last executing test programs: 1m54.512095199s ago: executing program 1 (id=1017): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x4000200}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) 1m54.473712396s ago: executing program 1 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2}) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r4, 0x8916, &(0x7f0000000000)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1m54.336059371s ago: executing program 1 (id=1019): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000740), 0x12) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x83, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfdfffdff}}}, 0x108) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 1m54.024617025s ago: executing program 1 (id=1023): ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m53.731387052s ago: executing program 1 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) close(r3) 1m52.022873466s ago: executing program 1 (id=1034): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8b3fd345, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x1c, 0x0}}], 0x1, 0x880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.258983069s ago: executing program 32 (id=1034): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x8b3fd345, @dev={0xfe, 0x80, '\x00', 0x38}, 0x2}, 0x1c, 0x0}}], 0x1, 0x880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.179237531s ago: executing program 4 (id=1814): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000580)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x20000090) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x24048004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000280)={0x28, 0x0, r2, 0x90, &(0x7f00000001c0)=""/144}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.850855922s ago: executing program 4 (id=1808): setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local}) 7.661667489s ago: executing program 4 (id=1813): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 7.327467626s ago: executing program 4 (id=1817): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='4096\n', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='258\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/component_size\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='819', 0x3) syz_usb_ep_write(r0, 0x81, 0x1b, &(0x7f0000000080)="ff098755647eac26000bd1fe0d6a2d50a1c56a47ca030003b44818") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x24c080, 0x0) 4.292694337s ago: executing program 4 (id=1824): socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040cb06f5730000000000010902"], 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2208004, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x5fd8a426428707f3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'nq\x00', 0x1, 0xa8a, 0x30}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.291466369s ago: executing program 3 (id=1857): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x3, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0xc7}}], 0x1, 0x0, 0x0) 2.04101391s ago: executing program 3 (id=1858): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x638) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000440)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) 1.12205516s ago: executing program 4 (id=1870): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r11}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 1.040094651s ago: executing program 3 (id=1872): socket$tipc(0x1e, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 976.867924ms ago: executing program 0 (id=1874): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"}, 0x7c, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x7b, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x3e419937e7753116, 0x30, 0x30, 0x30, 0x30, 0x55, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x31, 0x33]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$keyring(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 855.461988ms ago: executing program 3 (id=1875): socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 846.2296ms ago: executing program 2 (id=1876): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 828.171707ms ago: executing program 0 (id=1877): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @desc3}, &(0x7f0000000600)={0x0, "af90151a5dd598c6a6f07a701cc150dd4f2639568ea6baa1edc5b8c720c51d5c438f08f1377c60f83d32830646581c116f58f00751fea1d8862e29ad015b0985", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x31}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x61, 0x65, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x33]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x61, 0x35, 0x32, 0x66, 0x33, 0x0, 0x62, 0x34, 0x37, 0x36, 0x39, 0x64, 0x36, 0x33, 0x64, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x2b}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) 733.155022ms ago: executing program 2 (id=1878): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x764a}], 0x1, 0x4010022, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r2 = syz_open_dev$dvb_frontend(0x0, 0x7d0, 0x40000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r4, 0x4b72, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) sendmsg$inet(r3, 0x0, 0x34004000) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x541b, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x4040910, r1, 0x58fbc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') 731.708762ms ago: executing program 3 (id=1879): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 669.528764ms ago: executing program 0 (id=1880): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000600)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "42b6f79eb265b5824e857af864c58803d13c052f671a2ae1f76bf1da5cc727376ed546011b61539773c15f7e54ddbb21d67e1662214422745234909a6d75d284", 0x36}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 595.97187ms ago: executing program 2 (id=1881): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x61, 0x61, 0x38, 0x31, 0x64, 0x35, 0x35, 0xad, 0x67, 0x30, 0x65, 0x33, 0x30, 0x39, 0x32, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000600), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="c034", 0x2, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 590.881474ms ago: executing program 3 (id=1882): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, 0x0, 0x9080) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') socketpair(0x10, 0x5, 0xa, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev2(r2, 0x0, 0x0, 0x95c, 0x4, 0x3) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000300)={0x1, [[0x1, 0x0, 0x0, 0x9, 0x6, 0xe], [0x10001, 0x0, 0x0, 0xfffffffc, 0x40000000, 0x3, 0x0, 0x7], [0x1, 0x0, 0x0, 0x7bf5, 0x0, 0x5dd6, 0x200, 0x9]], '\x00', [{0x4, 0x4000000}, {0x0, 0x1641c}, {}, {0x1, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x2000010, 0x0, 0x1}, {0xffff5283, 0xffffffff, 0x1}, {0x2000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x1000}) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0xa, 0xfffffffd) socket(0x11, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 486.611124ms ago: executing program 0 (id=1883): socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000002180), 0x7b0c, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x7, "abacd211119ca94c50377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0xc}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 367.384676ms ago: executing program 2 (id=1884): syz_open_dev$tty20(0xc, 0x4, 0x1) userfaultfd(0x80001) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup2(0xffffffffffffffff, r2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 299.303192ms ago: executing program 0 (id=1885): socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000580), 0x0) pipe2(&(0x7f0000000200), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r4, r1, 0x68, 0x1) syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 257.9187ms ago: executing program 2 (id=1886): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 81.157014ms ago: executing program 2 (id=1887): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=1888): r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x4000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NL80211_CMD_SET_MPATH(r0, 0x0, 0x40000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): nterface 228 has no altsetting 0 [ 119.043605][ T5711] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.128141][ T44] gspca_main: spca501-2.14.0 probing 0000:0000 [ 119.135642][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.135697][ T1218] usb 2-1: Product: syz [ 119.135716][ T1218] usb 2-1: Manufacturer: syz [ 119.135734][ T1218] usb 2-1: SerialNumber: syz [ 119.160228][ T44] gspca_spca501: reg write: error -32 [ 119.165814][ T44] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 119.172932][ T44] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 119.200880][ T5711] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.203990][ T5711] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 119.204026][ T5711] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.204046][ T5711] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 119.204088][ T5711] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.207797][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.207824][ T5711] usb 4-1: Product: syz [ 119.207838][ T5711] usb 4-1: Manufacturer: syz [ 119.220194][ T5711] cdc_wdm 4-1:1.0: skipping garbage [ 119.220215][ T5711] cdc_wdm 4-1:1.0: skipping garbage [ 119.244259][ T5711] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 119.244287][ T5711] cdc_wdm 4-1:1.0: Unknown control protocol [ 119.610259][ T1218] legousbtower 2-1:14.57: interrupt endpoints not found [ 120.007587][ T1218] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 120.018429][ T1218] legousbtower 2-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 120.098888][ T6494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.110151][ T6494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.265045][ T6496] random: crng reseeded on system resumption [ 120.346870][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.346904][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.347171][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.347198][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.347394][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.347410][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.347603][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.347618][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.347814][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.347827][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.348018][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.348036][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.348236][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.348253][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.348450][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.348468][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.348663][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.348680][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.348875][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 120.348892][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 120.350784][ T5711] usb 4-1: USB disconnect, device number 5 [ 120.350905][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 121.022000][ T6513] binder: 6512:6513 ioctl c0306201 200000000080 returned -14 [ 121.350491][ T6522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.362275][ T6522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.439280][ T6526] jffs2: notice: (6526) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 121.617099][ T5711] usb 2-1: USB disconnect, device number 5 [ 121.638689][ T5711] legousbtower 2-1:14.228: LEGO USB Tower #-159 now disconnected [ 122.022624][ T5711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.172662][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 122.173728][ T5711] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 122.175383][ T5711] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 122.175434][ T5711] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 122.175461][ T5711] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.175486][ T5711] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 122.182833][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.182858][ T5711] usb 2-1: Product: syz [ 122.182872][ T5711] usb 2-1: Manufacturer: syz [ 122.182886][ T5711] usb 2-1: SerialNumber: syz [ 122.233175][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 122.299711][ T5711] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input7 [ 122.423057][ T5711] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 122.423108][ T5711] (id 0x00) [ 122.605298][ T5711] rc_core: IR keymap rc-imon-pad not found [ 122.605349][ T5711] Registered IR keymap rc-empty [ 122.605463][ T5711] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 122.605481][ T5711] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.632321][ T5711] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 122.656143][ T5711] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input8 [ 122.697811][ T5711] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:6> initialized [ 123.148158][ T6534] imon:send_packet: task interrupted [ 123.148304][ T6534] imon:send_packet: packet tx failed (-512) [ 123.168288][ T6534] imon:vfd_write: send packet #1 failed [ 123.182804][ T6534] imon:send_packet: packet tx failed (-32) [ 123.212637][ T6534] imon:vfd_write: send packet #0 failed [ 123.215897][ T5726] usb 2-1: USB disconnect, device number 6 [ 123.790152][ T30] audit: type=1326 audit(1787334147.876:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.308" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb6619e0d9 code=0x0 [ 124.204014][ T5621] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.354534][ T5621] usb 4-1: not running at top speed; connect to a high speed hub [ 124.354599][ T5621] usb 4-1: New USB device found, idVendor=093a, idProduct=2620, bcdDevice= 1.00 [ 124.369459][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 124.369490][ T5621] usb 4-1: Product: syz [ 124.369504][ T5621] usb 4-1: Manufacturer: syz [ 124.419378][ T5621] gspca_main: gspca_pac7302-2.14.0 probing 093a:2620 [ 124.654269][ T5621] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 124.917627][ T6604] binder: 6603:6604 ioctl c0306201 200000000080 returned -14 [ 125.133384][ T5621] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.235149][ T1218] usb 4-1: USB disconnect, device number 6 [ 125.283286][ T5621] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 125.296975][ T5621] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.297050][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.753779][ T5621] wacom 0003:056A:033B.0003: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 125.799214][ T5621] wacom 0003:056A:033B.0003: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 125.828145][ T5621] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0003/input/input10 [ 126.035875][ T6615] tipc: Failed to remove unknown binding: 66,0,0/0:2367113195/2367113196 [ 126.041799][ T6615] tipc: Failed to remove unknown binding: 66,0,0/0:2367113195/2367113196 [ 126.288591][ T6619] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 126.335637][ T6619] md: invalid raid superblock magic on ram1 [ 126.335671][ T6619] md: ram1 does not have a valid v0.0 superblock, not importing! [ 126.335800][ T6619] md: md_import_device returned -22 [ 126.456530][ T5768] usb 2-1: USB disconnect, device number 7 [ 126.536015][ T6626] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size. [ 126.792638][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 126.943562][ T44] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 126.945089][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 126.947487][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.947509][ T44] usb 3-1: Product: syz [ 126.947523][ T44] usb 3-1: Manufacturer: syz [ 126.947537][ T44] usb 3-1: SerialNumber: syz [ 126.950407][ T44] usb 3-1: config 0 descriptor?? [ 127.295884][ T5621] usb 3-1: USB disconnect, device number 8 [ 128.707588][ T30] audit: type=1800 audit(1787334152.796:3): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="size" dev="configfs" ino=14635 res=0 errno=0 [ 128.729350][ T30] audit: type=1800 audit(1787334152.796:4): pid=6669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.341" name="power" dev="configfs" ino=14636 res=0 errno=0 [ 128.893847][ T6669] null_blk: disk nullb1 created [ 129.288824][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 129.361698][ T4932] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 129.361768][ T4932] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 129.361816][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 129.730462][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.730887][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.211232][ T6701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.515600][ T6707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.354'. [ 130.781671][ T4932] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15 [ 130.781721][ T4932] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 130.902870][ T6719] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 130.915408][ T6719] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 130.991842][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 131.057543][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 131.312924][ T5768] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.349185][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.349636][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.462545][ T5768] usb 4-1: Using ep0 maxpacket: 32 [ 131.463408][ T5768] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 131.464617][ T5768] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 131.464661][ T5768] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 131.464686][ T5768] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.464712][ T5768] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 131.467139][ T5768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.467163][ T5768] usb 4-1: Product: syz [ 131.467177][ T5768] usb 4-1: Manufacturer: syz [ 131.467190][ T5768] usb 4-1: SerialNumber: syz [ 131.478461][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 131.492172][ T5768] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input13 [ 131.694083][ T5768] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 131.694112][ T5768] (id 0x00) [ 131.746658][ T5768] rc_core: IR keymap rc-imon-pad not found [ 131.748794][ T5768] Registered IR keymap rc-empty [ 131.748867][ T5768] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.748885][ T5768] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.895602][ T5768] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 131.903880][ T5768] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input14 [ 131.921910][ T6742] saa7115 0-0020: probe with driver saa7115 failed with error -5 [ 131.938527][ T6742] i2c i2c-0: new_device: Instantiated device saa7115_auto at 0x20 [ 131.956062][ T5768] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:7> initialized [ 132.226464][ T6726] imon:send_packet: task interrupted [ 132.226508][ T6726] imon:send_packet: packet tx failed (-512) [ 132.226545][ T6726] imon:vfd_write: send packet #0 failed [ 132.231042][ T44] usb 4-1: USB disconnect, device number 7 [ 132.327537][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.337688][ T5711] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.351950][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.514046][ T5711] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 132.526738][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.526785][ T5711] usb 3-1: Product: syz [ 132.526800][ T5711] usb 3-1: Manufacturer: syz [ 132.526814][ T5711] usb 3-1: SerialNumber: syz [ 132.695630][ T5711] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 132.726049][ T6759] mount: server 127.0.0.1 not responding, timed out [ 132.789002][ T30] audit: type=1800 audit(1787334156.876:5): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.375" name="size" dev="configfs" ino=15111 res=0 errno=0 [ 132.806970][ T30] audit: type=1800 audit(1787334156.876:6): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.375" name="power" dev="configfs" ino=15633 res=0 errno=0 [ 132.943383][ T5621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 132.943442][ T5621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:3: checksumming directory block 0 [ 132.949806][ T5621] usb 3-1: loading /lib/firmware/updates/syzkaller/carl9170-1.fw failed with error -74 [ 132.949943][ T5621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 132.949973][ T5621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:3: checksumming directory block 0 [ 132.950149][ T5621] usb 3-1: loading /lib/firmware/updates/carl9170-1.fw failed with error -74 [ 132.950242][ T5621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 132.950269][ T5621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:3: checksumming directory block 0 [ 132.950423][ T5621] usb 3-1: loading /lib/firmware/syzkaller/carl9170-1.fw failed with error -74 [ 132.957054][ T5621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:3: No space for directory leaf checksum. Please run e2fsck -D. [ 132.957093][ T5621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:3: checksumming directory block 0 [ 132.957280][ T5621] usb 3-1: loading /lib/firmware/carl9170-1.fw failed with error -74 [ 132.957312][ T5621] usb 3-1: Direct firmware load for carl9170-1.fw failed with error -74 [ 132.957334][ T5621] usb 3-1: Falling back to sysfs fallback for: carl9170-1.fw [ 133.173171][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194821][ T6772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.195297][ T6772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.960349][ T6780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.960776][ T6780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.288004][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 134.516721][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.517159][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.532728][ T5768] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.683841][ T5768] usb 2-1: Using ep0 maxpacket: 32 [ 134.684722][ T5768] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 134.685878][ T5768] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 134.685922][ T5768] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 134.685948][ T5768] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.685973][ T5768] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 134.687868][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.688071][ T5768] usb 2-1: Product: syz [ 134.688086][ T5768] usb 2-1: Manufacturer: syz [ 134.688100][ T5768] usb 2-1: SerialNumber: syz [ 134.695965][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 134.700432][ T5768] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input15 [ 134.912634][ T5768] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 134.921044][ T5768] (id 0x00) [ 134.972585][ T5768] rc_core: IR keymap rc-imon-pad not found [ 134.972621][ T5768] Registered IR keymap rc-empty [ 134.973255][ T5768] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 134.973274][ T5768] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 135.124989][ T5768] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 135.136818][ T5768] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input16 [ 135.147025][ T5768] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:8> initialized [ 135.164238][ T44] usb 3-1: USB disconnect, device number 9 [ 135.428693][ T6802] imon:send_packet: task interrupted [ 135.428731][ T6802] imon:send_packet: packet tx failed (-512) [ 135.428926][ T6802] imon:vfd_write: send packet #0 failed [ 135.460479][ T5726] usb 2-1: USB disconnect, device number 8 [ 135.712046][ T6823] tipc: Failed to remove unknown binding: 66,0,0/0:2264593171/2264593172 [ 135.721766][ T6823] tipc: Failed to remove unknown binding: 66,0,0/0:2264593171/2264593172 [ 135.820517][ T6825] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 135.820558][ T6825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.392'. [ 135.840305][ T6825] team0: Port device geneve1 added [ 136.369257][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.371950][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.688963][ T6851] tipc: Failed to remove unknown binding: 66,0,0/0:4240212178/4240212179 [ 136.689705][ T6851] tipc: Failed to remove unknown binding: 66,0,0/0:4240212178/4240212179 [ 136.879442][ T6854] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 136.879497][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.402'. [ 136.895621][ T6854] team0: Port device geneve1 added [ 137.838195][ T30] audit: type=1804 audit(1787334161.926:7): pid=6864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.406" name="/newroot/102/file0" dev="fuse" ino=1 res=1 errno=0 [ 138.607958][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 138.608009][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 138.696642][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 138.696676][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 138.955825][ T6889] netlink: 'syz.0.417': attribute type 11 has an invalid length. [ 139.124180][ T5726] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.283447][ T5726] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 139.284693][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.284739][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.294004][ T5726] usb 4-1: config 0 descriptor?? [ 139.325586][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.326049][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.503363][ T5726] usbhid 4-1:0.0: can't add hid device: -71 [ 139.503501][ T5726] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.522812][ T5726] usb 4-1: USB disconnect, device number 8 [ 139.619660][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 139.628722][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 139.943385][ T5726] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.066557][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 140.079934][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 140.093289][ T5726] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 140.094668][ T5726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.094713][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.104343][ T5726] usb 4-1: config 0 descriptor?? [ 140.365954][ T6916] binder: 6914:6916 ioctl c0306201 200000000080 returned -14 [ 140.376006][ T6916] binder: 6914:6916 ioctl c0306201 2000000003c0 returned -14 [ 140.944550][ T5726] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 140.949008][ T5726] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 141.454793][ T5726] usb 4-1: USB disconnect, device number 9 [ 141.454909][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 144.445569][ T6964] netlink: 'syz.1.444': attribute type 39 has an invalid length. [ 145.322175][ T30] audit: type=1326 audit(1787334169.406:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6974 comm="syz.2.447" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x0 [ 146.166646][ T6996] __nla_validate_parse: 2 callbacks suppressed [ 146.173450][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 146.183005][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 146.408756][ T6998] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.414389][ T6998] overlayfs: failed to set xattr on upper [ 146.414405][ T6998] overlayfs: ...falling back to redirect_dir=nofollow. [ 146.414413][ T6998] overlayfs: ...falling back to index=off. [ 146.414420][ T6998] overlayfs: ...falling back to uuid=null. [ 146.496530][ T6998] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 146.696330][ T7012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 146.892522][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 147.042573][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 147.043348][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 147.044268][ T25] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 147.044291][ T25] usb 4-1: config 0 has no interface number 0 [ 147.044328][ T25] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 147.044353][ T25] usb 4-1: config 0 interface 196 has no altsetting 0 [ 147.046176][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.046197][ T25] usb 4-1: Product: syz [ 147.046211][ T25] usb 4-1: Manufacturer: syz [ 147.046225][ T25] usb 4-1: SerialNumber: syz [ 147.049172][ T25] usb 4-1: config 0 descriptor?? [ 147.050577][ T7009] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.894348][ T25] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 147.955566][ T25] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 150.081938][ T25] usb 4-1: USB disconnect, device number 10 [ 150.380239][ T25] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 150.684170][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 150.842531][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 150.843290][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 150.844222][ T25] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 150.844245][ T25] usb 4-1: config 0 has no interface number 0 [ 150.844281][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 150.844302][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.844325][ T25] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 150.844349][ T25] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 150.844373][ T25] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.846363][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.846384][ T25] usb 4-1: Product: syz [ 150.846397][ T25] usb 4-1: Manufacturer: syz [ 150.846411][ T25] usb 4-1: SerialNumber: syz [ 150.849492][ T25] usb 4-1: config 0 descriptor?? [ 151.036320][ T7093] Invalid argument reading file caps for ./file0 [ 151.079819][ T25] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 151.260251][ T7097] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 4008af00, magic af != 6b] [ 151.301862][ T5726] usb 4-1: USB disconnect, device number 11 [ 153.514830][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.516683][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.501749][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.504924][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.728899][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.729351][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.363500][ T1218] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.513536][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 155.514572][ T1218] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 155.515517][ T1218] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 155.515540][ T1218] usb 2-1: config 0 has no interface number 0 [ 155.517794][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.517816][ T1218] usb 2-1: Product: syz [ 155.517830][ T1218] usb 2-1: Manufacturer: syz [ 155.517844][ T1218] usb 2-1: SerialNumber: syz [ 155.520749][ T1218] usb 2-1: config 0 descriptor?? [ 155.944755][ T1218] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 155.944814][ T1218] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.324471][ T7219] syzkaller0: entered promiscuous mode [ 156.324519][ T7219] syzkaller0: entered allmulticast mode [ 156.340733][ T7219] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 156.690687][ T7221] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 156.690722][ T7221] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 156.698380][ T7221] vhci_hcd vhci_hcd.0: Device attached [ 156.715358][ T7222] vhci_hcd: connection closed [ 156.721259][ T1404] vhci_hcd vhci_hcd.0: stop threads [ 156.725143][ T1404] vhci_hcd vhci_hcd.0: release socket [ 156.725182][ T1404] vhci_hcd vhci_hcd.0: disconnect device [ 156.728596][ T4932] Bluetooth: hci1: unexpected subevent 0x0c length: 30 > 5 [ 157.389425][ T1218] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 157.389673][ T1218] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 157.408847][ T1218] usb 2-1: USB disconnect, device number 9 [ 159.733201][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.736084][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.201394][ T7257] ======================================================= [ 160.201394][ T7257] WARNING: The mand mount option has been deprecated and [ 160.201394][ T7257] and is ignored by this kernel. Remove the mand [ 160.201394][ T7257] option from the mount to silence this warning. [ 160.201394][ T7257] ======================================================= [ 160.523040][ T5726] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.676076][ T5726] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 160.682007][ T5726] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.691423][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.691454][ T5726] usb 4-1: Product: syz [ 160.691468][ T5726] usb 4-1: Manufacturer: syz [ 160.691482][ T5726] usb 4-1: SerialNumber: syz [ 160.720788][ T5726] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 160.814471][ T30] audit: type=1800 audit(1787334184.906:9): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.515" name="/" dev="fuse" ino=1 res=0 errno=0 [ 160.943835][ T7280] loop8: detected capacity change from 0 to 8 [ 160.956119][ T7280] Dev loop8: unable to read RDB block 8 [ 160.956219][ T7280] loop8: unable to read partition table [ 160.956460][ T7280] loop8: partition table beyond EOD, truncated [ 160.958179][ T7280] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 161.087634][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.088178][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.282644][ T5768] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.293094][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.294008][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.432522][ T5768] usb 2-1: Using ep0 maxpacket: 8 [ 161.433386][ T5768] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 161.434596][ T5768] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 161.434619][ T5768] usb 2-1: config 0 has no interface number 0 [ 161.434656][ T5768] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.434679][ T5768] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 161.434701][ T5768] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 161.434725][ T5768] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 161.434748][ T5768] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.436988][ T5768] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.437010][ T5768] usb 2-1: Product: syz [ 161.437024][ T5768] usb 2-1: Manufacturer: syz [ 161.437038][ T5768] usb 2-1: SerialNumber: syz [ 161.439964][ T5768] usb 2-1: config 0 descriptor?? [ 161.650398][ T5768] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 161.856866][ T5768] usb 2-1: USB disconnect, device number 10 [ 161.875675][ T5726] gspca_mr97310a: reg write [21] error -71 [ 161.881873][ T5726] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 161.897788][ T5726] usb 4-1: USB disconnect, device number 12 [ 162.220758][ T7289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.231600][ T7289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.667779][ T82] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.466470][ T7306] netlink: 'syz.0.539': attribute type 2 has an invalid length. [ 163.466500][ T7306] netlink: 'syz.0.539': attribute type 2 has an invalid length. [ 163.527847][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.532905][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.642555][ T5712] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 163.815478][ T5712] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 163.816005][ T5712] usb 2-1: config 0 has no interfaces? [ 163.816039][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.822319][ T5712] usb 2-1: config 0 descriptor?? [ 164.031629][ T5712] usb 2-1: USB disconnect, device number 11 [ 164.201310][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.201773][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.482516][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 164.643936][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 164.645923][ T25] usb 2-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 164.648754][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.648777][ T25] usb 2-1: Product: syz [ 164.648790][ T25] usb 2-1: Manufacturer: syz [ 164.648804][ T25] usb 2-1: SerialNumber: syz [ 164.682667][ T5618] Bluetooth: hci4: command 0x1003 tx timeout [ 164.688863][ T4932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.190246][ T7330] sctp: [Deprecated]: syz.2.550 (pid 7330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.190246][ T7330] Use struct sctp_sack_info instead [ 166.308908][ T25] usb 2-1: USB disconnect, device number 12 [ 168.011946][ T7376] fuse: Bad value for 'fd' [ 168.155502][ T7377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.159321][ T7377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.699572][ T7410] sctp: [Deprecated]: syz.3.582 (pid 7410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.699572][ T7410] Use struct sctp_sack_info instead [ 170.928950][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.932959][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.696523][ T7440] fuse: Bad value for 'fd' [ 171.908133][ T7455] Zero length message leads to an empty skb [ 172.934130][ T5726] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.092554][ T5726] usb 2-1: Using ep0 maxpacket: 8 [ 173.099875][ T5726] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 173.116474][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.116519][ T5726] usb 2-1: Product: syz [ 173.116554][ T5726] usb 2-1: Manufacturer: syz [ 173.116568][ T5726] usb 2-1: SerialNumber: syz [ 173.124749][ T5726] usb 2-1: config 0 descriptor?? [ 173.349175][ T5726] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 174.339534][ T7521] fuse: Bad value for 'fd' [ 174.368149][ T5726] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 174.374747][ T5726] usb 2-1: USB disconnect, device number 13 [ 174.753230][ T7542] fuse: fd is not a fuse device [ 175.001093][ T7552] kvm [7549]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 175.342502][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.359046][ T7574] tipc: Started in network mode [ 175.359105][ T7574] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 175.361877][ T7574] tipc: Enabled bearer , priority 10 [ 175.367445][ T7574] tipc: Enabled bearer , priority 10 [ 175.369592][ T7574] tipc: Bearer : already 2 bearers with priority 10 [ 175.369608][ T7574] tipc: Bearer : trying with adjusted priority [ 175.372187][ T7574] tipc: New replicast peer: 255.255.255.255 [ 175.374606][ T7574] tipc: Enabled bearer , priority 9 [ 175.492557][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 175.498722][ T25] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.510024][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.519737][ T7583] overlayfs: failed to clone upperpath [ 175.523410][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.523442][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.550077][ T25] usb 2-1: config 0 descriptor?? [ 175.653847][ T7589] tipc: Failed to remove unknown binding: 66,0,0/0:2506431554/2506431555 [ 175.665413][ T7589] tipc: Failed to remove unknown binding: 66,0,0/0:2506431554/2506431555 [ 175.737223][ T7594] netlink: 'syz.0.652': attribute type 11 has an invalid length. [ 175.984120][ T25] hid_parser_main: 448 callbacks suppressed [ 175.984180][ T25] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 175.984214][ T25] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 176.173319][ T25] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 176.424599][ T25] ft260 0003:0403:6030.0004: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 176.479861][ T5726] tipc: Node number set to 4269801491 [ 176.626524][ T25] ft260 0003:0403:6030.0004: failed to retrieve status: -32, no wakeup [ 176.628367][ T25] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 176.834708][ T7560] ft260 0003:0403:6030.0004: unsupported smbus transaction size 0 [ 176.838569][ T5726] usb 2-1: USB disconnect, device number 14 [ 177.397263][ T7614] overlayfs: failed to clone upperpath [ 177.735465][ T7632] tipc: Started in network mode [ 177.742058][ T7632] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 177.752092][ T7632] tipc: Enabled bearer , priority 10 [ 177.765442][ T7632] tipc: Enabled bearer , priority 10 [ 177.774505][ T7632] tipc: Bearer : already 2 bearers with priority 10 [ 177.774552][ T7632] tipc: Bearer : trying with adjusted priority [ 177.775323][ T7632] tipc: New replicast peer: 255.255.255.255 [ 177.776012][ T7632] tipc: Enabled bearer , priority 9 [ 177.954821][ T7639] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 177.954860][ T7639] overlayfs: failed to set xattr on upper [ 177.954906][ T7639] overlayfs: ...falling back to redirect_dir=nofollow. [ 177.954914][ T7639] overlayfs: ...falling back to index=off. [ 177.954920][ T7639] overlayfs: ...falling back to uuid=null. [ 177.954986][ T7639] overlayfs: failed to clone lowerpath [ 178.816607][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 178.825541][ T30] audit: type=1326 audit(1787334202.916:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.3.679" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faab299e0d9 code=0x7fc00000 [ 178.828329][ T30] audit: type=1326 audit(1787334202.916:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.3.679" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faab299e0d9 code=0x7fc00000 [ 178.862524][ T5768] tipc: Node number set to 4269801491 [ 178.994962][ T7674] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.012297][ T7674] overlayfs: failed to set xattr on upper [ 179.018865][ T7674] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.027399][ T7674] overlayfs: ...falling back to index=off. [ 179.027448][ T7674] overlayfs: ...falling back to uuid=null. [ 179.053696][ T7674] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.053751][ T7674] overlayfs: failed to set xattr on upper [ 179.053758][ T7674] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.053766][ T7674] overlayfs: ...falling back to index=off. [ 179.053773][ T7674] overlayfs: ...falling back to uuid=null. [ 179.226802][ T7683] fuse: fd is not a fuse device [ 180.236232][ T7712] netlink: 'syz.0.699': attribute type 39 has an invalid length. [ 180.357199][ T7717] netlink: 'syz.0.701': attribute type 15 has an invalid length. [ 180.357238][ T7717] netlink: 11870 bytes leftover after parsing attributes in process `syz.0.701'. [ 180.376958][ T7717] netlink: 'syz.0.701': attribute type 6 has an invalid length. [ 180.376998][ T7717] netlink: 'syz.0.701': attribute type 7 has an invalid length. [ 180.377036][ T7717] netlink: 'syz.0.701': attribute type 11 has an invalid length. [ 180.377053][ T7717] netlink: 'syz.0.701': attribute type 15 has an invalid length. [ 180.377068][ T7717] netlink: 'syz.0.701': attribute type 16 has an invalid length. [ 180.377083][ T7717] netlink: 'syz.0.701': attribute type 21 has an invalid length. [ 180.377099][ T7717] netlink: 'syz.0.701': attribute type 25 has an invalid length. [ 180.377114][ T7717] netlink: 13906 bytes leftover after parsing attributes in process `syz.0.701'. [ 180.734815][ T7736] fuse: fd is not a fuse device [ 180.784739][ T7738] cgroup: Setting release_agent not allowed [ 180.862567][ T5768] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 181.023409][ T5768] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 181.024597][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.024627][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.024665][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.031006][ T5768] usb 2-1: config 0 descriptor?? [ 181.444026][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444083][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444126][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444155][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444181][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444222][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.444250][ T5768] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.451287][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880597a8c00: rx timeout, send abort [ 181.455030][ T5768] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 181.640848][ T5768] cp2112 0003:10C4:EA90.0005: Part Number: 0xDC Device Version: 0x5B [ 181.780676][ T50] IPVS: starting estimator thread 0... [ 181.795730][ T7750] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 181.795821][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 181.841510][ T5768] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 181.858402][ T5768] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -5 [ 181.872603][ T7751] IPVS: using max 37 ests per chain, 88800 per kthread [ 181.952639][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880597a8c00: abort rx timeout. Force session deactivation [ 182.027252][ T7757] fuse: fd is not a fuse device [ 182.480625][ T7771] fuse: fd is not a fuse device [ 182.993505][ T7776] fuse: fd is not a fuse device [ 183.194982][ T7787] overlayfs: failed to clone upperpath [ 183.639719][ T10] usb 2-1: USB disconnect, device number 15 [ 183.750757][ T7806] binder: 7804:7806 ioctl c0306201 200000000080 returned -14 [ 183.753566][ T7806] binder: 7804:7806 ioctl c0306201 2000000003c0 returned -14 [ 184.043551][ T7820] cgroup: Setting release_agent not allowed [ 184.139704][ T7825] netlink: 14 bytes leftover after parsing attributes in process `syz.3.740'. [ 184.150308][ T7825] tipc: Resetting bearer [ 184.175826][ T7825] tipc: Disabling bearer [ 184.585329][ T7854] netlink: 156 bytes leftover after parsing attributes in process `syz.0.752'. [ 184.676986][ T7858] fuse: fd is not a fuse device [ 184.898760][ T59] IPVS: starting estimator thread 0... [ 184.992581][ T7868] IPVS: using max 36 ests per chain, 86400 per kthread [ 186.018896][ T7886] fuse: fd is not a fuse device [ 186.479706][ T7908] cgroup: No subsys list or none specified [ 187.568404][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x25 [ 187.578886][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x26 [ 187.588091][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x27 [ 187.590918][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x28 [ 187.594561][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x29 [ 187.596749][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2a [ 187.599135][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2b [ 187.600746][ T7935] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 187.988429][ T7947] fuse: fd is not a fuse device [ 188.131042][ T7953] fuse: fd is not a fuse device [ 188.227794][ T7954] netlink: 14 bytes leftover after parsing attributes in process `syz.0.795'. [ 188.261835][ T30] audit: type=1326 audit(1787334214.346:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.1.798" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb6619e0d9 code=0x0 [ 188.319941][ T7960] ªªªªªª: renamed from vlan0 (while UP) [ 188.638896][ T7968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.806085][ T7968] md/raid10:md0: not clean -- starting background reconstruction [ 188.806126][ T7968] md/raid10:md0: active with 1 out of 2 devices [ 188.807374][ T7968] md0: detected capacity change from 0 to 2048 [ 188.853405][ T7974] md_update_sb: can't update sb for read-only array md0 [ 189.416883][ T7993] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 189.462568][ T5726] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 189.613218][ T5726] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 189.624969][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 189.625020][ T5726] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 189.625080][ T5726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.749179][ T8012] fuse: fd is not a fuse device [ 190.416431][ T5726] pegasus 2-1:1.0: probe with driver pegasus failed with error -71 [ 190.436739][ T5726] usb 2-1: USB disconnect, device number 16 [ 191.209606][ T8037] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0025' [ 191.226548][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.226589][ T8037] Tainted: [L]=SOFTLOCKUP [ 191.226596][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.226617][ T8037] Call Trace: [ 191.226630][ T8037] [ 191.226639][ T8037] dump_stack_lvl+0xe8/0x150 [ 191.226684][ T8037] sysfs_create_dir_ns+0x271/0x2a0 [ 191.226719][ T8037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.226751][ T8037] ? do_raw_spin_unlock+0xf5/0x200 [ 191.226780][ T8037] kobject_add_internal+0x622/0xcd0 [ 191.226815][ T8037] kobject_add+0x163/0x240 [ 191.226839][ T8037] ? rcu_is_watching+0x16/0xb0 [ 191.226865][ T8037] ? __pfx_kobject_add+0x10/0x10 [ 191.226890][ T8037] ? class_to_subsys+0xb6/0x120 [ 191.226917][ T8037] ? get_device_parent+0xbc/0x3a0 [ 191.226949][ T8037] device_add+0x3fa/0xb80 [ 191.226978][ T8037] i2c_new_client_device+0xa29/0x1130 [ 191.227023][ T8037] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.227055][ T8037] ? __mutex_lock+0x30b/0x1550 [ 191.227076][ T8037] ? new_device_store+0x132/0x530 [ 191.227103][ T8037] new_device_store+0x24b/0x530 [ 191.227126][ T8037] ? lock_acquire+0x115/0x350 [ 191.227154][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.227177][ T8037] ? __pfx_new_device_store+0x10/0x10 [ 191.227206][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.227227][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.227250][ T8037] ? sysfs_file_kobj+0x1e4/0x230 [ 191.227274][ T8037] ? sysfs_kf_write+0x166/0x260 [ 191.227301][ T8037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.227324][ T8037] kernfs_fop_write_iter+0x3a4/0x540 [ 191.227358][ T8037] vfs_write+0x612/0xba0 [ 191.227394][ T8037] ? __pfx_vfs_write+0x10/0x10 [ 191.227432][ T8037] ? __fget_files+0x2a/0x420 [ 191.227465][ T8037] ksys_write+0x150/0x270 [ 191.227493][ T8037] ? __pfx_ksys_write+0x10/0x10 [ 191.227529][ T8037] do_syscall_64+0x166/0x520 [ 191.227550][ T8037] ? trace_irq_disable+0x3b/0x140 [ 191.227577][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.227598][ T8037] ? clear_bhb_loop+0x70/0xc0 [ 191.227623][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.227643][ T8037] RIP: 0033:0x7ffb6619e0d9 [ 191.227673][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.227691][ T8037] RSP: 002b:00007ffb67023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.227716][ T8037] RAX: ffffffffffffffda RBX: 00007ffb66425fa0 RCX: 00007ffb6619e0d9 [ 191.227731][ T8037] RDX: 000000000000000d RSI: 0000200000000500 RDI: 0000000000000003 [ 191.227745][ T8037] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.227758][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.227770][ T8037] R13: 00007ffb66426038 R14: 00007ffb66425fa0 R15: 00007ffd9ecc5288 [ 191.227804][ T8037] [ 191.416968][ T8037] kobject: kobject_add_internal failed for 0-0025 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.417015][ T8037] i2c i2c-0: Failed to register i2c client isp1301 at 0x25 (-17) [ 191.428807][ T8038] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0026' [ 191.428848][ T8038] CPU: 1 UID: 0 PID: 8038 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.428877][ T8038] Tainted: [L]=SOFTLOCKUP [ 191.428884][ T8038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.428896][ T8038] Call Trace: [ 191.428905][ T8038] [ 191.428914][ T8038] dump_stack_lvl+0xe8/0x150 [ 191.428949][ T8038] sysfs_create_dir_ns+0x271/0x2a0 [ 191.428983][ T8038] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.429013][ T8038] ? do_raw_spin_unlock+0xf5/0x200 [ 191.429055][ T8038] kobject_add_internal+0x622/0xcd0 [ 191.429091][ T8038] kobject_add+0x163/0x240 [ 191.429115][ T8038] ? rcu_is_watching+0x16/0xb0 [ 191.429140][ T8038] ? __pfx_kobject_add+0x10/0x10 [ 191.429167][ T8038] ? class_to_subsys+0xb6/0x120 [ 191.429190][ T8038] ? get_device_parent+0xbc/0x3a0 [ 191.429221][ T8038] device_add+0x3fa/0xb80 [ 191.429251][ T8038] i2c_new_client_device+0xa29/0x1130 [ 191.429294][ T8038] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.429323][ T8038] ? __mutex_lock+0x30b/0x1550 [ 191.429344][ T8038] ? new_device_store+0x132/0x530 [ 191.429372][ T8038] new_device_store+0x24b/0x530 [ 191.429394][ T8038] ? lock_acquire+0x115/0x350 [ 191.429424][ T8038] ? sysfs_file_kobj+0x1a/0x230 [ 191.429447][ T8038] ? __pfx_new_device_store+0x10/0x10 [ 191.429474][ T8038] ? sysfs_file_kobj+0x1a/0x230 [ 191.429493][ T8038] ? sysfs_file_kobj+0x1a/0x230 [ 191.429516][ T8038] ? sysfs_file_kobj+0x1e4/0x230 [ 191.429555][ T8038] ? sysfs_kf_write+0x166/0x260 [ 191.429584][ T8038] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.429605][ T8038] kernfs_fop_write_iter+0x3a4/0x540 [ 191.429633][ T8038] vfs_write+0x612/0xba0 [ 191.429669][ T8038] ? __pfx_vfs_write+0x10/0x10 [ 191.429705][ T8038] ? __fget_files+0x2a/0x420 [ 191.429739][ T8038] ksys_write+0x150/0x270 [ 191.429768][ T8038] ? __pfx_ksys_write+0x10/0x10 [ 191.429793][ T8038] ? __pfx_kcov_ioctl+0x10/0x10 [ 191.429837][ T8038] do_syscall_64+0x166/0x520 [ 191.429856][ T8038] ? trace_irq_disable+0x3b/0x140 [ 191.429883][ T8038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.429904][ T8038] ? clear_bhb_loop+0x70/0xc0 [ 191.429930][ T8038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.429950][ T8038] RIP: 0033:0x7ffb6619e0d9 [ 191.429971][ T8038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.429987][ T8038] RSP: 002b:00007ffb67002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.430008][ T8038] RAX: ffffffffffffffda RBX: 00007ffb66426090 RCX: 00007ffb6619e0d9 [ 191.430025][ T8038] RDX: 000000000000000d RSI: 0000200000000600 RDI: 0000000000000003 [ 191.430040][ T8038] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.430053][ T8038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.430065][ T8038] R13: 00007ffb66426128 R14: 00007ffb66426090 R15: 00007ffd9ecc5288 [ 191.430098][ T8038] [ 191.437176][ T8038] kobject: kobject_add_internal failed for 0-0026 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.437220][ T8038] i2c i2c-0: Failed to register i2c client isp1301 at 0x26 (-17) [ 191.445475][ T8039] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0027' [ 191.445505][ T8039] CPU: 1 UID: 0 PID: 8039 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.445533][ T8039] Tainted: [L]=SOFTLOCKUP [ 191.445540][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.445552][ T8039] Call Trace: [ 191.445561][ T8039] [ 191.445569][ T8039] dump_stack_lvl+0xe8/0x150 [ 191.445604][ T8039] sysfs_create_dir_ns+0x271/0x2a0 [ 191.445634][ T8039] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.445664][ T8039] ? do_raw_spin_unlock+0xf5/0x200 [ 191.445694][ T8039] kobject_add_internal+0x622/0xcd0 [ 191.445727][ T8039] kobject_add+0x163/0x240 [ 191.445749][ T8039] ? rcu_is_watching+0x16/0xb0 [ 191.445773][ T8039] ? __pfx_kobject_add+0x10/0x10 [ 191.445799][ T8039] ? class_to_subsys+0xb6/0x120 [ 191.445830][ T8039] ? get_device_parent+0xbc/0x3a0 [ 191.445863][ T8039] device_add+0x3fa/0xb80 [ 191.445895][ T8039] i2c_new_client_device+0xa29/0x1130 [ 191.445949][ T8039] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.445981][ T8039] ? __mutex_lock+0x30b/0x1550 [ 191.446003][ T8039] ? new_device_store+0x132/0x530 [ 191.446029][ T8039] new_device_store+0x24b/0x530 [ 191.446051][ T8039] ? lock_acquire+0x115/0x350 [ 191.446082][ T8039] ? sysfs_file_kobj+0x1a/0x230 [ 191.446105][ T8039] ? __pfx_new_device_store+0x10/0x10 [ 191.446131][ T8039] ? sysfs_file_kobj+0x1a/0x230 [ 191.446151][ T8039] ? sysfs_file_kobj+0x1a/0x230 [ 191.446174][ T8039] ? sysfs_file_kobj+0x1e4/0x230 [ 191.446197][ T8039] ? sysfs_kf_write+0x166/0x260 [ 191.446224][ T8039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.446245][ T8039] kernfs_fop_write_iter+0x3a4/0x540 [ 191.446272][ T8039] vfs_write+0x612/0xba0 [ 191.446306][ T8039] ? __pfx_vfs_write+0x10/0x10 [ 191.446341][ T8039] ? __fget_files+0x2a/0x420 [ 191.446373][ T8039] ksys_write+0x150/0x270 [ 191.446400][ T8039] ? __pfx_ksys_write+0x10/0x10 [ 191.446424][ T8039] ? __pfx_kcov_ioctl+0x10/0x10 [ 191.446461][ T8039] do_syscall_64+0x166/0x520 [ 191.446481][ T8039] ? trace_irq_disable+0x3b/0x140 [ 191.446508][ T8039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.446528][ T8039] ? clear_bhb_loop+0x70/0xc0 [ 191.446552][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.446571][ T8039] RIP: 0033:0x7ffb6619e0d9 [ 191.446591][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.446607][ T8039] RSP: 002b:00007ffb66fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.446628][ T8039] RAX: ffffffffffffffda RBX: 00007ffb66426180 RCX: 00007ffb6619e0d9 [ 191.446643][ T8039] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000003 [ 191.446654][ T8039] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.446666][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.446677][ T8039] R13: 00007ffb66426218 R14: 00007ffb66426180 R15: 00007ffd9ecc5288 [ 191.446713][ T8039] [ 191.447552][ T8039] kobject: kobject_add_internal failed for 0-0027 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.447590][ T8039] i2c i2c-0: Failed to register i2c client isp1301 at 0x27 (-17) [ 191.447932][ T8042] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0028' [ 191.447968][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.447994][ T8042] Tainted: [L]=SOFTLOCKUP [ 191.448001][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.448013][ T8042] Call Trace: [ 191.448021][ T8042] [ 191.448029][ T8042] dump_stack_lvl+0xe8/0x150 [ 191.448060][ T8042] sysfs_create_dir_ns+0x271/0x2a0 [ 191.448091][ T8042] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.448122][ T8042] ? do_raw_spin_unlock+0xf5/0x200 [ 191.448152][ T8042] kobject_add_internal+0x622/0xcd0 [ 191.448183][ T8042] kobject_add+0x163/0x240 [ 191.448208][ T8042] ? rcu_is_watching+0x16/0xb0 [ 191.448232][ T8042] ? __pfx_kobject_add+0x10/0x10 [ 191.448259][ T8042] ? class_to_subsys+0xb6/0x120 [ 191.448287][ T8042] ? get_device_parent+0xbc/0x3a0 [ 191.448327][ T8042] device_add+0x3fa/0xb80 [ 191.448357][ T8042] i2c_new_client_device+0xa29/0x1130 [ 191.448399][ T8042] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.448429][ T8042] ? __mutex_lock+0x30b/0x1550 [ 191.448449][ T8042] ? new_device_store+0x132/0x530 [ 191.448475][ T8042] new_device_store+0x24b/0x530 [ 191.448496][ T8042] ? lock_acquire+0x115/0x350 [ 191.448523][ T8042] ? sysfs_file_kobj+0x1a/0x230 [ 191.448546][ T8042] ? __pfx_new_device_store+0x10/0x10 [ 191.448573][ T8042] ? sysfs_file_kobj+0x1a/0x230 [ 191.448593][ T8042] ? sysfs_file_kobj+0x1a/0x230 [ 191.448622][ T8042] ? sysfs_file_kobj+0x1e4/0x230 [ 191.448653][ T8042] ? sysfs_kf_write+0x166/0x260 [ 191.448686][ T8042] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.448708][ T8042] kernfs_fop_write_iter+0x3a4/0x540 [ 191.448741][ T8042] vfs_write+0x612/0xba0 [ 191.448775][ T8042] ? __pfx_vfs_write+0x10/0x10 [ 191.448809][ T8042] ? __fget_files+0x2a/0x420 [ 191.448847][ T8042] ksys_write+0x150/0x270 [ 191.448874][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 191.448898][ T8042] ? __pfx_kcov_ioctl+0x10/0x10 [ 191.448936][ T8042] do_syscall_64+0x166/0x520 [ 191.448956][ T8042] ? trace_irq_disable+0x3b/0x140 [ 191.448987][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.449006][ T8042] ? clear_bhb_loop+0x70/0xc0 [ 191.449030][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.449049][ T8042] RIP: 0033:0x7ffb6619e0d9 [ 191.449067][ T8042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.449083][ T8042] RSP: 002b:00007ffb66fc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.449103][ T8042] RAX: ffffffffffffffda RBX: 00007ffb66426270 RCX: 00007ffb6619e0d9 [ 191.449117][ T8042] RDX: 000000000000000d RSI: 0000200000000800 RDI: 0000000000000003 [ 191.449130][ T8042] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.449141][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.449153][ T8042] R13: 00007ffb66426308 R14: 00007ffb66426270 R15: 00007ffd9ecc5288 [ 191.449185][ T8042] [ 191.451646][ T8042] kobject: kobject_add_internal failed for 0-0028 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.451700][ T8042] i2c i2c-0: Failed to register i2c client isp1301 at 0x28 (-17) [ 191.489994][ T8037] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0029' [ 191.490027][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.490056][ T8037] Tainted: [L]=SOFTLOCKUP [ 191.490063][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.490075][ T8037] Call Trace: [ 191.490084][ T8037] [ 191.490092][ T8037] dump_stack_lvl+0xe8/0x150 [ 191.490128][ T8037] sysfs_create_dir_ns+0x271/0x2a0 [ 191.490163][ T8037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.490194][ T8037] ? do_raw_spin_unlock+0xf5/0x200 [ 191.490226][ T8037] kobject_add_internal+0x622/0xcd0 [ 191.490260][ T8037] kobject_add+0x163/0x240 [ 191.490283][ T8037] ? rcu_is_watching+0x16/0xb0 [ 191.490316][ T8037] ? __pfx_kobject_add+0x10/0x10 [ 191.490351][ T8037] ? class_to_subsys+0xb6/0x120 [ 191.490376][ T8037] ? get_device_parent+0xbc/0x3a0 [ 191.490410][ T8037] device_add+0x3fa/0xb80 [ 191.490442][ T8037] i2c_new_client_device+0xa29/0x1130 [ 191.490486][ T8037] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.490514][ T8037] ? __mutex_lock+0x30b/0x1550 [ 191.490535][ T8037] ? new_device_store+0x132/0x530 [ 191.490560][ T8037] new_device_store+0x24b/0x530 [ 191.490581][ T8037] ? lock_acquire+0x115/0x350 [ 191.490609][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.490632][ T8037] ? __pfx_new_device_store+0x10/0x10 [ 191.490658][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.490678][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.490700][ T8037] ? sysfs_file_kobj+0x1e4/0x230 [ 191.490723][ T8037] ? sysfs_kf_write+0x166/0x260 [ 191.490750][ T8037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.490771][ T8037] kernfs_fop_write_iter+0x3a4/0x540 [ 191.490797][ T8037] vfs_write+0x612/0xba0 [ 191.490836][ T8037] ? __pfx_vfs_write+0x10/0x10 [ 191.490873][ T8037] ? __fget_files+0x2a/0x420 [ 191.490906][ T8037] ksys_write+0x150/0x270 [ 191.490934][ T8037] ? __pfx_ksys_write+0x10/0x10 [ 191.490972][ T8037] do_syscall_64+0x166/0x520 [ 191.490992][ T8037] ? trace_irq_disable+0x3b/0x140 [ 191.491020][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.491041][ T8037] ? clear_bhb_loop+0x70/0xc0 [ 191.491066][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.491086][ T8037] RIP: 0033:0x7ffb6619e0d9 [ 191.491105][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.491120][ T8037] RSP: 002b:00007ffb67023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.491143][ T8037] RAX: ffffffffffffffda RBX: 00007ffb66425fa0 RCX: 00007ffb6619e0d9 [ 191.491157][ T8037] RDX: 000000000000000d RSI: 0000200000000900 RDI: 0000000000000003 [ 191.491169][ T8037] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.491181][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.491196][ T8037] R13: 00007ffb66426038 R14: 00007ffb66425fa0 R15: 00007ffd9ecc5288 [ 191.491229][ T8037] [ 191.497644][ T8037] kobject: kobject_add_internal failed for 0-0029 with -EEXIST, don't try to register things with the same name in the same directory. [ 191.497687][ T8037] i2c i2c-0: Failed to register i2c client isp1301 at 0x29 (-17) [ 191.505930][ T8037] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002a' [ 191.505958][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.505984][ T8037] Tainted: [L]=SOFTLOCKUP [ 191.505991][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.506003][ T8037] Call Trace: [ 191.506011][ T8037] [ 191.506019][ T8037] dump_stack_lvl+0xe8/0x150 [ 191.506052][ T8037] sysfs_create_dir_ns+0x271/0x2a0 [ 191.506083][ T8037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.506112][ T8037] ? do_raw_spin_unlock+0xf5/0x200 [ 191.506141][ T8037] kobject_add_internal+0x622/0xcd0 [ 191.506174][ T8037] kobject_add+0x163/0x240 [ 191.506196][ T8037] ? rcu_is_watching+0x16/0xb0 [ 191.506221][ T8037] ? __pfx_kobject_add+0x10/0x10 [ 191.506246][ T8037] ? class_to_subsys+0xb6/0x120 [ 191.506271][ T8037] ? get_device_parent+0xbc/0x3a0 [ 191.506301][ T8037] device_add+0x3fa/0xb80 [ 191.506329][ T8037] i2c_new_client_device+0xa29/0x1130 [ 191.506373][ T8037] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.506402][ T8037] ? __mutex_lock+0x30b/0x1550 [ 191.506422][ T8037] ? new_device_store+0x132/0x530 [ 191.506448][ T8037] new_device_store+0x24b/0x530 [ 191.506469][ T8037] ? lock_acquire+0x115/0x350 [ 191.506498][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.506520][ T8037] ? __pfx_new_device_store+0x10/0x10 [ 191.506548][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.506567][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.506590][ T8037] ? sysfs_file_kobj+0x1e4/0x230 [ 191.506612][ T8037] ? sysfs_kf_write+0x166/0x260 [ 191.506639][ T8037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.506660][ T8037] kernfs_fop_write_iter+0x3a4/0x540 [ 191.506685][ T8037] vfs_write+0x612/0xba0 [ 191.506719][ T8037] ? __pfx_vfs_write+0x10/0x10 [ 191.506753][ T8037] ? __fget_files+0x2a/0x420 [ 191.506791][ T8037] ksys_write+0x150/0x270 [ 191.506823][ T8037] ? __pfx_ksys_write+0x10/0x10 [ 191.506860][ T8037] do_syscall_64+0x166/0x520 [ 191.506879][ T8037] ? trace_irq_disable+0x3b/0x140 [ 191.506906][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.506926][ T8037] ? clear_bhb_loop+0x70/0xc0 [ 191.506951][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.506970][ T8037] RIP: 0033:0x7ffb6619e0d9 [ 191.506989][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.507004][ T8037] RSP: 002b:00007ffb67023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.507025][ T8037] RAX: ffffffffffffffda RBX: 00007ffb66425fa0 RCX: 00007ffb6619e0d9 [ 191.507040][ T8037] RDX: 000000000000000d RSI: 0000200000000a00 RDI: 0000000000000003 [ 191.507052][ T8037] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.507073][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.507085][ T8037] R13: 00007ffb66426038 R14: 00007ffb66425fa0 R15: 00007ffd9ecc5288 [ 191.507117][ T8037] [ 191.507141][ T8037] kobject: kobject_add_internal failed for 0-002a with -EEXIST, don't try to register things with the same name in the same directory. [ 191.510283][ T8037] i2c i2c-0: Failed to register i2c client isp1301 at 0x2a (-17) [ 191.525938][ T8037] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002b' [ 191.525967][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.525992][ T8037] Tainted: [L]=SOFTLOCKUP [ 191.525998][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.526011][ T8037] Call Trace: [ 191.526019][ T8037] [ 191.526028][ T8037] dump_stack_lvl+0xe8/0x150 [ 191.526064][ T8037] sysfs_create_dir_ns+0x271/0x2a0 [ 191.526094][ T8037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.526124][ T8037] ? do_raw_spin_unlock+0xf5/0x200 [ 191.526154][ T8037] kobject_add_internal+0x622/0xcd0 [ 191.526188][ T8037] kobject_add+0x163/0x240 [ 191.526211][ T8037] ? rcu_is_watching+0x16/0xb0 [ 191.526235][ T8037] ? __pfx_kobject_add+0x10/0x10 [ 191.526260][ T8037] ? class_to_subsys+0xb6/0x120 [ 191.526283][ T8037] ? get_device_parent+0xbc/0x3a0 [ 191.526314][ T8037] device_add+0x3fa/0xb80 [ 191.526343][ T8037] i2c_new_client_device+0xa29/0x1130 [ 191.526385][ T8037] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.526415][ T8037] ? __mutex_lock+0x30b/0x1550 [ 191.526435][ T8037] ? new_device_store+0x132/0x530 [ 191.526462][ T8037] new_device_store+0x24b/0x530 [ 191.526482][ T8037] ? lock_acquire+0x115/0x350 [ 191.526509][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.526532][ T8037] ? __pfx_new_device_store+0x10/0x10 [ 191.526559][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.526578][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.526600][ T8037] ? sysfs_file_kobj+0x1e4/0x230 [ 191.526623][ T8037] ? sysfs_kf_write+0x166/0x260 [ 191.526649][ T8037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.526712][ T8037] kernfs_fop_write_iter+0x3a4/0x540 [ 191.526739][ T8037] vfs_write+0x612/0xba0 [ 191.526791][ T8037] ? __pfx_vfs_write+0x10/0x10 [ 191.526834][ T8037] ? __fget_files+0x2a/0x420 [ 191.526872][ T8037] ksys_write+0x150/0x270 [ 191.526912][ T8037] ? __pfx_ksys_write+0x10/0x10 [ 191.526975][ T8037] do_syscall_64+0x166/0x520 [ 191.526995][ T8037] ? trace_irq_disable+0x3b/0x140 [ 191.527047][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.527072][ T8037] ? clear_bhb_loop+0x70/0xc0 [ 191.527104][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.527128][ T8037] RIP: 0033:0x7ffb6619e0d9 [ 191.527153][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.527186][ T8037] RSP: 002b:00007ffb67023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.527224][ T8037] RAX: ffffffffffffffda RBX: 00007ffb66425fa0 RCX: 00007ffb6619e0d9 [ 191.527240][ T8037] RDX: 000000000000000d RSI: 0000200000000b00 RDI: 0000000000000003 [ 191.527252][ T8037] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.527264][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.527276][ T8037] R13: 00007ffb66426038 R14: 00007ffb66425fa0 R15: 00007ffd9ecc5288 [ 191.527308][ T8037] [ 191.535883][ T8037] kobject: kobject_add_internal failed for 0-002b with -EEXIST, don't try to register things with the same name in the same directory. [ 191.535922][ T8037] i2c i2c-0: Failed to register i2c client isp1301 at 0x2b (-17) [ 191.554788][ T8037] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-002c' [ 191.554827][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.1.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.554854][ T8037] Tainted: [L]=SOFTLOCKUP [ 191.554861][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.554873][ T8037] Call Trace: [ 191.554881][ T8037] [ 191.554889][ T8037] dump_stack_lvl+0xe8/0x150 [ 191.554922][ T8037] sysfs_create_dir_ns+0x271/0x2a0 [ 191.554953][ T8037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 191.554998][ T8037] ? do_raw_spin_unlock+0xf5/0x200 [ 191.555029][ T8037] kobject_add_internal+0x622/0xcd0 [ 191.555063][ T8037] kobject_add+0x163/0x240 [ 191.555086][ T8037] ? rcu_is_watching+0x16/0xb0 [ 191.555110][ T8037] ? __pfx_kobject_add+0x10/0x10 [ 191.555135][ T8037] ? class_to_subsys+0xb6/0x120 [ 191.555158][ T8037] ? get_device_parent+0xbc/0x3a0 [ 191.555193][ T8037] device_add+0x3fa/0xb80 [ 191.555221][ T8037] i2c_new_client_device+0xa29/0x1130 [ 191.555264][ T8037] ? __pfx_i2c_new_client_device+0x10/0x10 [ 191.555295][ T8037] ? __mutex_lock+0x30b/0x1550 [ 191.555314][ T8037] ? new_device_store+0x132/0x530 [ 191.555340][ T8037] new_device_store+0x24b/0x530 [ 191.555360][ T8037] ? lock_acquire+0x115/0x350 [ 191.555388][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.555410][ T8037] ? __pfx_new_device_store+0x10/0x10 [ 191.555436][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.555456][ T8037] ? sysfs_file_kobj+0x1a/0x230 [ 191.555479][ T8037] ? sysfs_file_kobj+0x1e4/0x230 [ 191.555502][ T8037] ? sysfs_kf_write+0x166/0x260 [ 191.555528][ T8037] ? __pfx_sysfs_kf_write+0x10/0x10 [ 191.555549][ T8037] kernfs_fop_write_iter+0x3a4/0x540 [ 191.555575][ T8037] vfs_write+0x612/0xba0 [ 191.555609][ T8037] ? __pfx_vfs_write+0x10/0x10 [ 191.555644][ T8037] ? __fget_files+0x2a/0x420 [ 191.555676][ T8037] ksys_write+0x150/0x270 [ 191.555703][ T8037] ? __pfx_ksys_write+0x10/0x10 [ 191.555738][ T8037] do_syscall_64+0x166/0x520 [ 191.555758][ T8037] ? trace_irq_disable+0x3b/0x140 [ 191.555785][ T8037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.555812][ T8037] ? clear_bhb_loop+0x70/0xc0 [ 191.555836][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.555855][ T8037] RIP: 0033:0x7ffb6619e0d9 [ 191.555873][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.555889][ T8037] RSP: 002b:00007ffb67023028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.555911][ T8037] RAX: ffffffffffffffda RBX: 00007ffb66425fa0 RCX: 00007ffb6619e0d9 [ 191.555925][ T8037] RDX: 000000000000000d RSI: 0000200000000c00 RDI: 0000000000000003 [ 191.555936][ T8037] RBP: 00007ffb66235024 R08: 0000000000000000 R09: 0000000000000000 [ 191.555948][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.555960][ T8037] R13: 00007ffb66426038 R14: 00007ffb66425fa0 R15: 00007ffd9ecc5288 [ 191.555992][ T8037] [ 191.558290][ T8037] kobject: kobject_add_internal failed for 0-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 191.558324][ T8037] i2c i2c-0: Failed to register i2c client isp1301 at 0x2c (-17) [ 192.086661][ T8050] fuse: Bad value for 'fd' [ 192.882508][ T5768] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 193.046189][ T5768] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.048807][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.048855][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.080381][ T5768] usb 2-1: config 0 descriptor?? [ 193.334081][ T5768] usbhid 2-1:0.0: can't add hid device: -71 [ 193.334198][ T5768] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.380614][ T5768] usb 2-1: USB disconnect, device number 17 [ 193.899782][ T5768] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.052502][ T5768] usb 2-1: Using ep0 maxpacket: 16 [ 194.053246][ T5768] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 194.054367][ T5768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.054412][ T5768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.057442][ T5768] usb 2-1: config 0 descriptor?? [ 194.488711][ T5768] kye 0003:0458:5016.0006: control desc unexpectedly large [ 194.488770][ T5768] kye 0003:0458:5016.0006: control desc unexpectedly large [ 194.509950][ T5768] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0006/input/input18 [ 194.618568][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.631965][ T5621] usb 3-1: firmware not found. [ 194.847308][ T5768] kye 0003:0458:5016.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 194.866572][ T8087] fuse: fd is not a fuse device [ 194.995439][ T8090] futex_wake_op: syz.3.845 tries to shift op by 144; fix this program [ 195.071136][ T44] usb 2-1: USB disconnect, device number 18 [ 195.686516][ T8115] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.734416][ T8115] md: couldn't update array info. -22 [ 195.734656][ T7974] md_update_sb: can't update sb for read-only array md0 [ 195.772741][ T8115] md: could not open device unknown-block(1,1). [ 195.772823][ T8115] md: md_import_device returned -16 [ 195.775466][ T7974] md_update_sb: can't update sb for read-only array md0 [ 195.802532][ T8115] md: couldn't update array info. -22 [ 195.806541][ T7974] md_update_sb: can't update sb for read-only array md0 [ 195.868815][ T8119] fuse: fd is not a fuse device [ 196.385365][ T8136] fuse: fd is not a fuse device [ 196.392563][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.476737][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.522194][ T8133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.551742][ T8138] fuse: fd is not a fuse device [ 196.663745][ T8142] fuse: fd is not a fuse device [ 196.841195][ T8144] fuse: fd is not a fuse device [ 197.476424][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880592a7400: rx timeout, send abort [ 197.486188][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803251c000: rx timeout, send abort [ 197.742593][ T8165] fuse: fd is not a fuse device [ 197.976511][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880592a7400: abort rx timeout. Force session deactivation [ 197.987590][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803251c000: abort rx timeout. Force session deactivation [ 199.105741][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 199.169803][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 199.795044][ T8207] kvm: pic: single mode not supported [ 199.798668][ T8207] kvm: pic: level sensitive irq not supported [ 199.812760][ T8207] kvm: pic: level sensitive irq not supported [ 200.468977][ T8226] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 200.883638][ T5618] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 200.890610][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c666400: rx timeout, send abort [ 201.365137][ T8259] syzkaller0: entered promiscuous mode [ 201.365198][ T8259] syzkaller0: entered allmulticast mode [ 201.385659][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c667c00: rx timeout, send abort [ 201.394202][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c666400: abort rx timeout. Force session deactivation [ 201.827152][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.837388][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 201.885732][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c667c00: abort rx timeout. Force session deactivation [ 201.889572][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880596bcc00: rx timeout, send abort [ 201.889856][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880596bcc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 202.264054][ T5621] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.432540][ T5621] usb 3-1: Using ep0 maxpacket: 8 [ 202.433904][ T5621] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 202.435623][ T5621] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.435679][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.473983][ T5621] usb 3-1: config 0 descriptor?? [ 202.687127][ T8286] fuse: fd is not a fuse device [ 202.894892][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.894960][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.894999][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895025][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895051][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895076][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895102][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895133][ T5621] chicony 0003:04F2:0418.0007: unknown main item tag 0x0 [ 202.895208][ T5621] chicony 0003:04F2:0418.0007: unknown global tag 0xd [ 202.895225][ T5621] chicony 0003:04F2:0418.0007: item 0 0 1 13 parsing failed [ 202.895878][ T5621] chicony 0003:04F2:0418.0007: Chicony hid parse failed: -22 [ 202.895946][ T5621] chicony 0003:04F2:0418.0007: probe with driver chicony failed with error -22 [ 203.090795][ T8276] netlink: 188 bytes leftover after parsing attributes in process `syz.2.914'. [ 203.092476][ T5726] usb 3-1: USB disconnect, device number 10 [ 203.663965][ T8299] overlayfs: failed to clone upperpath [ 204.212159][ T8314] fuse: fd is not a fuse device [ 204.387595][ T8317] clocksource: Switched to clocksource acpi_pm [ 204.397065][ T8317] clocksource: Switched to clocksource kvm-clock [ 204.403481][ T8317] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 204.403939][ T8317] clocksource: Switched to clocksource tsc [ 204.430832][ T8317] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 204.444419][ T8317] clocksource: Switched to clocksource kvm-clock [ 204.456522][ T8317] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 204.458421][ T8317] clocksource: Switched to clocksource acpi_pm [ 204.767044][ T8330] Bluetooth: (null): Invalid header checksum [ 204.923850][ T5627] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 204.939417][ T5627] Bluetooth: hci3: Injecting HCI hardware error event [ 204.942084][ T5627] Bluetooth: hci3: hardware error 0x00 [ 205.062828][ T5768] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 205.215201][ T5768] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 205.228607][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.237284][ T5768] usb 3-1: Product: syz [ 205.242086][ T5768] usb 3-1: Manufacturer: syz [ 205.246946][ T5768] usb 3-1: SerialNumber: syz [ 205.256142][ T5768] usb 3-1: config 0 descriptor?? [ 205.471209][ T5768] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 206.584894][ T8365] fuse: fd is not a fuse device [ 206.905030][ T5768] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 206.910981][ T5768] usb 3-1: USB disconnect, device number 11 [ 207.012381][ T5627] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 207.153960][ T8376] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 207.153994][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 207.154521][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 207.172878][ T8377] vhci_hcd: connection closed [ 207.179454][ T82] vhci_hcd vhci_hcd.1: stop threads [ 207.179540][ T82] vhci_hcd vhci_hcd.1: release socket [ 207.179565][ T82] vhci_hcd vhci_hcd.1: disconnect device [ 207.616267][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 207.616323][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.958'. [ 207.926662][ T8406] futex_wake_op: syz.2.964 tries to shift op by 144; fix this program [ 208.340935][ T8419] kvm: pic: non byte write [ 208.352354][ T8419] kvm: vcpu 0: requested 1920 ns lapic timer period limited to 200000 ns [ 208.802225][ T5726] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.872173][ T5621] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 208.962137][ T5726] usb 2-1: Using ep0 maxpacket: 16 [ 208.972308][ T5726] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.972376][ T5726] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 208.991008][ T5726] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.991088][ T5726] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 208.991132][ T5726] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.028303][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.036778][ T5726] usb 2-1: Product: syz [ 209.042344][ T5726] usb 2-1: Manufacturer: syz [ 209.047086][ T5726] usb 2-1: SerialNumber: syz [ 209.065920][ T5621] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 209.078439][ T5621] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.092407][ T5621] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.107741][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.107845][ T5621] usb 3-1: Product: syz [ 209.107864][ T5621] usb 3-1: Manufacturer: syz [ 209.107881][ T5621] usb 3-1: SerialNumber: syz [ 209.153729][ T5621] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 209.174386][ T5621] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 209.191567][ T5621] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 209.305515][ T5726] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 209.321240][ T5726] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.709262][ T5726] usb 2-1: 2:1 : bogus bTerminalLink 6 [ 210.011204][ T5726] usb 2-1: USB disconnect, device number 19 [ 210.128289][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.946168][ T8469] overlayfs: failed to clone upperpath [ 211.082006][ T189] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 211.231962][ T189] usb 2-1: Using ep0 maxpacket: 32 [ 211.239705][ T189] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 211.250909][ T189] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 211.267170][ T189] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 211.267215][ T189] usb 2-1: Product: syz [ 211.267260][ T189] usb 2-1: Manufacturer: syz [ 211.267278][ T189] usb 2-1: SerialNumber: syz [ 211.299370][ T189] usb 2-1: config 0 descriptor?? [ 211.307179][ T8467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 211.495220][ T8427] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 211.509046][ T8427] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 211.516571][ T8427] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 211.528111][ T8427] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 211.546818][ T189] usb 3-1: USB disconnect, device number 12 [ 211.576295][ T189] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 211.599464][ T189] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 211.612193][ T189] ti_usb_3410_5052 3-1:2.0: device disconnected [ 212.228287][ T5768] usb 2-1: USB disconnect, device number 20 [ 212.290028][ T8496] fuse: fd is not a fuse device [ 212.902431][ T8504] kvm: pic: single mode not supported [ 212.902741][ T8504] kvm: pic: single mode not supported [ 212.902948][ T8504] kvm: pic: single mode not supported [ 212.903154][ T8504] kvm: pic: level sensitive irq not supported [ 212.904073][ T8504] kvm: pic: level sensitive irq not supported [ 212.904379][ T8504] kvm: pic: single mode not supported [ 212.904965][ T8504] kvm: pic: single mode not supported [ 212.905118][ T8504] kvm: pic: single mode not supported [ 213.485402][ T8524] kAFS: No cell specified [ 213.499626][ T8525] fuse: fd is not a fuse device [ 213.826217][ T8541] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 213.849724][ T8541] netlink: 'syz.1.1018': attribute type 4 has an invalid length. [ 214.232083][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 214.232127][ T8554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 214.232161][ T8554] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1021'. [ 215.230002][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.241669][ T5768] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.417409][ T5768] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.419121][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.419168][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.461180][ T5768] usb 3-1: config 0 descriptor?? [ 215.572603][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.691487][ T5768] usbhid 3-1:0.0: can't add hid device: -71 [ 215.698896][ T5768] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.716128][ T5768] usb 3-1: USB disconnect, device number 13 [ 215.932438][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.096361][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.211829][ T5768] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.367180][ T5768] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.379278][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.379337][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.408869][ T5768] usb 3-1: config 0 descriptor?? [ 216.865471][ T5768] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 216.904268][ T5768] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input19 [ 217.001701][ T59] bridge_slave_1: left allmulticast mode [ 217.001949][ T59] bridge_slave_1: left promiscuous mode [ 217.012641][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.117610][ T59] bridge_slave_0: left allmulticast mode [ 217.142099][ T5768] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 217.179215][ T59] bridge_slave_0: left promiscuous mode [ 217.179516][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.654404][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.663186][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.678287][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.683409][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.684652][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.054689][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.074687][ T59] bond0 (unregistering): Released all slaves [ 218.274110][ T59] tipc: Disabling bearer [ 218.274448][ T59] tipc: Disabling bearer [ 218.305414][ T59] tipc: Disabling bearer [ 218.316791][ T59] tipc: Left network mode [ 218.922314][ T5768] usb 3-1: USB disconnect, device number 14 [ 219.534962][ T59] hsr_slave_0: left promiscuous mode [ 219.544003][ T59] hsr_slave_1: left promiscuous mode [ 219.550436][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.560132][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.573392][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.580994][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.615316][ T59] veth1_macvtap: left promiscuous mode [ 219.627058][ T59] veth0_macvtap: left promiscuous mode [ 219.627240][ T59] veth1_vlan: left promiscuous mode [ 219.627649][ T59] veth0_vlan: left promiscuous mode [ 219.811199][ T5627] Bluetooth: hci3: command tx timeout [ 220.024479][ T59] team0 (unregistering): Port device team_slave_1 removed [ 220.045611][ T59] team0 (unregistering): Port device team_slave_0 removed [ 220.294085][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.969823][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.256436][ T8719] fuse: fd is not a fuse device [ 221.434319][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.438773][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.438946][ T8622] bridge_slave_0: entered allmulticast mode [ 221.447892][ T8622] bridge_slave_0: entered promiscuous mode [ 221.456272][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.456437][ T8622] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.456573][ T8622] bridge_slave_1: entered allmulticast mode [ 221.460277][ T8622] bridge_slave_1: entered promiscuous mode [ 221.523127][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 221.574943][ T8622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.586407][ T8622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.697021][ T8622] team0: Port device team_slave_0 added [ 221.707801][ T8622] team0: Port device team_slave_1 added [ 221.782527][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.789716][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.789748][ T8622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.835567][ T8622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.835636][ T8622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.839511][ T8622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.891602][ T5627] Bluetooth: hci3: command tx timeout [ 221.997290][ T8622] hsr_slave_0: entered promiscuous mode [ 222.000147][ T8622] hsr_slave_1: entered promiscuous mode [ 222.045066][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 222.814730][ T8622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.829948][ T8622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.833401][ T8622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.855945][ T8622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.864846][ T8622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.887453][ T8622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.888370][ T8622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.936316][ T8622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.981729][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 223.149404][ T8779] fuse: fd is not a fuse device [ 223.161336][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.206904][ T8622] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.226650][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.226772][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.256299][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.256421][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.052913][ T5627] Bluetooth: hci3: command tx timeout [ 224.822664][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 225.152562][ T8622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.641707][ T8622] veth0_vlan: entered promiscuous mode [ 225.657747][ T8622] veth1_vlan: entered promiscuous mode [ 225.709104][ T8622] veth0_macvtap: entered promiscuous mode [ 225.724599][ T8622] veth1_macvtap: entered promiscuous mode [ 225.749861][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.778311][ T8622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.899806][ T6785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.899877][ T6785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.899925][ T6785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.899957][ T6785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.012648][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.012689][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.130772][ T5627] Bluetooth: hci3: command tx timeout [ 226.143393][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.143438][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.209158][ T30] audit: type=1326 audit(1787334252.290:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f94fefe60f3 code=0x7ffc0000 [ 226.210756][ T30] audit: type=1326 audit(1787334252.290:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.210831][ T30] audit: type=1326 audit(1787334252.290:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.212498][ T30] audit: type=1326 audit(1787334252.290:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.213430][ T30] audit: type=1326 audit(1787334252.290:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f94fefe60f3 code=0x7ffc0000 [ 226.213471][ T30] audit: type=1326 audit(1787334252.290:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.213662][ T30] audit: type=1326 audit(1787334252.290:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f94fefe60f3 code=0x7ffc0000 [ 226.213926][ T30] audit: type=1326 audit(1787334252.290:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.216237][ T30] audit: type=1326 audit(1787334252.290:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f94fefe60f3 code=0x7ffc0000 [ 226.216279][ T30] audit: type=1326 audit(1787334252.290:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8856 comm="syz.2.1092" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94fe19e0d9 code=0x7ffc0000 [ 226.969078][ T8869] kvm: pic: non byte write [ 230.334301][ T8940] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 231.357405][ T8950] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 234.991081][ T9033] fuse: fd is not a fuse device [ 235.187733][ T9039] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 235.233737][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 235.233807][ T30] audit: type=1400 audit(1787334261.320:110): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=9038 comm="syz.2.1137" [ 235.397554][ T8911] Set syz1 is full, maxelem 65536 reached [ 235.520694][ T9048] fuse: fd is not a fuse device [ 236.077058][ T9070] fuse: fd is not a fuse device [ 236.361282][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'. [ 236.736831][ T9090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1155'. [ 236.750671][ T9090] unsupported nlmsg_type 40 [ 236.927391][ T9099] openvswitch: netlink: Missing key (keys=40, expected=100) [ 237.509547][ T9131] fuse: fd is not a fuse device [ 239.027276][ T9168] overlayfs: failed to clone upperpath [ 239.293134][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 239.439737][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 239.444368][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.444397][ T10] usb 3-1: Product: syz [ 239.444412][ T10] usb 3-1: Manufacturer: syz [ 239.444425][ T10] usb 3-1: SerialNumber: syz [ 239.883071][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 239.883161][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 240.430140][ T9207] tipc: Started in network mode [ 240.436118][ T9207] tipc: Node identity ac14140f, cluster identity 4711 [ 240.436481][ T9207] tipc: New replicast peer: 255.255.255.255 [ 240.437190][ T9207] tipc: Enabled bearer , priority 10 [ 240.724750][ T9222] overlayfs: upper fs does not support tmpfile. [ 241.502448][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 241.502535][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 241.512983][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.522746][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 241.531665][ T10] usb 3-1: USB disconnect, device number 15 [ 241.548702][ T5768] tipc: Node number set to 2886997007 [ 241.595290][ T9230] netlink: 'syz.3.1182': attribute type 4 has an invalid length. [ 241.620624][ T9230] netlink: 'syz.3.1182': attribute type 4 has an invalid length. [ 241.695841][ T9234] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 242.436095][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1188'. [ 242.499061][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 242.823759][ T10] libceph: connect (1)127.0.0.1:6789 error -101 [ 242.833800][ T10] libceph: mon0 (1)127.0.0.1:6789 connect error [ 242.856513][ T10] libceph: connect (2)127.0.0.1:6789 error -101 [ 242.861768][ T25] libceph: connect (2)127.0.0.1:6789 error -101 [ 242.861980][ T25] libceph: ceph_tcp_connect failed: -101 [ 242.861996][ T25] libceph: mon0 (2)127.0.0.1:6789 connect error [ 242.882313][ T10] libceph: ceph_tcp_connect failed: -101 [ 242.888292][ T10] libceph: mon0 (2)127.0.0.1:6789 connect error [ 242.922017][ T9271] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 242.922063][ T9271] netlink: 'syz.3.1194': attribute type 2 has an invalid length. [ 243.104392][ T10] libceph: connect (1)127.0.0.1:6789 error -101 [ 243.104581][ T10] libceph: mon0 (1)127.0.0.1:6789 connect error [ 243.148809][ T25] libceph: connect (2)127.0.0.1:6789 error -101 [ 243.148809][ T10] libceph: connect (2)127.0.0.1:6789 error -101 [ 243.148982][ T10] libceph: ceph_tcp_connect failed: -101 [ 243.148999][ T10] libceph: mon0 (2)127.0.0.1:6789 connect error [ 243.176715][ T25] libceph: ceph_tcp_connect failed: -101 [ 243.176774][ T25] libceph: mon0 (2)127.0.0.1:6789 connect error [ 243.608733][ T5726] libceph: connect (1)127.0.0.1:6789 error -101 [ 243.608925][ T5726] libceph: mon0 (1)127.0.0.1:6789 connect error [ 243.646017][ T9259] ceph: No mds server is up or the cluster is laggy [ 243.652266][ T9260] ceph: No mds server is up or the cluster is laggy [ 243.653225][ T9263] ceph: No mds server is up or the cluster is laggy [ 243.661292][ T5726] libceph: connect (2)127.0.0.1:6789 error -101 [ 243.661460][ T5726] libceph: ceph_tcp_connect failed: -101 [ 243.661476][ T5726] libceph: mon0 (2)127.0.0.1:6789 connect error [ 243.688769][ T25] libceph: connect (2)127.0.0.1:6789 error -101 [ 243.688969][ T25] libceph: ceph_tcp_connect failed: -101 [ 243.688985][ T25] libceph: mon0 (2)127.0.0.1:6789 connect error [ 243.833191][ T9282] tipc: Failed to remove unknown binding: 66,0,0/0:1368327818/1368327820 [ 243.842080][ T9282] tipc: Failed to remove unknown binding: 66,0,0/0:1368327818/1368327819 [ 243.851459][ T9282] tipc: Failed to remove unknown binding: 66,0,0/0:1368327818/1368327820 [ 243.861715][ T9282] tipc: Failed to remove unknown binding: 66,0,0/0:1368327818/1368327819 [ 243.991485][ T9286] fuse: fd is not a fuse device [ 244.431137][ T9301] kvm: pic: non byte write [ 246.039174][ T9342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.163516][ T9351] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 246.163516][ T9351] The task syz.4.1221 (9351) triggered the difference, watch for misbehavior. [ 246.648172][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 246.739748][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 246.799353][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 246.809728][ T10] usb 3-1: config 0 has no interfaces? [ 246.815849][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.833974][ T10] usb 3-1: config 0 descriptor?? [ 247.107540][ T25] usb 3-1: USB disconnect, device number 16 [ 247.314899][ T5627] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 247.314936][ T5627] CPU: 1 UID: 0 PID: 5627 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.314966][ T5627] Tainted: [L]=SOFTLOCKUP [ 247.314973][ T5627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.314987][ T5627] Workqueue: hci1 hci_rx_work [ 247.315028][ T5627] Call Trace: [ 247.315036][ T5627] [ 247.315046][ T5627] dump_stack_lvl+0xe8/0x150 [ 247.315079][ T5627] sysfs_create_dir_ns+0x271/0x2a0 [ 247.315110][ T5627] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 247.315138][ T5627] ? do_raw_spin_unlock+0xf5/0x200 [ 247.315167][ T5627] kobject_add_internal+0x622/0xcd0 [ 247.315200][ T5627] kobject_add+0x163/0x240 [ 247.315229][ T5627] ? __pfx_kobject_add+0x10/0x10 [ 247.315259][ T5627] ? get_device_parent+0x366/0x3a0 [ 247.315290][ T5627] device_add+0x3fa/0xb80 [ 247.315319][ T5627] hci_conn_add_sysfs+0xd5/0x210 [ 247.315352][ T5627] le_conn_complete_evt+0x10b2/0x17a0 [ 247.315383][ T5627] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 247.315408][ T5627] ? __mutex_unlock_slowpath+0x731/0x900 [ 247.315433][ T5627] ? skb_pull_data+0xf0/0x200 [ 247.315475][ T5627] hci_le_conn_complete_evt+0x187/0x470 [ 247.315506][ T5627] hci_event_packet+0x67a/0xf10 [ 247.315544][ T5627] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 247.315566][ T5627] ? __pfx_hci_event_packet+0x10/0x10 [ 247.315601][ T5627] ? audit_filter_rules+0x4180/0x5d10 [ 247.315626][ T5627] ? hci_send_to_monitor+0xe2/0x590 [ 247.315655][ T5627] hci_rx_work+0x3ee/0x1020 [ 247.315692][ T5627] ? process_scheduled_works+0x97a/0x1630 [ 247.315716][ T5627] process_scheduled_works+0xc3d/0x1630 [ 247.315772][ T5627] ? __pfx_process_scheduled_works+0x10/0x10 [ 247.315800][ T5627] ? assign_work+0x3cf/0x5d0 [ 247.315827][ T5627] worker_thread+0xa47/0xfb0 [ 247.315877][ T5627] kthread+0x38b/0x480 [ 247.315905][ T5627] ? __pfx_worker_thread+0x10/0x10 [ 247.315927][ T5627] ? __pfx_kthread+0x10/0x10 [ 247.315955][ T5627] ret_from_fork+0x514/0xb70 [ 247.315990][ T5627] ? __pfx_ret_from_fork+0x10/0x10 [ 247.316017][ T5627] ? __switch_to+0xc89/0x1420 [ 247.316044][ T5627] ? __pfx_kthread+0x10/0x10 [ 247.316073][ T5627] ret_from_fork_asm+0x1a/0x30 [ 247.316116][ T5627] [ 247.319681][ T5627] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 247.319728][ T5627] Bluetooth: hci1: failed to register connection device [ 247.867465][ T9394] fuse: fd is not a fuse device [ 251.265382][ T9460] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1261'. [ 251.275712][ T9460] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1261'. [ 251.317787][ T5768] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.470253][ T5768] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 251.473475][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.478706][ T5768] usb 3-1: config 0 descriptor?? [ 251.504424][ T5768] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 251.871075][ T9465] x_tables: duplicate entry at hook 1 [ 251.940777][ T9471] netlink: 'syz.4.1263': attribute type 4 has an invalid length. [ 251.992173][ T9474] fuse: fd is not a fuse device [ 252.474499][ T9480] fuse: fd is not a fuse device [ 252.557634][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 252.557687][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 253.282083][ T9498] binder: 9495:9498 ioctl c0306201 200000000480 returned -14 [ 253.664812][ T44] usb 3-1: USB disconnect, device number 17 [ 254.325368][ T9526] fuse: fd is not a fuse device [ 254.813801][ T9536] protocol 0000 is buggy, dev veth0_vlan [ 254.982506][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1287'. [ 255.150297][ T9542] netlink: 'syz.4.1288': attribute type 25 has an invalid length. [ 255.446141][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 255.467321][ T44] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 255.617274][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 255.623760][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.639076][ T44] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.639130][ T44] usb 3-1: config 0 has no interface number 0 [ 255.639187][ T44] usb 3-1: config 0 interface 184 has no altsetting 0 [ 255.663942][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.663991][ T44] usb 3-1: Product: syz [ 255.664024][ T44] usb 3-1: Manufacturer: syz [ 255.664042][ T44] usb 3-1: SerialNumber: syz [ 255.689230][ T44] usb 3-1: config 0 descriptor?? [ 256.046439][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.320571][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 256.332501][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.721368][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 256.737345][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 256.750171][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 256.770712][ T9567] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 256.785936][ T9567] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 256.821327][ T9567] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 256.859476][ T9567] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.885324][ T9567] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 257.276124][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 257.281295][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 257.284192][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 257.289397][ T9567] wlan0 speed is unknown, defaulting to 1000 [ 258.120344][ T9595] netlink: 'syz.4.1302': attribute type 2 has an invalid length. [ 258.120389][ T9595] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1302'. [ 258.164358][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'. [ 258.203173][ T9595] team0: Port device team_slave_1 removed [ 258.284128][ T9597] wlan0 speed is unknown, defaulting to 1000 [ 258.339844][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71 [ 258.339906][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71 [ 258.339943][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 258.339967][ T44] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.340233][ T44] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.417577][ T44] usb 3-1: USB disconnect, device number 18 [ 259.123914][ T9624] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1307'. [ 259.129821][ T9624] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1307'. [ 260.239496][ T9641] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 260.669224][ T9658] protocol 0000 is buggy, dev veth0_vlan [ 261.526399][ T9676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.215402][ T30] audit: type=1326 audit(1787334289.300:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.3.1332" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7faab38d30f3 code=0x0 [ 263.273460][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 264.399261][ T9720] netlink: 'syz.2.1344': attribute type 2 has an invalid length. [ 264.411387][ T9720] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1344'. [ 264.444261][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 264.462030][ T9725] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 264.518657][ T9720] team0: Port device team_slave_1 removed [ 265.618791][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 265.636458][ T9755] overlayfs: failed to clone upperpath [ 265.991279][ T9762] netlink: 'syz.4.1357': attribute type 4 has an invalid length. [ 266.005418][ T9762] netlink: 'syz.4.1357': attribute type 4 has an invalid length. [ 266.439236][ T9767] netlink: 'syz.3.1359': attribute type 10 has an invalid length. [ 266.444882][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.447860][ T9767] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.688830][ T9774] fuse: fd is not a fuse device [ 266.799127][ T9782] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 266.799168][ T9782] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 266.853313][ T9784] netlink: 'syz.0.1367': attribute type 4 has an invalid length. [ 266.868204][ T9784] netlink: 'syz.0.1367': attribute type 4 has an invalid length. [ 268.277436][ T9818] ªªªªªª: renamed from vlan0 (while UP) [ 268.345270][ T9823] fuse: fd is not a fuse device [ 268.409691][ T9820] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1379'. [ 269.495309][ T9854] netlink: 'syz.3.1392': attribute type 3 has an invalid length. [ 269.495370][ T9854] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1392'. [ 270.489295][ T9875] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1399'. [ 271.795888][ T5627] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 272.969563][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 273.461035][ T9968] smpboot: CPU 1 is now offline [ 273.721413][ T9970] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 274.791227][ T9988] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1431'. [ 275.137208][ T30] audit: type=1326 audit(1787334301.230:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9995 comm="syz.2.1435" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f94fefe60f3 code=0x0 [ 275.797845][ T5627] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 275.805834][ T5627] Bluetooth: hci2: Injecting HCI hardware error event [ 275.807677][ T4932] Bluetooth: hci2: hardware error 0x00 [ 276.427841][T10017] syzkaller0: entered promiscuous mode [ 276.433895][T10017] syzkaller0: entered allmulticast mode [ 277.761109][T10044] fuse: fd is not a fuse device [ 277.878721][ T4932] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 278.043201][T10055] fuse: fd is not a fuse device [ 278.065296][ T10] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 278.065363][ T10] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 278.150741][T10051] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 278.936192][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 280.517139][T10086] netlink: 'syz.4.1469': attribute type 16 has an invalid length. [ 280.601471][T10084] netlink: 'syz.3.1468': attribute type 2 has an invalid length. [ 281.365573][ T44] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 281.525845][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 281.532628][ T44] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 281.544035][ T44] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 281.552489][ T44] usb 3-1: config 0 has no interface number 0 [ 281.552551][ T44] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 281.552579][ T44] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 281.584483][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.584532][ T44] usb 3-1: Product: syz [ 281.584565][ T44] usb 3-1: Manufacturer: syz [ 281.584582][ T44] usb 3-1: SerialNumber: syz [ 281.611250][ T44] usb 3-1: config 0 descriptor?? [ 281.620541][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.621128][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.665143][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1479'. [ 281.850828][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 281.850984][T10106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.207404][ T44] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 283.587638][T10152] binder: 10151:10152 ioctl c0306201 2000000009c0 returned -14 [ 284.710308][ C0] Unknown status report in ack skb [ 284.768044][ T44] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 284.779678][ T44] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 284.793337][ T44] asix 3-1:0.34: probe with driver asix failed with error -71 [ 284.809835][ T44] usb 3-1: USB disconnect, device number 19 [ 285.121118][ T30] audit: type=1326 audit(1787334311.210:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10191 comm="syz.0.1503" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f3498a6b0f3 code=0x0 [ 285.688799][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880350d0800: rx timeout, send abort [ 285.697757][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880350d3400: rx timeout, send abort [ 286.188892][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880350d0800: abort rx timeout. Force session deactivation [ 286.201086][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880350d3400: abort rx timeout. Force session deactivation [ 288.457039][T10242] fuse: fd is not a fuse device [ 289.402958][T10270] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 289.464585][T10276] fuse: fd is not a fuse device [ 295.137930][T10448] wlan0 speed is unknown, defaulting to 1000 [ 295.197571][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 295.246609][ T4932] Bluetooth: hci1: unexpected event for opcode 0x000e [ 295.642264][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880268f6800: rx timeout, send abort [ 296.078312][T10476] fuse: fd is not a fuse device [ 296.142362][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880268f6800: abort rx timeout. Force session deactivation [ 296.142543][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880268f6400: rx timeout, send abort [ 296.642701][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880268f6400: abort rx timeout. Force session deactivation [ 296.646276][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802d3a8400: rx timeout, send abort [ 296.646620][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802d3a8400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 297.784687][T10520] fuse: fd is not a fuse device [ 298.770156][T10546] rdma_rxe: rxe_newlink: failed to add lo [ 298.988249][T10556] smbdirect: ib_dev[syz0] removed [ 299.827633][T10571] syzkaller1: entered promiscuous mode [ 299.827686][T10571] syzkaller1: entered allmulticast mode [ 301.475327][T10607] overlayfs: failed to clone upperpath [ 302.251309][T10631] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 302.292801][T10631] netlink: 'syz.0.1658': attribute type 4 has an invalid length. [ 302.388591][T10633] futex_wake_op: syz.0.1661 tries to shift op by 144; fix this program [ 304.868595][ T5768] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 304.917358][ T5621] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 304.919172][ T5621] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 305.124503][ T5768] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 305.177256][ T5621] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 305.193053][ T5621] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 305.451787][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 305.519133][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 305.665355][T10694] ceph: No mds server is up or the cluster is laggy [ 305.666515][T10698] ceph: No mds server is up or the cluster is laggy [ 305.683851][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 305.690183][T10697] ceph: No mds server is up or the cluster is laggy [ 305.703616][ T5768] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 305.713610][ T10] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 305.877264][T10720] netlink: 'syz.2.1684': attribute type 10 has an invalid length. [ 305.881020][T10717] binder: 10716:10717 unknown command 0 [ 305.881046][T10717] binder: 10716:10717 ioctl c0306201 2000000001c0 returned -22 [ 305.897235][T10721] overlayfs: upper fs does not support tmpfile. [ 306.895902][T10746] openvswitch: netlink: Missing key (keys=40, expected=100) [ 307.438544][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 309.793480][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.895773][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.940640][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.967411][T10821] netlink: 'syz.4.1721': attribute type 10 has an invalid length. [ 311.360911][T10836] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3097489463/3097489465 [ 311.360974][T10836] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3097489463/3097489464 [ 311.377261][T10836] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3097489463/3097489465 [ 311.377303][T10836] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3097489463/3097489464 [ 312.686078][T10883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.615774][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 313.627186][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1744'. [ 314.036503][T10914] MTD: Couldn't look up './dev/mtdblock0': -2 [ 315.846059][T10945] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 315.865330][T10945] tipc: Started in network mode [ 315.865371][T10945] tipc: Node identity 2d4c2ee5a7cef409002e, cluster identity 4711 [ 316.076872][T10958] overlayfs: failed to clone upperpath [ 316.832241][T10977] fuse: fd is not a fuse device [ 316.942456][T10981] overlayfs: failed to clone upperpath [ 317.481715][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.745242][T10985] fuse: fd is not a fuse device [ 318.058637][T10892] IPVS: starting estimator thread 0... [ 318.150785][T10994] IPVS: using max 12 ests per chain, 28800 per kthread [ 320.184884][T11047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.052515][ T30] audit: type=1800 audit(1787334347.149:114): pid=11095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1819" name="nullb0" dev="tmpfs" ino=2945 res=0 errno=0 [ 326.465842][ T4932] Bluetooth: hci1: Malformed Event: 0x02 [ 326.986061][T11279] tipc: Cannot configure node identity twice [ 327.707566][T11315] ªªªªªª: renamed from vlan0 (while UP) [ 328. ** replaying previous printk message ** [ 328.273049][ T4932] ------------[ cut here ]------------ [ 328.273088][ T4932] refcnt < 0 [ 328.273155][ T4932] WARNING: net/bluetooth/hci_conn.c:641 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u9:1/4932 [ 328.299786][ T4932] Modules linked in: [ 328.306158][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.317305][ T4932] Tainted: [L]=SOFTLOCKUP [ 328.321818][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.332762][ T4932] Workqueue: hci1 hci_conn_timeout [ 328.337923][ T4932] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 328.343612][ T4932] Code: 48 89 df e8 33 fe 09 00 eb 07 e8 2c 0a e7 f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 c7 a1 fe ff e8 12 0a e7 f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 328.363602][ T4932] RSP: 0018:ffffc9000ea5fab0 EFLAGS: 00010293 [ 328.369806][ T4932] RAX: ffffffff8ae0d65e RBX: ffff88802a9f8000 RCX: ffff888037240000 [ 328.377815][ T4932] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 328.386245][ T4932] RBP: 00000000ffffffff R08: ffff88802a9f8013 R09: 1ffff1100553f002 [ 328.394422][ T4932] R10: dffffc0000000000 R11: ffffed100553f003 R12: dffffc0000000000 [ 328.402670][ T4932] R13: ffffffff818fb6da R14: ffff88802a9f8a50 R15: ffff88802a9f8010 [ 328.410729][ T4932] FS: 0000000000000000(0000) GS:ffff88812498a000(0000) knlGS:0000000000000000 [ 328.419814][ T4932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.426423][ T4932] CR2: 0000000000000000 CR3: 00000000779e8000 CR4: 00000000003526f0 [ 328.434516][ T4932] Call Trace: [ 328.437809][ T4932] [ 328.440900][ T4932] process_scheduled_works+0xc3d/0x1630 [ 328.446497][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.452593][ T4932] ? assign_work+0x3cf/0x5d0 [ 328.457218][ T4932] worker_thread+0xa47/0xfb0 [ 328.461962][ T4932] ? __kthread_parkme+0x71/0x1f0 [ 328.466949][ T4932] kthread+0x38b/0x480 [ 328.471148][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 328.476288][ T4932] ? __pfx_kthread+0x10/0x10 [ 328.481052][ T4932] ret_from_fork+0x514/0xb70 [ 328.485672][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 328.490895][ T4932] ? __switch_to+0xc89/0x1420 [ 328.495599][ T4932] ? __pfx_kthread+0x10/0x10 [ 328.500292][ T4932] ret_from_fork_asm+0x1a/0x30 [ 328.505102][ T4932] [ 328.508142][ T4932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 328.515435][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 328.526477][ T4932] Tainted: [L]=SOFTLOCKUP [ 328.530817][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 328.540893][ T4932] Workqueue: hci1 hci_conn_timeout [ 328.546052][ T4932] Call Trace: [ 328.549337][ T4932] [ 328.552291][ T4932] vpanic+0x56d/0xa60 [ 328.556301][ T4932] ? __pfx__printk+0x10/0x10 [ 328.560909][ T4932] ? __pfx_vpanic+0x10/0x10 [ 328.565431][ T4932] ? is_bpf_text_address+0x292/0x2b0 [ 328.570726][ T4932] ? is_bpf_text_address+0x26/0x2b0 [ 328.575947][ T4932] panic+0xc5/0xd0 [ 328.579691][ T4932] ? __pfx_panic+0x10/0x10 [ 328.584137][ T4932] ? ret_from_fork_asm+0x1a/0x30 [ 328.589106][ T4932] __warn+0x315/0x4c0 [ 328.593108][ T4932] ? hci_conn_timeout+0xff/0x2c0 [ 328.598078][ T4932] ? hci_conn_timeout+0xff/0x2c0 [ 328.603053][ T4932] __report_bug+0x276/0x570 [ 328.607579][ T4932] ? hci_conn_timeout+0xff/0x2c0 [ 328.612540][ T4932] ? __pfx___report_bug+0x10/0x10 [ 328.617573][ T4932] ? __lock_acquire+0x6df/0x2e50 [ 328.622525][ T4932] ? rcu_is_watching+0x16/0xb0 [ 328.627322][ T4932] ? trace_hrtimer_start+0x82/0x200 [ 328.632528][ T4932] ? hci_conn_timeout+0xff/0x2c0 [ 328.637472][ T4932] report_bug+0x16b/0x220 [ 328.641892][ T4932] ? hci_conn_timeout+0xff/0x2c0 [ 328.646840][ T4932] ? hci_conn_timeout+0x101/0x2c0 [ 328.651886][ T4932] handle_bug+0x9c/0x200 [ 328.656141][ T4932] exc_invalid_op+0x1a/0x50 [ 328.660649][ T4932] asm_exc_invalid_op+0x1a/0x20 [ 328.665506][ T4932] RIP: 0010:hci_conn_timeout+0xff/0x2c0 [ 328.671063][ T4932] Code: 48 89 df e8 33 fe 09 00 eb 07 e8 2c 0a e7 f6 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 c7 a1 fe ff e8 12 0a e7 f6 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff [ 328.690670][ T4932] RSP: 0018:ffffc9000ea5fab0 EFLAGS: 00010293 [ 328.696738][ T4932] RAX: ffffffff8ae0d65e RBX: ffff88802a9f8000 RCX: ffff888037240000 [ 328.704736][ T4932] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 328.712698][ T4932] RBP: 00000000ffffffff R08: ffff88802a9f8013 R09: 1ffff1100553f002 [ 328.720658][ T4932] R10: dffffc0000000000 R11: ffffed100553f003 R12: dffffc0000000000 [ 328.728617][ T4932] R13: ffffffff818fb6da R14: ffff88802a9f8a50 R15: ffff88802a9f8010 [ 328.736590][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 328.742338][ T4932] ? hci_conn_timeout+0xfe/0x2c0 [ 328.747311][ T4932] process_scheduled_works+0xc3d/0x1630 [ 328.752898][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.758906][ T4932] ? assign_work+0x3cf/0x5d0 [ 328.763505][ T4932] worker_thread+0xa47/0xfb0 [ 328.768121][ T4932] ? __kthread_parkme+0x71/0x1f0 [ 328.773068][ T4932] kthread+0x38b/0x480 [ 328.777143][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 328.782252][ T4932] ? __pfx_kthread+0x10/0x10 [ 328.786840][ T4932] ret_from_fork+0x514/0xb70 [ 328.791430][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 328.796539][ T4932] ? __switch_to+0xc89/0x1420 [ 328.801212][ T4932] ? __pfx_kthread+0x10/0x10 [ 328.805798][ T4932] ret_from_fork_asm+0x1a/0x30 [ 328.810573][ T4932] [ 328.813855][ T4932] Kernel Offset: disabled [ 328.818174][ T4932] Rebooting in 86400 seconds..