x6}], 0xff, 0x68, 0x4, 0x2, 0x7}}) 3.308739246s ago: executing program 7 (id=3176): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000140)=[0xff], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.263842378s ago: executing program 6 (id=3177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x20440d0) 3.077748056s ago: executing program 6 (id=3178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) 2.951335048s ago: executing program 7 (id=3179): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 2.070283896s ago: executing program 8 (id=3180): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) 1.872417955s ago: executing program 6 (id=3181): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) socket$inet_udp(0x2, 0x2, 0x0) 1.843637567s ago: executing program 7 (id=3182): r0 = syz_io_uring_setup(0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x6) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r0, 0x5, 0x0, 0x0, 0x0, 0x0) 1.617764368s ago: executing program 8 (id=3183): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x41}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 1.547440271s ago: executing program 7 (id=3184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.533272448s ago: executing program 6 (id=3185): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 1.404004593s ago: executing program 3 (id=3186): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r0, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 1.356096877s ago: executing program 8 (id=3187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r7, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4a}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.279310178s ago: executing program 6 (id=3188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x20440d0) 193.822889ms ago: executing program 6 (id=3189): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000140)=[0xff], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 129.207311ms ago: executing program 7 (id=3190): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x3fc, &(0x7f0000000840)={[{0xdd, 0x4e00, "2b359e03a1804779d85f0b7219f6b2a3a688b457c32e881f219a5a82dd04195253ba62a6b213db0c9ed71f434d06bec48b37b2513338c449f4f2619ee93680a44292015875138936009209b29138af5507c3ad033370a68af6e3302c6313e69d27e350b3abab039097315ad2d8833d624fdefcc37da349179c5754ea6dbe3f1bdc6acdddb5fa1a1d06b2fa9cd9ae7856fa9a1dd9920a28cf15c4c0a2e077606ef953e24643b76d4004a6a67a000f70eb3ac863cfc8ccb3f58d05772cda48f76a3f305cd3e243b404cef64cefcf0e3a8cc6bfa5280c980f3faec1289a59"}, {0x312, 0x4e00, "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"}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 123.216077ms ago: executing program 3 (id=3191): bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/pci/drivers/vfio-pci/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1af4 1000', 0x9) write(r1, 0x0, 0x0) 0s ago: executing program 8 (id=3192): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) setns(0xc9, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) kernel console output (not intermixed with test programs): 93.634329][T14230] bridge_slave_0: entered promiscuous mode [ 1293.675495][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.675621][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.675831][T14193] bridge_slave_0: entered allmulticast mode [ 1293.678408][T14193] bridge_slave_0: entered promiscuous mode [ 1293.680807][T14230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.680906][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.739308][T14230] bridge_slave_1: entered allmulticast mode [ 1293.748059][T14230] bridge_slave_1: entered promiscuous mode [ 1293.764433][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.764525][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.764710][T14193] bridge_slave_1: entered allmulticast mode [ 1293.767003][T14193] bridge_slave_1: entered promiscuous mode [ 1294.204327][T14230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.253834][T14193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.275368][T14230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.331600][T14193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.252013][ T6886] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.078900][T14230] team0: Port device team_slave_0 added [ 1297.084078][T14193] team0: Port device team_slave_0 added [ 1297.095195][T14230] team0: Port device team_slave_1 added [ 1297.099977][T14193] team0: Port device team_slave_1 added [ 1297.251255][ T36] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 1297.485143][ T36] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1297.485195][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1297.485221][ T36] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.485245][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.485271][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1297.486333][ T36] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1297.486381][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1297.486407][ T36] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.486439][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.486465][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1297.487658][ T36] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1297.487704][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1297.487729][ T36] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.487754][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.487779][ T36] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1297.495542][ T36] usb 4-1: string descriptor 0 read error: -22 [ 1297.495672][ T36] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1297.495695][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.526164][ T36] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1297.770026][ T6886] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.896130][ T36] usb 4-1: USB disconnect, device number 61 [ 1298.116203][T14230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.116222][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.116250][T14230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.181967][T14193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.181986][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.182013][T14193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.214570][T14230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.214587][T14230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.214613][T14230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.238048][T14193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.238065][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.238092][T14193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.632586][ T6886] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.032001][T14230] hsr_slave_0: entered promiscuous mode [ 1299.033661][T14230] hsr_slave_1: entered promiscuous mode [ 1299.034538][T14230] debugfs: 'hsr0' already exists in 'hsr' [ 1299.034563][T14230] Cannot create hsr debugfs directory [ 1299.384253][ T6886] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.464773][T14193] hsr_slave_0: entered promiscuous mode [ 1299.466154][T14193] hsr_slave_1: entered promiscuous mode [ 1299.467145][T14193] debugfs: 'hsr0' already exists in 'hsr' [ 1299.467169][T14193] Cannot create hsr debugfs directory [ 1299.751148][ T196] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1299.913440][ T196] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1299.916048][ T196] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1299.916076][ T196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1299.916096][ T196] usb 2-1: Product: syz [ 1299.916110][ T196] usb 2-1: Manufacturer: syz [ 1299.916124][ T196] usb 2-1: SerialNumber: syz [ 1300.191811][ T196] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1300.218979][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.219096][T14396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.219239][T14396] bridge_slave_0: entered allmulticast mode [ 1300.229072][T14396] bridge_slave_0: entered promiscuous mode [ 1300.324988][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.325105][T14396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.325303][T14396] bridge_slave_1: entered allmulticast mode [ 1300.337601][T14396] bridge_slave_1: entered promiscuous mode [ 1301.587436][ C1] usblp0: nonzero write bulk status received: -71 [ 1301.588730][ T196] usb 2-1: USB disconnect, device number 55 [ 1301.659141][ T196] usblp0: removed [ 1301.806056][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1301.930750][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.252809][T14396] team0: Port device team_slave_0 added [ 1302.286061][T14396] team0: Port device team_slave_1 added [ 1302.391322][ T6886] bridge_slave_1: left allmulticast mode [ 1302.391346][ T6886] bridge_slave_1: left promiscuous mode [ 1302.391514][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.562750][ T6886] bridge_slave_0: left allmulticast mode [ 1302.562786][ T6886] bridge_slave_0: left promiscuous mode [ 1302.563042][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.171675][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.252428][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.312919][ T6886] bond0 (unregistering): Released all slaves [ 1303.531669][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.591778][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.633514][ T6886] bond0 (unregistering): Released all slaves [ 1304.155805][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1304.210018][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1304.227976][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1304.239337][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1304.240106][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1305.306073][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.306126][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.513441][ T37] audit: type=1807 audit(1785513310.066:11): UNKNOWN=„ res=0 [ 1306.553059][ T37] audit: type=1802 audit(1785513310.136:12): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.1906" res=0 errno=0 [ 1306.560401][T14685] ima: policy update failed [ 1306.560535][ T37] audit: type=1802 audit(1785513310.136:13): pid=14685 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.1906" res=0 errno=0 [ 1306.585064][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.585081][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.585106][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.587409][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.587424][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.587448][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.128780][T14700] Bluetooth: hci3: Frame reassembly failed (-84) [ 1307.534369][ T6901] Bluetooth: hci3: Frame reassembly failed (-84) [ 1307.591912][T14396] hsr_slave_0: entered promiscuous mode [ 1307.593521][T14396] hsr_slave_1: entered promiscuous mode [ 1307.600304][T14396] debugfs: 'hsr0' already exists in 'hsr' [ 1307.600331][T14396] Cannot create hsr debugfs directory [ 1308.270934][T13517] Bluetooth: hci0: command tx timeout [ 1308.546701][T14230] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1308.667627][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1308.831214][T14230] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1308.874856][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1308.876533][T14729] Unable to locate . in FUNC.INSTANCE [ 1308.911338][T14230] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1308.945500][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1308.977952][T14230] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1309.013630][T14230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1309.291960][T14743] dlm: no locking on control device [ 1309.541355][T13517] Bluetooth: hci3: command 0x1003 tx timeout [ 1309.549485][ T5621] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1309.851241][ T6886] hsr_slave_0: left promiscuous mode [ 1309.928862][ T6886] hsr_slave_1: left promiscuous mode [ 1309.939561][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.972059][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.451228][T13517] Bluetooth: hci0: command tx timeout [ 1310.831244][ T6886] hsr_slave_0: left promiscuous mode [ 1310.851184][ T6886] hsr_slave_1: left promiscuous mode [ 1310.851824][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.851840][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.872204][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.872230][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.914693][ T6886] veth1_macvtap: left promiscuous mode [ 1310.914760][ T6886] veth0_macvtap: left promiscuous mode [ 1310.914898][ T6886] veth1_vlan: left promiscuous mode [ 1310.914999][ T6886] veth0_vlan: left promiscuous mode [ 1311.301925][ T6886] team0 (unregistering): Port device team_slave_1 removed [ 1311.355332][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1311.570982][ T9388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.731285][ T9388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.733589][ T9388] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.739000][ T9388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.759161][ T9388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1311.951675][T13517] Bluetooth: hci2: command 0x1003 tx timeout [ 1311.955127][ T5621] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1312.112158][ T6886] team0 (unregistering): Port device 26±ÿ removed [ 1312.190974][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1312.352753][T14230] kthread_run failed with err -4 [ 1312.501586][ T5621] Bluetooth: hci0: command tx timeout [ 1313.966378][ T5621] Bluetooth: hci3: command tx timeout [ 1314.588761][ T5621] Bluetooth: hci0: command tx timeout [ 1314.819145][T14396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1314.897363][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1315.554137][T14396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1315.653303][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.716436][T14396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1316.037507][ T5621] Bluetooth: hci3: command tx timeout [ 1316.886765][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1316.927361][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1316.942907][T14396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1317.520069][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1318.028665][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.029246][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.029489][T14676] bridge_slave_0: entered allmulticast mode [ 1318.033289][T14676] bridge_slave_0: entered promiscuous mode [ 1318.054448][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.055564][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.055817][T14676] bridge_slave_1: entered allmulticast mode [ 1318.058555][T14676] bridge_slave_1: entered promiscuous mode [ 1318.101209][ T5621] Bluetooth: hci3: command tx timeout [ 1319.119377][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1319.138501][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.220186][T14676] team0: Port device team_slave_0 added [ 1319.243858][T14676] team0: Port device team_slave_1 added [ 1319.401963][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.401982][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.402011][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.527592][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.527609][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.527633][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.742972][T14676] hsr_slave_0: entered promiscuous mode [ 1319.744962][T14676] hsr_slave_1: entered promiscuous mode [ 1319.781153][ T196] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1319.960406][ T6886] IPVS: stop unused estimator thread 0... [ 1319.964913][ T196] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.967067][ T196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1319.967093][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1319.967111][ T196] usb 4-1: Product: syz [ 1319.967125][ T196] usb 4-1: Manufacturer: syz [ 1319.967139][ T196] usb 4-1: SerialNumber: syz [ 1320.181272][ T5621] Bluetooth: hci3: command tx timeout [ 1320.234209][ T196] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1320.411261][ T5590] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1320.432554][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1320.575366][ T5590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1320.578247][ T5590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1320.578277][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1320.578297][ T5590] usb 2-1: Product: syz [ 1320.578311][ T5590] usb 2-1: Manufacturer: syz [ 1320.578325][ T5590] usb 2-1: SerialNumber: syz [ 1320.846503][ T5590] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1321.212804][T14767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.212984][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.213316][T14767] bridge_slave_0: entered allmulticast mode [ 1321.215527][T14767] bridge_slave_0: entered promiscuous mode [ 1321.258078][T14767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.258325][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.258715][T14767] bridge_slave_1: entered allmulticast mode [ 1321.282883][T14767] bridge_slave_1: entered promiscuous mode [ 1321.697698][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.702724][T14767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.738520][T14767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.069109][T14767] team0: Port device team_slave_0 added [ 1322.119323][T14767] team0: Port device team_slave_1 added [ 1322.697560][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1322.781576][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.850751][T14767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.850768][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.850797][T14767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.856032][T14767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.856049][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1322.856084][T14767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.957011][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.957203][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.992652][T14676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1323.039504][T10382] usb 2-1: USB disconnect, device number 56 [ 1323.053721][T10382] usblp1: removed [ 1323.088083][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1323.587404][T14676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1323.761379][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1323.922975][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.923128][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.928857][T14676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1323.980586][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1324.024606][T14767] hsr_slave_0: entered promiscuous mode [ 1324.026066][T14767] hsr_slave_1: entered promiscuous mode [ 1324.026867][T14767] debugfs: 'hsr0' already exists in 'hsr' [ 1324.026890][T14767] Cannot create hsr debugfs directory [ 1324.033093][T14676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1324.236930][T14676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1325.463570][ T5262] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1325.811370][ T5590] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1325.830386][ T6886] bridge_slave_1: left allmulticast mode [ 1325.830421][ T6886] bridge_slave_1: left promiscuous mode [ 1325.830690][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.933986][ T6886] bridge_slave_0: left allmulticast mode [ 1325.934034][ T6886] bridge_slave_0: left promiscuous mode [ 1325.934327][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.963330][ T5590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1325.965706][ T5590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1325.965734][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1325.965754][ T5590] usb 2-1: Product: syz [ 1325.965769][ T5590] usb 2-1: Manufacturer: syz [ 1325.965783][ T5590] usb 2-1: SerialNumber: syz [ 1326.161356][ T6886] bridge_slave_1: left allmulticast mode [ 1326.161385][ T6886] bridge_slave_1: left promiscuous mode [ 1326.161701][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.221401][ T5590] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1326.302958][ T6886] bridge_slave_0: left allmulticast mode [ 1326.302982][ T6886] bridge_slave_0: left promiscuous mode [ 1326.303232][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.474332][ T821] usb 2-1: USB disconnect, device number 57 [ 1326.497805][ T821] usblp1: removed [ 1326.506020][ T6886] bridge_slave_1: left allmulticast mode [ 1326.506045][ T6886] bridge_slave_1: left promiscuous mode [ 1326.506809][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.622336][ T6886] bridge_slave_0: left allmulticast mode [ 1326.622361][ T6886] bridge_slave_0: left promiscuous mode [ 1326.622628][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.012009][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.111981][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.181571][ T5590] usb 4-1: USB disconnect, device number 62 [ 1327.185096][ T5590] usblp0: removed [ 1327.203497][ T6886] bond0 (unregistering): Released all slaves [ 1327.582217][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.714229][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.773576][ T6886] bond0 (unregistering): Released all slaves [ 1328.022125][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.102851][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.163384][ T6886] bond0 (unregistering): Released all slaves [ 1329.672952][ T6886] hsr_slave_0: left promiscuous mode [ 1329.712870][ T6886] hsr_slave_1: left promiscuous mode [ 1329.713857][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.755156][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.209080][ T6886] hsr_slave_0: left promiscuous mode [ 1330.242680][ T6886] hsr_slave_1: left promiscuous mode [ 1330.244619][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.282118][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.461256][ T6886] hsr_slave_0: left promiscuous mode [ 1330.471468][ T5590] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1330.511336][ T6886] hsr_slave_1: left promiscuous mode [ 1330.512336][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.562936][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.634025][ T5590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1330.636309][ T5590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1330.636326][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1330.636337][ T5590] usb 2-1: Product: syz [ 1330.636345][ T5590] usb 2-1: Manufacturer: syz [ 1330.636352][ T5590] usb 2-1: SerialNumber: syz [ 1330.901543][ T5590] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1331.064572][ T6886] team0 (unregistering): Port device team_slave_1 removed [ 1331.121714][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1331.682041][ T6886] team0 (unregistering): Port device team_slave_1 removed [ 1331.732018][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1332.282732][ T6886] team0 (unregistering): Port device team_slave_1 removed [ 1332.332565][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1332.645515][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1332.983661][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.079834][ T36] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1333.105198][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1333.278872][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1333.294665][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1333.294695][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1333.294715][ T36] usb 4-1: Product: syz [ 1333.294729][ T36] usb 4-1: Manufacturer: syz [ 1333.294742][ T36] usb 4-1: SerialNumber: syz [ 1333.544104][ T36] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 63 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1333.743191][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.769162][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.769292][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1333.812531][ T196] usb 4-1: USB disconnect, device number 63 [ 1333.830691][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.839817][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1333.891054][ T196] usblp1: removed [ 1335.080925][T14396] veth0_vlan: entered promiscuous mode [ 1335.219741][T14396] veth1_vlan: entered promiscuous mode [ 1335.678196][T14396] veth0_macvtap: entered promiscuous mode [ 1335.764527][T14396] veth1_macvtap: entered promiscuous mode [ 1335.998108][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.257739][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.301958][T14676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1336.592103][ T6907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.592149][ T6907] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.592241][ T6907] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.717018][T14767] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1336.915626][T14767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1337.376568][T14767] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1337.726635][T15002] usb 2-1: USB disconnect, device number 58 [ 1337.730957][T15002] usblp0: removed [ 1337.769189][T14767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1337.869528][T14767] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1337.958717][T14767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1338.074253][T14767] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1338.152004][T14767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1338.152445][T15050] ªªªªªª: renamed from vlan0 (while UP) [ 1338.346385][ T6907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.346409][ T6907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1338.645616][ T5707] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1338.685771][T13811] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.694465][T14676] veth0_vlan: entered promiscuous mode [ 1338.801840][ T9388] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1338.827682][ T9388] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1338.838703][ T5707] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1338.839298][ T9388] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1338.869136][ T9388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1338.869575][ T5707] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1338.869601][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1338.869620][ T5707] usb 2-1: Product: syz [ 1338.869635][ T5707] usb 2-1: Manufacturer: syz [ 1338.869649][ T5707] usb 2-1: SerialNumber: syz [ 1338.889791][ T9388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1339.014453][T14676] veth1_vlan: entered promiscuous mode [ 1339.184819][ T5707] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1339.323245][T14676] veth0_macvtap: entered promiscuous mode [ 1339.384744][T14676] veth1_macvtap: entered promiscuous mode [ 1339.394278][T14767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.465806][ C1] usblp0: nonzero write bulk status received: -71 [ 1339.484149][ T36] usb 2-1: USB disconnect, device number 59 [ 1339.520271][ T36] usblp0: removed [ 1339.605836][T14767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.703106][ T5621] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1340.082985][T14676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.141148][ T196] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1340.143214][T14676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.150967][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.151905][ T6901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.175028][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.175216][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.325467][ T196] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1340.347810][ T196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1340.347840][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1340.347860][ T196] usb 4-1: Product: syz [ 1340.347873][ T196] usb 4-1: Manufacturer: syz [ 1340.347887][ T196] usb 4-1: SerialNumber: syz [ 1340.675183][ T196] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1340.895106][ T196] usb 4-1: USB disconnect, device number 64 [ 1340.910293][ T196] usblp0: removed [ 1340.998196][ T5621] Bluetooth: hci5: command tx timeout [ 1341.152609][ T6886] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.752269][ T6886] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.026638][ T6884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1343.026658][ T6884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.494282][ T6886] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.743776][ T5621] Bluetooth: hci5: command tx timeout [ 1344.999592][ T6891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1344.999613][ T6891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1346.200427][ T6886] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.341207][T12484] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1346.476401][T15136] futex_wake_op: syz.5.822 tries to shift op by 144; fix this program [ 1346.702867][T12484] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1346.822085][ T5621] Bluetooth: hci5: command tx timeout [ 1346.892629][T12484] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1346.892706][T12484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1346.892896][T12484] usb 4-1: Product: syz [ 1346.892959][T12484] usb 4-1: Manufacturer: syz [ 1346.893029][T12484] usb 4-1: SerialNumber: syz [ 1347.455966][T15064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.456350][T15064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.457019][T15064] bridge_slave_0: entered allmulticast mode [ 1347.490851][T15064] bridge_slave_0: entered promiscuous mode [ 1347.513401][T15064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.513997][T15064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.514655][T15064] bridge_slave_1: entered allmulticast mode [ 1347.525535][T15064] bridge_slave_1: entered promiscuous mode [ 1347.587753][T12484] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1347.758991][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.789388][T14767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.875143][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.949288][T10382] usb 4-1: USB disconnect, device number 65 [ 1348.363417][ T37] audit: type=1326 audit(1785513351.766:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15144 comm="syz.5.1973" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x0 [ 1348.461360][T15155] sit0: entered promiscuous mode [ 1348.466312][T15155] netlink: 'syz.5.1973': attribute type 1 has an invalid length. [ 1348.466332][T15155] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1973'. [ 1348.801354][T10382] usblp0: removed [ 1348.902803][ T5621] Bluetooth: hci5: command tx timeout [ 1349.145665][T15064] team0: Port device team_slave_0 added [ 1349.190070][T15064] team0: Port device team_slave_1 added [ 1349.251446][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.251463][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.251488][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.361211][ T821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1349.387132][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.387148][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.387175][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.521364][ T821] usb 6-1: Using ep0 maxpacket: 32 [ 1349.526285][ T821] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1349.553148][ T821] usb 6-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 1349.553179][ T821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.553199][ T821] usb 6-1: Product: syz [ 1349.553213][ T821] usb 6-1: Manufacturer: syz [ 1349.553228][ T821] usb 6-1: SerialNumber: syz [ 1350.127466][T15064] hsr_slave_0: entered promiscuous mode [ 1350.135298][T15064] hsr_slave_1: entered promiscuous mode [ 1350.139654][T15064] debugfs: 'hsr0' already exists in 'hsr' [ 1350.139691][T15064] Cannot create hsr debugfs directory [ 1350.417763][ T6886] bridge_slave_1: left allmulticast mode [ 1350.417801][ T6886] bridge_slave_1: left promiscuous mode [ 1350.418068][ T6886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.586776][ T6886] bridge_slave_0: left allmulticast mode [ 1350.586811][ T6886] bridge_slave_0: left promiscuous mode [ 1350.587034][ T6886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.617512][T15197] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.944383][T15002] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1351.091135][T15002] usb 4-1: Using ep0 maxpacket: 8 [ 1351.092101][T15002] usb 4-1: no configurations [ 1351.092112][T15002] usb 4-1: can't read configurations, error -22 [ 1351.221184][T15002] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1352.811226][T15002] usb 4-1: Using ep0 maxpacket: 8 [ 1352.812058][T15002] usb 4-1: no configurations [ 1352.812071][T15002] usb 4-1: can't read configurations, error -22 [ 1352.818126][T15002] usb usb4-port1: attempt power cycle [ 1352.932090][ T6886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.012114][ T6886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.036794][ T6886] bond0 (unregistering): Released all slaves [ 1353.157508][T15002] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1353.196122][T15002] usb 4-1: Using ep0 maxpacket: 8 [ 1353.197657][T15002] usb 4-1: no configurations [ 1353.197674][T15002] usb 4-1: can't read configurations, error -22 [ 1353.410897][T15002] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1353.439938][T15002] usb 4-1: Using ep0 maxpacket: 8 [ 1353.441808][T15002] usb 4-1: no configurations [ 1353.441827][T15002] usb 4-1: can't read configurations, error -22 [ 1353.442335][T15002] usb usb4-port1: unable to enumerate USB device [ 1353.739525][ T821] usb 6-1: 1:1 : bogus bTerminalLink 5 [ 1354.430644][ T821] usb 6-1: USB disconnect, device number 2 [ 1354.639085][T14195] udevd[14195]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1355.000308][T14767] veth0_vlan: entered promiscuous mode [ 1355.011946][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 1355.171249][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1355.241308][ T6886] hsr_slave_0: left promiscuous mode [ 1355.281754][ T6886] hsr_slave_1: left promiscuous mode [ 1355.282812][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.282836][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.342540][ T6886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1355.342567][ T6886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1355.351233][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1355.352181][ T9] usb 2-1: no configurations [ 1355.352196][ T9] usb 2-1: can't read configurations, error -22 [ 1355.407025][T15256] syz.5.2002 (15256) used greatest stack depth: 19360 bytes left [ 1355.476195][ T6886] veth1_macvtap: left promiscuous mode [ 1355.476312][ T6886] veth0_macvtap: left promiscuous mode [ 1355.476560][ T6886] veth1_vlan: left promiscuous mode [ 1355.476735][ T6886] veth0_vlan: left promiscuous mode [ 1355.491443][ T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1355.591294][T14302] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1355.671847][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1355.672522][ T9] usb 2-1: no configurations [ 1355.672536][ T9] usb 2-1: can't read configurations, error -22 [ 1355.672881][ T9] usb usb2-port1: attempt power cycle [ 1355.754042][T14302] usb 4-1: Using ep0 maxpacket: 32 [ 1355.756461][T14302] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1355.756486][T14302] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1355.756506][T14302] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1355.756526][T14302] usb 4-1: config 1 has no interface number 0 [ 1355.756567][T14302] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1355.756592][T14302] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1355.756631][T14302] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1355.756653][T14302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.973551][T14302] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1356.071373][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1356.104262][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1356.107645][ T9] usb 2-1: no configurations [ 1356.107665][ T9] usb 2-1: can't read configurations, error -22 [ 1356.232160][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1356.254622][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1356.255895][ T9] usb 2-1: no configurations [ 1356.255910][ T9] usb 2-1: can't read configurations, error -22 [ 1356.256917][ T9] usb usb2-port1: unable to enumerate USB device [ 1356.576123][T14302] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1356.644609][ T821] usb 4-1: USB disconnect, device number 70 [ 1356.677522][ T821] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1356.775412][ T6886] team0 (unregistering): Port device team_slave_1 removed [ 1356.832167][ T6886] team0 (unregistering): Port device team_slave_0 removed [ 1357.112922][T14767] veth1_vlan: entered promiscuous mode [ 1357.437254][T15304] syz.5.2016 (15304) used greatest stack depth: 18656 bytes left [ 1357.841379][ T820] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.012966][ T6908] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.017418][ T6908] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1358.060341][T14767] veth0_macvtap: entered promiscuous mode [ 1358.496401][T14767] veth1_macvtap: entered promiscuous mode [ 1358.632532][T14767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.705507][T14767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.905397][ T37] audit: type=1326 audit(1785513362.766:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15342 comm="syz.5.2025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x0 [ 1359.980041][T15350] Can't find ip_set type hash:m [ 1360.165023][T15356] ªªªªªª: renamed from vlan0 (while UP) [ 1360.706088][ T37] audit: type=1326 audit(1785513364.286:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15360 comm="syz.5.2031" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x0 [ 1361.910030][ T6901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.026619][ T6887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.048279][ T6887] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.048650][ T6887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.456260][ T6901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.456880][ T6901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.456897][ T6901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.695618][ T820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.695639][ T820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.264337][T10382] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1363.421279][ T5610] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1363.421462][T10382] usb 6-1: Using ep0 maxpacket: 32 [ 1363.427854][T10382] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1363.427880][T10382] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1363.427900][T10382] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1363.427937][T10382] usb 6-1: config 1 has no interface number 0 [ 1363.428073][T10382] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1363.428108][T10382] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1363.428147][T10382] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1363.428170][T10382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.553400][T10382] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1363.566950][T15064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1363.601076][ T5610] usb 2-1: Using ep0 maxpacket: 8 [ 1363.604488][ T5610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.604514][ T5610] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1363.648054][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1363.649514][ T5610] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1363.649540][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.649560][ T5610] usb 2-1: Product: syz [ 1363.649574][ T5610] usb 2-1: Manufacturer: syz [ 1363.649588][ T5610] usb 2-1: SerialNumber: syz [ 1363.719552][ T5610] usb 2-1: config 0 descriptor?? [ 1363.721149][T15064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1364.020711][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1364.037744][T15064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1364.067073][T12484] usb 2-1: USB disconnect, device number 64 [ 1364.213021][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1364.232420][T10382] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1364.285510][T15064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1364.334769][T15064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1364.435876][ T5610] usb 6-1: USB disconnect, device number 3 [ 1364.452259][ T5610] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1364.826474][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.902503][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.931817][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.932765][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.974970][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.975083][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.691227][ T5610] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1365.843963][ T5610] usb 2-1: Using ep0 maxpacket: 8 [ 1365.847776][ T5610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.847800][ T5610] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1365.850123][ T5610] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1365.850150][ T5610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.850169][ T5610] usb 2-1: Product: syz [ 1365.850183][ T5610] usb 2-1: Manufacturer: syz [ 1365.850197][ T5610] usb 2-1: SerialNumber: syz [ 1365.929748][ T5610] usb 2-1: config 0 descriptor?? [ 1365.995737][T15064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.140620][T10382] usb 2-1: USB disconnect, device number 65 [ 1366.321138][ T5707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1366.491078][ T5707] usb 7-1: Using ep0 maxpacket: 32 [ 1366.496456][ T5707] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1366.496484][ T5707] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1366.496504][ T5707] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1366.496524][ T5707] usb 7-1: config 1 has no interface number 0 [ 1366.496560][ T5707] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1366.496585][ T5707] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1366.496625][ T5707] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1366.496647][ T5707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.548942][ T5707] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1366.628901][T15064] veth0_vlan: entered promiscuous mode [ 1366.663866][T15064] veth1_vlan: entered promiscuous mode [ 1366.752001][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.752080][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.109107][T15064] veth0_macvtap: entered promiscuous mode [ 1367.118773][T15064] veth1_macvtap: entered promiscuous mode [ 1367.227398][ T5707] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 1368.282609][T12484] snd_usb_pod 7-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1368.292906][T10382] usb 7-1: USB disconnect, device number 2 [ 1368.326053][T10382] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1368.377600][T15064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1368.484485][T15064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1368.522874][ T6888] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.810053][ T6887] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.810101][ T6887] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.831567][ T6907] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.651697][ T6907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.651717][ T6907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1369.880936][ T6890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.880958][ T6890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1372.059539][T15586] Bluetooth: MGMT ver 1.23 [ 1373.135121][T15620] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2109'. [ 1374.640896][ T5621] Bluetooth: hci0: command tx timeout [ 1376.804220][T15711] sit0: entered promiscuous mode [ 1376.809522][T15711] netlink: 'syz.6.2142': attribute type 1 has an invalid length. [ 1376.809543][T15711] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2142'. [ 1377.184356][ T37] audit: type=1326 audit(1785513380.276:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15705 comm="syz.6.2142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54378ae019 code=0x0 [ 1379.749709][ T37] audit: type=1326 audit(1785513383.316:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.781964][ T37] audit: type=1326 audit(1785513383.366:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.782011][ T37] audit: type=1326 audit(1785513383.366:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.782294][ T37] audit: type=1326 audit(1785513383.366:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.886595][ T37] audit: type=1326 audit(1785513383.366:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.886792][ T37] audit: type=1326 audit(1785513383.466:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.886962][ T37] audit: type=1326 audit(1785513383.466:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.887001][ T37] audit: type=1326 audit(1785513383.466:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1379.999269][ T37] audit: type=1326 audit(1785513383.466:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15755 comm="syz.3.2159" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd791de019 code=0x7ffc0000 [ 1380.421169][ T36] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1380.729554][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1380.755643][ T36] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1380.755673][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1380.755702][ T36] usb 7-1: Product: syz [ 1380.755716][ T36] usb 7-1: Manufacturer: syz [ 1380.755731][ T36] usb 7-1: SerialNumber: syz [ 1381.857445][T13517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1381.899620][T13517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1381.917471][T13517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1381.934738][T13517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1381.935546][T13517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1382.035547][ T36] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1382.377751][ C0] usblp0: nonzero write bulk status received: -71 [ 1382.408619][ T5707] usb 7-1: USB disconnect, device number 3 [ 1382.570449][ T5707] usblp0: removed [ 1383.568066][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1383.568083][ T37] audit: type=1326 audit(1785513387.136:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x7ffc0000 [ 1383.568124][ T37] audit: type=1326 audit(1785513387.146:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x7ffc0000 [ 1383.611033][ T37] audit: type=1326 audit(1785513387.136:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7faf7a79ee09 code=0x7ffc0000 [ 1383.614846][ T37] audit: type=1326 audit(1785513387.196:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7faf7a75a46c code=0x7ffc0000 [ 1383.614896][ T37] audit: type=1326 audit(1785513387.196:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faf7a75a4ce code=0x7ffc0000 [ 1383.614947][ T37] audit: type=1326 audit(1785513387.196:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x7ffc0000 [ 1383.615824][ T37] audit: type=1326 audit(1785513387.196:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7faf7a75ad7b code=0x7ffc0000 [ 1383.615871][ T37] audit: type=1326 audit(1785513387.196:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x7ffc0000 [ 1383.616196][ T37] audit: type=1326 audit(1785513387.196:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf7a79e019 code=0x7ffc0000 [ 1383.616517][ T37] audit: type=1326 audit(1785513387.196:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15803 comm="syz.5.2175" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf7a79dcab code=0x7ffc0000 [ 1384.111292][ T5621] Bluetooth: hci2: command tx timeout [ 1385.439705][T13811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.494842][T15834] netlink: 'syz.6.2180': attribute type 1 has an invalid length. [ 1385.494866][T15834] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2180'. [ 1386.825109][ T5621] Bluetooth: hci2: command tx timeout [ 1386.872531][ T5590] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1387.043422][ T5590] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1387.046294][ T5590] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1387.046324][ T5590] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1387.046344][ T5590] usb 2-1: Product: syz [ 1387.046357][ T5590] usb 2-1: Manufacturer: syz [ 1387.046372][ T5590] usb 2-1: SerialNumber: syz [ 1387.139187][T13811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.171189][T12484] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1387.213149][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2189'. [ 1387.328008][T12484] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1387.338607][T12484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1387.338639][T12484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1387.338660][T12484] usb 6-1: Product: syz [ 1387.338675][T12484] usb 6-1: Manufacturer: syz [ 1387.338689][T12484] usb 6-1: SerialNumber: syz [ 1387.411493][ T5590] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1387.668618][T12484] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1387.848812][ C1] usblp0: nonzero write bulk status received: -71 [ 1387.859182][T12484] usb 2-1: USB disconnect, device number 66 [ 1387.897183][T12484] usblp0: removed [ 1387.935722][T13811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.977650][ T5590] usb 6-1: USB disconnect, device number 4 [ 1387.994563][ T5590] usblp1: removed [ 1388.645233][T13811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.903600][ T5621] Bluetooth: hci2: command tx timeout [ 1389.254192][T15881] gadgetfs: bound to dummy_udc driver [ 1389.621273][ T5590] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1389.621715][ C0] gadgetfs: connected [ 1389.622393][ T5590] gadgetfs: disconnected [ 1390.991924][ T5621] Bluetooth: hci2: command tx timeout [ 1391.247940][ C0] gadgetfs: connected [ 1391.249814][ T5590] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1391.249854][ T5590] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1391.249877][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.363313][ C0] gadgetfs: configuration #1 [ 1391.851155][ T5707] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1391.871785][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.872009][T15780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.872207][T15780] bridge_slave_0: entered allmulticast mode [ 1391.874770][T15780] bridge_slave_0: entered promiscuous mode [ 1391.877859][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.878065][T15780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.878246][T15780] bridge_slave_1: entered allmulticast mode [ 1391.931354][T15780] bridge_slave_1: entered promiscuous mode [ 1392.067393][T15881] gadgetfs: suspended from state 3 [ 1392.068583][ T5590] usb 1-1: USB disconnect, device number 10 [ 1392.076216][T15881] gadgetfs: disconnected [ 1392.098379][T15780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.125110][ T196] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1392.169637][ T5707] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1392.176299][ T5707] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1392.176330][ T5707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1392.176350][ T5707] usb 2-1: Product: syz [ 1392.176366][ T5707] usb 2-1: Manufacturer: syz [ 1392.176381][ T5707] usb 2-1: SerialNumber: syz [ 1392.339154][T15780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.562533][ T5707] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1392.581249][ T196] usb 6-1: Using ep0 maxpacket: 32 [ 1392.583343][ T196] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1392.583370][ T196] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1392.583390][ T196] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1392.583411][ T196] usb 6-1: config 1 has no interface number 0 [ 1392.583452][ T196] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1392.583477][ T196] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1392.583515][ T196] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1392.583537][ T196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.735473][ T5707] usb 2-1: USB disconnect, device number 67 [ 1392.797643][ T5707] usblp0: removed [ 1392.803757][ T196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1393.017530][T14302] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1393.175347][T14302] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1393.178225][T14302] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1393.178254][T14302] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1393.178326][T14302] usb 8-1: Product: syz [ 1393.178341][T14302] usb 8-1: Manufacturer: syz [ 1393.178355][T14302] usb 8-1: SerialNumber: syz [ 1393.330627][ T196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1393.447377][T14302] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1393.501610][ T196] usb 6-1: USB disconnect, device number 5 [ 1393.553670][ T196] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1393.862474][T13811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.865973][ C1] usblp0: nonzero write bulk status received: -71 [ 1393.868972][ T821] usb 8-1: USB disconnect, device number 2 [ 1393.915852][ T821] usblp0: removed [ 1393.951767][T13811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.993744][T13811] bond0 (unregistering): Released all slaves [ 1394.145344][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1394.216040][T15780] team0: Port device team_slave_0 added [ 1394.227370][T15780] team0: Port device team_slave_1 added [ 1394.301651][T15780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.301668][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.301690][T15780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.308008][T15780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.308024][T15780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.308046][T15780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.506740][T15780] hsr_slave_0: entered promiscuous mode [ 1394.507982][T15780] hsr_slave_1: entered promiscuous mode [ 1394.508673][T15780] debugfs: 'hsr0' already exists in 'hsr' [ 1394.508692][T15780] Cannot create hsr debugfs directory [ 1395.911131][ T196] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1395.941411][T15971] tipc: Started in network mode [ 1395.941456][T15971] tipc: Node identity 2a7327350fbb, cluster identity 4711 [ 1395.975037][T15971] tipc: Enabled bearer , priority 0 [ 1395.977237][T15979] syzkaller0: entered promiscuous mode [ 1395.977260][T15979] syzkaller0: entered allmulticast mode [ 1396.086100][ T196] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1396.089370][ T196] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1396.089399][ T196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1396.089419][ T196] usb 7-1: Product: syz [ 1396.089434][ T196] usb 7-1: Manufacturer: syz [ 1396.089449][ T196] usb 7-1: SerialNumber: syz [ 1396.665708][T15994] Illegal XDP return value 4294967274 on prog (id 80) dev N/A, expect packet loss! [ 1396.715629][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1396.742542][T15975] tipc: Resetting bearer [ 1396.815561][T15970] tipc: Resetting bearer [ 1396.937903][ T196] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1396.975305][T15970] tipc: Disabling bearer [ 1397.277417][ C1] usblp0: nonzero write bulk status received: -71 [ 1397.279094][ T196] usb 7-1: USB disconnect, device number 4 [ 1397.348032][ T196] usblp0: removed [ 1397.831731][ T196] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1398.625279][ T196] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1398.630127][ T196] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1398.630166][ T196] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1398.630188][ T196] usb 8-1: Product: syz [ 1398.630202][ T196] usb 8-1: Manufacturer: syz [ 1398.630217][ T196] usb 8-1: SerialNumber: syz [ 1399.580904][ T196] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1399.900265][ T821] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1399.922088][ C0] usblp0: nonzero write bulk status received: -71 [ 1399.927655][T10382] usb 8-1: USB disconnect, device number 3 [ 1399.945884][T10382] usblp0: removed [ 1400.093369][ T821] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1400.093424][ T821] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1400.093450][ T821] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.094694][ T821] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1400.094744][ T821] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1400.094769][ T821] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.097256][ T821] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1400.097313][ T821] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1400.097339][ T821] usb 7-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.107519][ T821] usb 7-1: string descriptor 0 read error: -22 [ 1400.107662][ T821] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1400.107686][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.129160][ T821] adutux 7-1:168.0: interrupt endpoints not found [ 1400.366988][ T36] usb 7-1: USB disconnect, device number 5 [ 1400.549367][T16044] binder: BINDER_SET_CONTEXT_MGR already set [ 1400.549383][T16044] binder: 16043:16044 ioctl 4018620d 200000004a80 returned -16 [ 1400.791205][T13811] hsr_slave_0: left promiscuous mode [ 1400.834370][T13811] hsr_slave_1: left promiscuous mode [ 1400.836601][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.836629][T13811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.892271][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.892299][T13811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.058488][T13811] veth1_macvtap: left promiscuous mode [ 1401.058595][T13811] veth0_macvtap: left promiscuous mode [ 1401.059131][T13811] veth1_vlan: left promiscuous mode [ 1401.059313][T13811] veth0_vlan: left promiscuous mode [ 1401.211090][ T5707] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1401.362976][ T5707] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1401.365083][ T5707] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1401.365112][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1401.365137][ T5707] usb 7-1: Product: syz [ 1401.365145][ T5707] usb 7-1: Manufacturer: syz [ 1401.365153][ T5707] usb 7-1: SerialNumber: syz [ 1401.634252][ T5707] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1402.012403][ C1] usblp0: nonzero write bulk status received: -71 [ 1402.013094][T10382] usb 7-1: USB disconnect, device number 6 [ 1402.049492][T10382] usblp0: removed [ 1402.137653][ T5707] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1402.332810][ T5707] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1402.335079][ T5707] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1402.335105][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1402.335116][ T5707] usb 6-1: Product: syz [ 1402.335124][ T5707] usb 6-1: Manufacturer: syz [ 1402.335132][ T5707] usb 6-1: SerialNumber: syz [ 1402.671222][ T5707] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1402.872314][T10382] usb 6-1: USB disconnect, device number 6 [ 1402.908804][T10382] usblp0: removed [ 1403.371906][T13811] team0 (unregistering): Port device team_slave_1 removed [ 1403.431807][T13811] team0 (unregistering): Port device team_slave_0 removed [ 1403.791131][ T5707] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1404.014316][ T5707] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1404.017619][ T5707] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1404.017646][ T5707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1404.017665][ T5707] usb 8-1: Product: syz [ 1404.017677][ T5707] usb 8-1: Manufacturer: syz [ 1404.017692][ T5707] usb 8-1: SerialNumber: syz [ 1404.240273][ T5707] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1404.556340][ C0] usblp0: nonzero write bulk status received: -71 [ 1404.557699][T14302] usb 8-1: USB disconnect, device number 4 [ 1404.578450][T14302] usblp0: removed [ 1405.221340][ T36] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1405.373316][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1405.376080][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1405.376110][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1405.376130][ T36] usb 6-1: Product: syz [ 1405.376145][ T36] usb 6-1: Manufacturer: syz [ 1405.376159][ T36] usb 6-1: SerialNumber: syz [ 1405.840527][ T36] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1405.981341][ T36] usb 6-1: USB disconnect, device number 7 [ 1405.990403][ T36] usblp0: removed [ 1407.352673][ T36] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1407.503439][ T36] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.506161][ T36] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1407.506190][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1407.506211][ T36] usb 2-1: Product: syz [ 1407.506225][ T36] usb 2-1: Manufacturer: syz [ 1407.506239][ T36] usb 2-1: SerialNumber: syz [ 1407.807226][ T36] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1408.072016][ T36] usb 2-1: USB disconnect, device number 68 [ 1408.167656][ T36] usblp0: removed [ 1408.854862][T15780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1408.902345][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1408.903536][T15780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1408.948575][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1409.001077][ T36] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1409.020100][T15780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1409.132354][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1409.133616][T15780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1409.157661][ T36] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1409.176992][ T36] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1409.177022][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1409.177040][ T36] usb 7-1: Product: syz [ 1409.177055][ T36] usb 7-1: Manufacturer: syz [ 1409.177069][ T36] usb 7-1: SerialNumber: syz [ 1409.240708][T15780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1409.506864][ T36] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1409.945035][T15780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.066691][T15780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.129670][T13811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.130538][T13811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.284507][T13811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.284657][T13811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.365186][ T36] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1412.601998][ T36] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.649829][ T36] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1412.653254][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1412.653288][ T36] usb 6-1: Product: syz [ 1412.653302][ T36] usb 6-1: Manufacturer: syz [ 1412.653314][ T36] usb 6-1: SerialNumber: syz [ 1412.987101][ T36] usblp 6-1:1.0: usblp1: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1413.013166][T15780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.238981][ T5590] usb 6-1: USB disconnect, device number 8 [ 1413.267528][ T5590] usblp1: removed [ 1413.630331][T15780] veth0_vlan: entered promiscuous mode [ 1413.647078][T15780] veth1_vlan: entered promiscuous mode [ 1414.696174][T15780] veth0_macvtap: entered promiscuous mode [ 1414.898401][T15780] veth1_macvtap: entered promiscuous mode [ 1414.972227][T15780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.999733][T15780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.204804][ T6901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.205586][ T6901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.206387][ T6901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.208615][ T6901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.312911][T12484] usb 7-1: USB disconnect, device number 7 [ 1416.340203][T12484] usblp0: removed [ 1417.330811][ T6908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.330832][ T6908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.493226][ T820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.493248][ T820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.561144][ T196] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1417.735447][ T196] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1417.740211][ T196] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1417.740240][ T196] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1417.740261][ T196] usb 6-1: Product: syz [ 1417.740289][ T196] usb 6-1: Manufacturer: syz [ 1417.740304][ T196] usb 6-1: SerialNumber: syz [ 1418.349785][ T196] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1418.363768][ T196] usb 6-1: USB disconnect, device number 9 [ 1418.405773][ T196] usblp0: removed [ 1418.703617][T13517] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1418.706882][T13517] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1418.737944][T13517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1418.775043][T13517] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1418.777418][T13517] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1420.456655][ T5610] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1420.623187][ T5610] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1420.623238][ T5610] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1420.623264][ T5610] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.624424][ T5610] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1420.624468][ T5610] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1420.624494][ T5610] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.625473][ T5610] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1420.625513][ T5610] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1420.625538][ T5610] usb 8-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1420.628697][ T5610] usb 8-1: string descriptor 0 read error: -22 [ 1420.628890][ T5610] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1420.628913][ T5610] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.799156][ T5610] adutux 8-1:168.0: interrupt endpoints not found [ 1420.901146][ T196] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1420.994928][T13517] Bluetooth: hci4: command tx timeout [ 1421.008199][ T36] usb 8-1: USB disconnect, device number 5 [ 1421.134455][ T196] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.142574][ T196] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1421.142602][ T196] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1421.142621][ T196] usb 4-1: Product: syz [ 1421.142635][ T196] usb 4-1: Manufacturer: syz [ 1421.142650][ T196] usb 4-1: SerialNumber: syz [ 1421.431615][ T196] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1421.453682][ T196] usb 4-1: USB disconnect, device number 71 [ 1421.458146][ T196] usblp0: removed [ 1422.474716][T13811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.837293][T16427] ima: policy update failed [ 1422.837490][ T37] kauditd_printk_skb: 24 callbacks suppressed [ 1422.837502][ T37] audit: type=1802 audit(1785513426.416:66): pid=16427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.7.2365" res=0 errno=0 [ 1423.062892][T13517] Bluetooth: hci4: command tx timeout [ 1423.283760][T13811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.534988][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1423.564379][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1423.578728][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1423.608565][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1423.620040][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1424.089861][T13811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.653063][T12484] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1424.690681][T13811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.815283][T12484] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.818958][T12484] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1424.818986][T12484] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1424.819006][T12484] usb 8-1: Product: syz [ 1424.819018][T12484] usb 8-1: Manufacturer: syz [ 1424.819031][T12484] usb 8-1: SerialNumber: syz [ 1425.083548][T12484] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1425.100662][T12484] usb 8-1: USB disconnect, device number 6 [ 1425.205524][ T5621] Bluetooth: hci4: command tx timeout [ 1425.291524][T12484] usblp0: removed [ 1425.782439][ T5621] Bluetooth: hci0: command tx timeout [ 1425.979436][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.979550][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.979905][T16361] bridge_slave_0: entered allmulticast mode [ 1425.987222][T16361] bridge_slave_0: entered promiscuous mode [ 1426.056837][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.056938][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.057126][T16361] bridge_slave_1: entered allmulticast mode [ 1426.058710][T16361] bridge_slave_1: entered promiscuous mode [ 1426.201126][T10382] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1426.354485][T10382] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.356895][T10382] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1426.356921][T10382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1426.356933][T10382] usb 8-1: Product: syz [ 1426.356940][T10382] usb 8-1: Manufacturer: syz [ 1426.356948][T10382] usb 8-1: SerialNumber: syz [ 1426.565037][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.678893][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.692536][T10382] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1426.801212][ T5707] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1426.954262][ T5707] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.958038][ T5707] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1426.958069][ T5707] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1426.958292][ T5707] usb 7-1: Product: syz [ 1426.958308][ T5707] usb 7-1: Manufacturer: syz [ 1426.958323][ T5707] usb 7-1: SerialNumber: syz [ 1427.036927][ C1] usblp0: nonzero write bulk status received: -71 [ 1427.039821][T12484] usb 8-1: USB disconnect, device number 7 [ 1427.140166][T12484] usblp0: removed [ 1427.231144][ T5621] Bluetooth: hci4: command tx timeout [ 1427.299885][ T5707] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1427.349505][ T5707] usb 7-1: USB disconnect, device number 8 [ 1427.390481][T16361] team0: Port device team_slave_0 added [ 1427.432743][ T5707] usblp0: removed [ 1427.441271][T16361] team0: Port device team_slave_1 added [ 1427.874151][ T5621] Bluetooth: hci0: command tx timeout [ 1428.185751][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.185814][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.033834][T13811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.113641][T13811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.171278][T13811] bond0 (unregistering): Released all slaves [ 1429.405171][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.405189][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.405218][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1429.424258][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1429.424284][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1429.424310][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.451189][ T196] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1429.673192][ T196] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.675289][ T196] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1429.675318][ T196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1429.675336][ T196] usb 7-1: Product: syz [ 1429.675349][ T196] usb 7-1: Manufacturer: syz [ 1429.675363][ T196] usb 7-1: SerialNumber: syz [ 1429.928527][ T196] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1429.942871][ T5621] Bluetooth: hci0: command tx timeout [ 1429.944768][ T196] usb 7-1: USB disconnect, device number 9 [ 1429.967573][ T196] usblp0: removed [ 1430.321129][T10382] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1430.344751][T16361] hsr_slave_0: entered promiscuous mode [ 1430.346127][T16361] hsr_slave_1: entered promiscuous mode [ 1430.349826][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 1430.349852][T16361] Cannot create hsr debugfs directory [ 1430.503991][T10382] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1430.554956][T10382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1430.554986][T10382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1430.555004][T10382] usb 4-1: Product: syz [ 1430.555018][T10382] usb 4-1: Manufacturer: syz [ 1430.555030][T10382] usb 4-1: SerialNumber: syz [ 1430.933134][T10382] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1431.250825][ C1] usblp0: nonzero write bulk status received: -71 [ 1431.262211][T10382] usb 4-1: USB disconnect, device number 72 [ 1431.348705][T10382] usblp0: removed [ 1432.032089][ T5621] Bluetooth: hci0: command tx timeout [ 1432.066965][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1432.261440][T13811] hsr_slave_0: left promiscuous mode [ 1432.336030][T13811] hsr_slave_1: left promiscuous mode [ 1432.336741][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1432.336759][T13811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.392234][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1432.392264][T13811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.550914][T13811] veth1_macvtap: left promiscuous mode [ 1432.556756][T13811] veth0_macvtap: left promiscuous mode [ 1432.556992][T13811] veth1_vlan: left promiscuous mode [ 1432.557132][T13811] veth0_vlan: left promiscuous mode [ 1433.872848][T13811] team0 (unregistering): Port device team_slave_1 removed [ 1433.953336][T13811] team0 (unregistering): Port device team_slave_0 removed [ 1434.399738][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.399872][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.400101][T16434] bridge_slave_0: entered allmulticast mode [ 1434.425326][T16434] bridge_slave_0: entered promiscuous mode [ 1434.665747][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.665965][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.666194][T16434] bridge_slave_1: entered allmulticast mode [ 1434.668862][T16434] bridge_slave_1: entered promiscuous mode [ 1434.885233][T16434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.905965][T16434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.180246][ T5621] Bluetooth: hci3: link tx timeout [ 1435.180432][ T5621] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.391299][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.638358][T16434] team0: Port device team_slave_0 added [ 1435.862575][T16434] team0: Port device team_slave_1 added [ 1436.534959][T16654] netlink: 'syz.6.2442': attribute type 1 has an invalid length. [ 1436.534981][T16654] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2442'. [ 1436.749544][ T37] audit: type=1326 audit(1785513440.006:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16648 comm="syz.6.2442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54378ae019 code=0x0 [ 1437.645854][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 1437.874417][T16666] ima: policy update failed [ 1437.874580][ T37] audit: type=1802 audit(1785513441.456:68): pid=16666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.2446" res=0 errno=0 [ 1437.878642][T16434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.878657][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.878684][T16434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.958040][T16434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.958051][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.958066][T16434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.672553][T16434] hsr_slave_0: entered promiscuous mode [ 1438.689141][T16434] hsr_slave_1: entered promiscuous mode [ 1438.702750][T16434] debugfs: 'hsr0' already exists in 'hsr' [ 1438.702779][T16434] Cannot create hsr debugfs directory [ 1439.788935][ T37] audit: type=1326 audit(1785513443.196:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16689 comm="syz.3.2452" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1440.058285][T16700] sit0: entered promiscuous mode [ 1440.063680][T16700] netlink: 'syz.3.2452': attribute type 1 has an invalid length. [ 1440.063703][T16700] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2452'. [ 1441.135473][T16718] fuse: Unknown parameter 'grou00000000000000000000' [ 1442.026404][T13811] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.628314][ T37] audit: type=1326 audit(1785513445.816:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16723 comm="syz.3.2465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1442.725072][T16731] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 1442.725096][T16731] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1444.212880][T16749] fuse: Unknown parameter 'grou00000000000000000000' [ 1444.929753][T13811] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.645951][T16773] sit0: entered promiscuous mode [ 1445.651476][T16773] netlink: 'syz.7.2476': attribute type 1 has an invalid length. [ 1445.651496][T16773] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2476'. [ 1447.747776][T13811] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.792824][T16809] netlink: 'syz.7.2487': attribute type 1 has an invalid length. [ 1447.792849][T16809] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2487'. [ 1447.966957][T13517] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1448.575914][T13811] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.794775][T16361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1449.011352][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1449.093917][T16361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1450.145161][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1450.146125][T16849] netlink: 'syz.6.2498': attribute type 1 has an invalid length. [ 1450.146144][T16849] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2498'. [ 1450.306115][T16361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1450.378163][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.244997][T16361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1451.281052][T16361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.992083][ T37] audit: type=1326 audit(1785513455.506:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16877 comm="syz.6.2508" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54378ae019 code=0x0 [ 1452.116920][T16885] netlink: 'syz.6.2508': attribute type 1 has an invalid length. [ 1452.116943][T16885] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1452.760072][T16893] binder: 16892:16893 ioctl 4018620d 0 returned -22 [ 1452.876429][T16434] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1452.965958][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1453.230334][T16434] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1453.259835][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1453.274266][T16434] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1453.307306][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1453.496350][T16434] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1453.540146][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1454.032149][ T37] audit: type=1326 audit(1785513457.496:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16908 comm="syz.3.2520" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1454.522219][T13811] bridge_slave_1: left allmulticast mode [ 1454.522270][T13811] bridge_slave_1: left promiscuous mode [ 1454.522530][T13811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.620954][T16924] binder: 16923:16924 ioctl c0306201 0 returned -14 [ 1454.665010][T13811] bridge_slave_0: left allmulticast mode [ 1454.665045][T13811] bridge_slave_0: left promiscuous mode [ 1454.665368][T13811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.822181][T13517] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1454.822223][T13517] CPU: 0 UID: 0 PID: 13517 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1454.822252][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.822265][T13517] Workqueue: hci5 hci_rx_work [ 1454.822554][T13517] Call Trace: [ 1454.822600][T13517] [ 1454.822713][T13517] dump_stack_lvl+0xe8/0x150 [ 1454.822900][T13517] sysfs_create_dir_ns+0x271/0x2a0 [ 1454.822981][T13517] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1454.823040][T13517] ? rt_spin_unlock+0x163/0x200 [ 1454.823125][T13517] kobject_add_internal+0x62c/0xce0 [ 1454.823219][T13517] kobject_add+0x163/0x240 [ 1454.823247][T13517] ? rt_spin_unlock+0x157/0x200 [ 1454.823271][T13517] ? __pfx_kobject_add+0x10/0x10 [ 1454.823307][T13517] ? get_device_parent+0x370/0x3a0 [ 1454.823396][T13517] device_add+0x3fa/0xb80 [ 1454.823422][T13517] hci_conn_add_sysfs+0xd5/0x210 [ 1454.823475][T13517] le_conn_complete_evt+0xfef/0x1580 [ 1454.823566][T13517] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1454.823595][T13517] ? lockdep_hardirqs_on+0x7a/0x110 [ 1454.823648][T13517] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1454.823698][T13517] ? rt_mutex_slowunlock+0x219/0x460 [ 1454.823720][T13517] ? skb_pull_data+0xf0/0x200 [ 1454.823836][T13517] hci_le_conn_complete_evt+0x187/0x470 [ 1454.823871][T13517] hci_event_packet+0x67a/0xf10 [ 1454.823902][T13517] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1454.823928][T13517] ? __pfx_hci_event_packet+0x10/0x10 [ 1454.823950][T13517] ? rt_spin_unlock+0x157/0x200 [ 1454.823978][T13517] ? hci_send_to_monitor+0xe2/0x590 [ 1454.824038][T13517] hci_rx_work+0x3ee/0x1020 [ 1454.824071][T13517] ? process_scheduled_works+0xa20/0x14e0 [ 1454.824146][T13517] process_scheduled_works+0xa8e/0x14e0 [ 1454.824199][T13517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1454.824229][T13517] ? assign_work+0x3cf/0x5d0 [ 1454.824259][T13517] worker_thread+0xa47/0xfb0 [ 1454.824323][T13517] ? __kthread_parkme+0x71/0x1f0 [ 1454.824362][T13517] kthread+0x388/0x470 [ 1454.824417][T13517] ? __pfx_worker_thread+0x10/0x10 [ 1454.824439][T13517] ? __pfx_kthread+0x10/0x10 [ 1454.824469][T13517] ret_from_fork+0x514/0xb70 [ 1454.824564][T13517] ? __pfx_ret_from_fork+0x10/0x10 [ 1454.824595][T13517] ? __switch_to+0xc89/0x1420 [ 1454.824653][T13517] ? __pfx_kthread+0x10/0x10 [ 1454.824684][T13517] ret_from_fork_asm+0x1a/0x30 [ 1454.824721][T13517] [ 1454.824817][T13517] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1454.824962][T13517] Bluetooth: hci5: failed to register connection device [ 1455.761670][T13811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1455.842406][T13811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1455.863359][T13811] bond0 (unregistering): Released all slaves [ 1455.901280][T16920] netlink: 'syz.3.2520': attribute type 1 has an invalid length. [ 1455.901304][T16920] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2520'. [ 1456.192151][T13811] tipc: Left network mode [ 1456.200293][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.308119][T16935] udc dummy_udc.0: soft-connect without a gadget driver [ 1456.428618][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.471109][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.471327][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.526755][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.526942][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1456.653856][T13517] Bluetooth: hci3: ACL packet for unknown connection handle 3584 [ 1456.712420][T16434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.953890][T16950] binder: 16949:16950 ioctl c0306201 0 returned -14 [ 1457.062475][T16434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.199384][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.209808][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.428846][T16965] fuse: Bad value for 'fd' [ 1457.600345][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.882199][T13517] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1457.882229][T13517] CPU: 1 UID: 0 PID: 13517 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1457.882254][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1457.882273][T13517] Workqueue: hci2 hci_rx_work [ 1457.882305][T13517] Call Trace: [ 1457.882314][T13517] [ 1457.882324][T13517] dump_stack_lvl+0xe8/0x150 [ 1457.882359][T13517] sysfs_create_dir_ns+0x271/0x2a0 [ 1457.882386][T13517] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1457.882421][T13517] ? rt_spin_unlock+0x163/0x200 [ 1457.882446][T13517] kobject_add_internal+0x62c/0xce0 [ 1457.882487][T13517] kobject_add+0x163/0x240 [ 1457.882514][T13517] ? rt_spin_unlock+0x157/0x200 [ 1457.882540][T13517] ? __pfx_kobject_add+0x10/0x10 [ 1457.882577][T13517] ? get_device_parent+0x370/0x3a0 [ 1457.882609][T13517] device_add+0x3fa/0xb80 [ 1457.882637][T13517] hci_conn_add_sysfs+0xd5/0x210 [ 1457.882664][T13517] le_conn_complete_evt+0xfef/0x1580 [ 1457.882704][T13517] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1457.882733][T13517] ? lockdep_hardirqs_on+0x7a/0x110 [ 1457.882759][T13517] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1457.882786][T13517] ? rt_mutex_slowunlock+0x219/0x460 [ 1457.882808][T13517] ? skb_pull_data+0xf0/0x200 [ 1457.882842][T13517] hci_le_conn_complete_evt+0x187/0x470 [ 1457.882877][T13517] hci_event_packet+0x67a/0xf10 [ 1457.882909][T13517] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1457.882936][T13517] ? __pfx_hci_event_packet+0x10/0x10 [ 1457.882960][T13517] ? rt_spin_unlock+0x157/0x200 [ 1457.882989][T13517] ? hci_send_to_monitor+0xe2/0x590 [ 1457.883024][T13517] hci_rx_work+0x3ee/0x1020 [ 1457.883057][T13517] ? process_scheduled_works+0xa20/0x14e0 [ 1457.883082][T13517] process_scheduled_works+0xa8e/0x14e0 [ 1457.883137][T13517] ? __pfx_process_scheduled_works+0x10/0x10 [ 1457.883169][T13517] ? assign_work+0x3cf/0x5d0 [ 1457.883199][T13517] worker_thread+0xa47/0xfb0 [ 1457.883238][T13517] ? __kthread_parkme+0x71/0x1f0 [ 1457.883276][T13517] kthread+0x388/0x470 [ 1457.883306][T13517] ? __pfx_worker_thread+0x10/0x10 [ 1457.883330][T13517] ? __pfx_kthread+0x10/0x10 [ 1457.883362][T13517] ret_from_fork+0x514/0xb70 [ 1457.883396][T13517] ? __pfx_ret_from_fork+0x10/0x10 [ 1457.883433][T13517] ? __switch_to+0xc89/0x1420 [ 1457.883463][T13517] ? __pfx_kthread+0x10/0x10 [ 1457.883495][T13517] ret_from_fork_asm+0x1a/0x30 [ 1457.883534][T13517] [ 1457.888751][T13517] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1457.888801][T13517] Bluetooth: hci2: failed to register connection device [ 1458.298047][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.968502][T16993] binder: 16991:16993 ioctl c0306201 0 returned -14 [ 1459.097634][ T5262] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1459.481063][ T821] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1459.633384][ T821] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1459.635729][ T821] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1459.635758][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1459.635778][ T821] usb 7-1: Product: syz [ 1459.635792][ T821] usb 7-1: Manufacturer: syz [ 1459.635807][ T821] usb 7-1: SerialNumber: syz [ 1459.826841][ T5621] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1459.887361][ T821] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1460.391373][T13811] hsr_slave_0: left promiscuous mode [ 1460.442499][T13811] hsr_slave_1: left promiscuous mode [ 1460.443584][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.443610][T13811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.486667][T13811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.486696][T13811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.595671][T13811] veth1_macvtap: left promiscuous mode [ 1460.595773][T13811] veth0_macvtap: left promiscuous mode [ 1460.596016][T13811] veth1_vlan: left promiscuous mode [ 1460.596199][T13811] veth0_vlan: left promiscuous mode [ 1461.562002][T13811] team0 (unregistering): Port device team_slave_1 removed [ 1461.602240][T13811] team0 (unregistering): Port device team_slave_0 removed [ 1461.844965][T17037] tipc: Started in network mode [ 1461.844998][T17037] tipc: Node identity aa301de49689, cluster identity 4711 [ 1461.864018][T17037] tipc: Enabled bearer , priority 0 [ 1461.878505][T17045] syzkaller0: entered promiscuous mode [ 1461.878530][T17045] syzkaller0: entered allmulticast mode [ 1461.907067][ T5262] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1461.931308][T17031] tipc: Resetting bearer [ 1462.082747][T17031] tipc: Disabling bearer [ 1462.146702][ T821] usb 7-1: USB disconnect, device number 10 [ 1462.168577][ T821] usblp0: removed [ 1462.340135][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.609912][T16361] veth0_vlan: entered promiscuous mode [ 1462.646792][T16361] veth1_vlan: entered promiscuous mode [ 1462.820171][T16361] veth0_macvtap: entered promiscuous mode [ 1462.828216][T16361] veth1_macvtap: entered promiscuous mode [ 1462.938391][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1462.984031][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.686927][ T6886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.711284][ T6901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.711908][ T6901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.719199][T16434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1463.852880][ T6908] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.795394][ T6884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.795416][ T6884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.174171][ T6890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.174192][ T6890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.511623][ T5262] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1465.729548][T16434] veth0_vlan: entered promiscuous mode [ 1465.753708][T16434] veth1_vlan: entered promiscuous mode [ 1465.862128][T16434] veth0_macvtap: entered promiscuous mode [ 1465.882029][T16434] veth1_macvtap: entered promiscuous mode [ 1465.948430][T16434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.019435][T16434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.071097][T12484] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1466.101263][ T5621] Bluetooth: hci5: command 0x0406 tx timeout [ 1466.258332][T12484] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1466.261146][T12484] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1466.261176][T12484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1466.261194][T12484] usb 2-1: Product: syz [ 1466.261208][T12484] usb 2-1: Manufacturer: syz [ 1466.261222][T12484] usb 2-1: SerialNumber: syz [ 1466.362869][ T1363] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.363332][ T1363] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.385488][ T6890] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.385556][ T6890] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.487386][T12484] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1467.636198][ C0] usblp0: nonzero write bulk status received: -71 [ 1467.656022][T10382] usb 2-1: USB disconnect, device number 69 [ 1467.698230][T10382] usblp0: removed [ 1468.537608][ T820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.537631][ T820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.825856][ T6889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.825878][ T6889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.883862][ T5262] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1470.135680][T17197] binder: 17196:17197 ioctl c0306201 0 returned -14 [ 1475.779149][T17315] netlink: 'syz.6.2636': attribute type 39 has an invalid length. [ 1482.195315][T17388] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1482.682446][T13517] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1485.743840][T17476] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2694'. [ 1485.779996][T17472] gadgetfs: bound to dummy_udc driver [ 1486.001872][T17470] gadgetfs: suspended from state 2 [ 1486.026682][ T5707] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1486.098811][T17487] 0x000000000010-0x000000000020 : "" [ 1486.828910][T17487] ftl_cs: FTL header corrupt! [ 1487.810218][T17538] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2716'. [ 1489.643585][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.643657][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.985463][T17574] Bluetooth: MGMT ver 1.23 [ 1490.428235][T17587] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2732'. [ 1491.045082][T17614] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1491.435698][T17626] ip6gre1: entered allmulticast mode [ 1491.438831][ T6886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1491.740407][ T37] audit: type=1326 audit(1785513751.301:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17622 comm="syz.1.2745" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6308dce019 code=0x0 [ 1491.831375][T17634] sit0: entered promiscuous mode [ 1491.836719][T17634] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 1491.836741][T17634] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2745'. [ 1492.027986][ T5621] Bluetooth: hci0: command tx timeout [ 1494.303537][T17678] fuse: Unknown parameter 'fd0x0000000000000004' [ 1494.534692][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2764'. [ 1495.639899][ T5621] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1495.701130][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1496.457605][T17753] netlink: 'syz.1.2779': attribute type 9 has an invalid length. [ 1496.457627][T17753] netlink: 'syz.1.2779': attribute type 6 has an invalid length. [ 1496.457640][T17753] netlink: 'syz.1.2779': attribute type 7 has an invalid length. [ 1496.457652][T17753] netlink: 'syz.1.2779': attribute type 8 has an invalid length. [ 1496.636263][T17759] bridge_slave_0: left allmulticast mode [ 1496.636299][T17759] bridge_slave_0: left promiscuous mode [ 1496.636570][T17759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.997803][T17759] bridge_slave_1: left allmulticast mode [ 1496.997837][T17759] bridge_slave_1: left promiscuous mode [ 1497.015658][T17759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.202543][T17759] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.287412][T17759] bond0: (slave bond_slave_1): Releasing backup interface [ 1497.393940][T17759] team0: Port device team_slave_0 removed [ 1497.442109][T17759] team0: Port device team_slave_1 removed [ 1497.445645][T17759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1497.445665][T17759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1497.512967][T17759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1497.512998][T17759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1497.697482][T17759] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1497.776822][T17764] team0: Port device xfrm0 added [ 1498.707771][T17838] netlink: 'syz.7.2815': attribute type 10 has an invalid length. [ 1499.142375][T17838] syz_tun: entered promiscuous mode [ 1499.226974][T17838] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1499.272319][T17852] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1499.949692][T17875] gadgetfs: bound to dummy_udc driver [ 1499.957763][ T37] audit: type=1326 audit(1785513759.531:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17863 comm="syz.3.2830" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1500.055171][T17880] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 1500.055192][T17880] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2830'. [ 1501.531409][T17869] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1502.921141][ T5734] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1502.966072][ T37] audit: type=1326 audit(1785513762.551:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17918 comm="syz.3.2850" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1503.073137][T17937] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 1503.073158][T17937] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2850'. [ 1503.101823][ T5734] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1503.105010][ T5734] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1503.105038][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1503.105058][ T5734] usb 2-1: Product: syz [ 1503.105072][ T5734] usb 2-1: Manufacturer: syz [ 1503.105085][ T5734] usb 2-1: SerialNumber: syz [ 1504.066573][T17938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1504.139110][ T5734] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1504.160348][ T5734] usb 2-1: USB disconnect, device number 70 [ 1504.187092][ T5734] usblp0: removed [ 1504.341115][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1504.479117][T17958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 1506.097710][T17986] netlink: 'syz.6.2873': attribute type 10 has an invalid length. [ 1506.159224][T17986] syz_tun: entered promiscuous mode [ 1506.213298][T17986] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1506.408532][T17988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2874'. [ 1507.001065][ T5734] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1507.187142][ T5734] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1507.205819][ T5734] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1507.205851][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1507.205871][ T5734] usb 2-1: Product: syz [ 1507.205885][ T5734] usb 2-1: Manufacturer: syz [ 1507.205900][ T5734] usb 2-1: SerialNumber: syz [ 1507.221550][T13517] Bluetooth: hci2: command 0x0406 tx timeout [ 1508.402815][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2892'. [ 1508.508017][ T5734] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1508.610319][ T5734] usb 2-1: USB disconnect, device number 71 [ 1508.688029][ T5734] usblp0: removed [ 1509.240434][T18046] binder_alloc: 18045: binder_alloc_buf, no vma [ 1509.951373][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2904'. [ 1509.963759][ T5621] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1511.588963][ T5621] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1511.588990][ T5621] CPU: 0 UID: 0 PID: 5621 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1511.589016][ T5621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1511.589030][ T5621] Workqueue: hci4 hci_rx_work [ 1511.589063][ T5621] Call Trace: [ 1511.589072][ T5621] [ 1511.589082][ T5621] dump_stack_lvl+0xe8/0x150 [ 1511.589121][ T5621] sysfs_create_dir_ns+0x271/0x2a0 [ 1511.589147][ T5621] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1511.589174][ T5621] ? rt_spin_unlock+0x163/0x200 [ 1511.589202][ T5621] kobject_add_internal+0x62c/0xce0 [ 1511.589241][ T5621] kobject_add+0x163/0x240 [ 1511.589268][ T5621] ? rt_spin_unlock+0x157/0x200 [ 1511.589294][ T5621] ? __pfx_kobject_add+0x10/0x10 [ 1511.589329][ T5621] ? get_device_parent+0x370/0x3a0 [ 1511.589361][ T5621] device_add+0x3fa/0xb80 [ 1511.589389][ T5621] hci_conn_add_sysfs+0xd5/0x210 [ 1511.589416][ T5621] le_conn_complete_evt+0xfef/0x1580 [ 1511.589455][ T5621] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1511.589483][ T5621] ? lockdep_hardirqs_on+0x7a/0x110 [ 1511.589518][ T5621] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1511.589545][ T5621] ? rt_mutex_slowunlock+0x219/0x460 [ 1511.589566][ T5621] ? skb_pull_data+0xf0/0x200 [ 1511.589601][ T5621] hci_le_conn_complete_evt+0x187/0x470 [ 1511.589636][ T5621] hci_event_packet+0x67a/0xf10 [ 1511.589667][ T5621] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1511.589693][ T5621] ? __pfx_hci_event_packet+0x10/0x10 [ 1511.589717][ T5621] ? rt_spin_unlock+0x157/0x200 [ 1511.589746][ T5621] ? hci_send_to_monitor+0xe2/0x590 [ 1511.589780][ T5621] hci_rx_work+0x3ee/0x1020 [ 1511.589811][ T5621] ? process_scheduled_works+0xa20/0x14e0 [ 1511.589835][ T5621] process_scheduled_works+0xa8e/0x14e0 [ 1511.589883][ T5621] ? __pfx_process_scheduled_works+0x10/0x10 [ 1511.589915][ T5621] ? assign_work+0x3cf/0x5d0 [ 1511.589941][ T5621] worker_thread+0xa47/0xfb0 [ 1511.589992][ T5621] kthread+0x388/0x470 [ 1511.590019][ T5621] ? __pfx_worker_thread+0x10/0x10 [ 1511.590041][ T5621] ? __pfx_kthread+0x10/0x10 [ 1511.590066][ T5621] ret_from_fork+0x514/0xb70 [ 1511.590101][ T5621] ? __pfx_ret_from_fork+0x10/0x10 [ 1511.590131][ T5621] ? __switch_to+0xc89/0x1420 [ 1511.590159][ T5621] ? __pfx_kthread+0x10/0x10 [ 1511.590189][ T5621] ret_from_fork_asm+0x1a/0x30 [ 1511.590225][ T5621] [ 1511.590254][ T5621] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1511.590295][ T5621] Bluetooth: hci4: failed to register connection device [ 1511.882530][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 1514.311158][ T5707] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1514.314724][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1514.463445][ T5707] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1514.467091][ T5707] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1514.467293][ T5707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1514.467456][ T5707] usb 8-1: Product: syz [ 1514.467472][ T5707] usb 8-1: Manufacturer: syz [ 1514.467486][ T5707] usb 8-1: SerialNumber: syz [ 1514.680738][T18140] netlink: 'syz.3.2936': attribute type 39 has an invalid length. [ 1515.564161][ T5707] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1515.599408][ T5707] usb 8-1: USB disconnect, device number 8 [ 1515.622157][ T5707] usblp0: removed [ 1519.030881][T18196] 0x000000000000-0x000000020000 : "" [ 1519.089866][T18196] ftl_cs: FTL header not found. [ 1520.342313][T17501] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1521.346841][T17501] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1521.385431][T17501] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1521.385462][T17501] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1521.385482][T17501] usb 8-1: Product: syz [ 1521.385495][T17501] usb 8-1: Manufacturer: syz [ 1521.385508][T17501] usb 8-1: SerialNumber: syz [ 1522.271935][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1523.205784][T17501] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1523.234539][T17501] usb 8-1: USB disconnect, device number 9 [ 1523.255636][T17501] usblp0: removed [ 1542.484971][T18352] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1543.207556][T18394] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1544.697913][T13517] Bluetooth: hci4: command 0x0406 tx timeout [ 1547.223485][T18450] macsec1: entered promiscuous mode [ 1547.223515][T18450] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1547.224350][T18450] macsec1: entered allmulticast mode [ 1547.224374][T18450] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1547.227426][T18450] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1547.343089][T18450] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 1547.888175][T18472] binder: 18471:18472 ioctl c0306201 0 returned -14 [ 1547.944460][T18474] binder: 18471:18474 ioctl c0306201 0 returned -14 [ 1547.945126][T18474] binder: 18471:18474 ioctl 40189206 0 returned -22 [ 1549.372047][T17501] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1551.088200][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.103859][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.726557][T18671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3144'. [ 1556.790920][ T37] audit: type=1326 audit(1785513816.371:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18662 comm="syz.7.3141" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf464ee019 code=0x0 [ 1557.998847][T18679] netlink: 'syz.7.3141': attribute type 1 has an invalid length. [ 1557.998872][T18679] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3141'. [ 1559.113700][T18704] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3156'. [ 1559.426201][T18713] netlink: 'syz.3.3160': attribute type 9 has an invalid length. [ 1559.426224][T18713] netlink: 'syz.3.3160': attribute type 6 has an invalid length. [ 1560.021169][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1562.443151][ T37] audit: type=1326 audit(1785513822.031:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18740 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2fd64e019 code=0x0 [ 1562.768681][T18741] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 1562.768704][T18741] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3173'. [ 1564.549398][T18708] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 1564.563529][T18708] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000121: 0000 [#1] SMP KASAN PTI [ 1564.563650][T18708] KASAN: null-ptr-deref in range [0x0000000000000908-0x000000000000090f] [ 1564.563673][T18708] CPU: 0 UID: 0 PID: 18708 Comm: syz.1.3158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1564.563703][T18708] Tainted: [L]=SOFTLOCKUP [ 1564.563712][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1564.563730][T18708] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 1564.563855][T18708] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 92 11 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 72 11 eb fa 4d 8b 3f 49 83 c7 30 [ 1564.563874][T18708] RSP: 0018:ffffc9000712f710 EFLAGS: 00010206 [ 1564.563899][T18708] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 1564.563911][T18708] RDX: ffffc900202e3000 RSI: 000000000001c244 RDI: 000000000001c245 [ 1564.563925][T18708] RBP: 1ffff11006aee943 R08: ffffffff8faf9f37 R09: 1ffffffff1f5f3e6 [ 1564.563939][T18708] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: fffffffffffffffc [ 1564.563956][T18708] R13: dffffc0000000000 R14: ffff888035774a18 R15: 0000000000000908 [ 1564.563971][T18708] FS: 00007f63070266c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1564.563990][T18708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1564.564004][T18708] CR2: 00005555857aca38 CR3: 00000000608bc000 CR4: 00000000003526f0 [ 1564.564022][T18708] Call Trace: [ 1564.564031][T18708] [ 1564.564042][T18708] uvc_function_bind+0x1076/0x15a0 [ 1564.564077][T18708] usb_add_function+0x290/0x930 [ 1564.564150][T18708] configfs_composite_bind+0xde0/0x1410 [ 1564.564228][T18708] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1564.564253][T18708] gadget_bind_driver+0x2ca/0x9e0 [ 1564.564288][T18708] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1564.564324][T18708] really_probe+0x254/0xae0 [ 1564.564394][T18708] __driver_probe_device+0x1e8/0x360 [ 1564.564420][T18708] driver_probe_device+0x4f/0x240 [ 1564.564448][T18708] __driver_attach+0x339/0x600 [ 1564.564476][T18708] bus_for_each_dev+0x23e/0x2c0 [ 1564.564495][T18708] ? __pfx___driver_attach+0x10/0x10 [ 1564.564518][T18708] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1564.564537][T18708] ? rt_spin_unlock+0x163/0x200 [ 1564.564556][T18708] bus_add_driver+0x348/0x670 [ 1564.564577][T18708] driver_register+0x23a/0x320 [ 1564.564605][T18708] usb_gadget_register_driver_owner+0xf9/0x270 [ 1564.564633][T18708] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1564.564660][T18708] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1564.564686][T18708] configfs_write_iter+0x33a/0x430 [ 1564.564709][T18708] vfs_write+0x61e/0xbb0 [ 1564.564791][T18708] ? __pfx_vfs_write+0x10/0x10 [ 1564.564813][T18708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.564835][T18708] ? lockdep_hardirqs_on+0x7a/0x110 [ 1564.564857][T18708] ? mutex_lock_nested+0x152/0x1d0 [ 1564.564874][T18708] ? fdget_pos+0x252/0x320 [ 1564.564927][T18708] ksys_write+0x156/0x270 [ 1564.564949][T18708] ? __pfx_ksys_write+0x10/0x10 [ 1564.564974][T18708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.565010][T18708] do_syscall_64+0x174/0x580 [ 1564.565067][T18708] ? clear_bhb_loop+0x40/0x90 [ 1564.565090][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.565110][T18708] RIP: 0033:0x7f6308dce019 [ 1564.565133][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.565150][T18708] RSP: 002b:00007f6307026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1564.565171][T18708] RAX: ffffffffffffffda RBX: 00007f6309055fa0 RCX: 00007f6308dce019 [ 1564.565187][T18708] RDX: 000000000000000c RSI: 0000200000002100 RDI: 0000000000000003 [ 1564.565202][T18708] RBP: 00007f6308e6500c R08: 0000000000000000 R09: 0000000000000000 [ 1564.565214][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1564.565227][T18708] R13: 00007f6309056038 R14: 00007f6309055fa0 R15: 00007ffd72c0a318 [ 1564.565248][T18708] [ 1564.565260][T18708] Modules linked in: [ 1564.565279][T18708] ---[ end trace 0000000000000000 ]--- [ 1564.565303][T18708] RIP: 0010:uvcg_video_init+0x4ef/0x640 [ 1564.565334][T18708] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 92 11 eb fa 48 8b 1b 4c 8d bb 08 09 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 72 11 eb fa 4d 8b 3f 49 83 c7 30 [ 1564.565350][T18708] RSP: 0018:ffffc9000712f710 EFLAGS: 00010206 [ 1564.565367][T18708] RAX: 0000000000000121 RBX: 0000000000000000 RCX: 0000000000080000 [ 1564.565380][T18708] RDX: ffffc900202e3000 RSI: 000000000001c244 RDI: 000000000001c245 [ 1564.565394][T18708] RBP: 1ffff11006aee943 R08: ffffffff8faf9f37 R09: 1ffffffff1f5f3e6 [ 1564.565410][T18708] R10: dffffc0000000000 R11: fffffbfff1f5f3e7 R12: fffffffffffffffc [ 1564.565426][T18708] R13: dffffc0000000000 R14: ffff888035774a18 R15: 0000000000000908 [ 1564.565440][T18708] FS: 00007f63070266c0(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1564.565458][T18708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1564.565472][T18708] CR2: 00005555857aca38 CR3: 00000000608bc000 CR4: 00000000003526f0 [ 1564.565492][T18708] Kernel panic - not syncing: Fatal exception [ 1564.565743][T18708] Kernel Offset: disabled