last executing test programs: 6m5.101229505s ago: executing program 1 (id=32): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x35c, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000440)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000500)={0x2000000a}) 6m4.992267265s ago: executing program 1 (id=35): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x1355, 0x0}) 6m4.82541382s ago: executing program 1 (id=38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = dup(r0) fsopen(0x0, 0x1) r3 = syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000200)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36268a3afff3d3666", 0xb8) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x24008001) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c094, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) r5 = socket$inet6(0xa, 0x800, 0x9) fcntl$lock(r5, 0x26, 0x0) syz_usb_control_io$uac2(r3, 0x0, 0x0) linkat(r2, 0x0, r2, 0x0, 0x1400) 6m4.109467519s ago: executing program 1 (id=50): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000240)=""/27, 0x1b}], 0x1) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="9c83010000000000000095df2a170b69715b14f215893a5401f840ed", 0x1c}], 0x1, 0x0, 0x0, 0x4400c000}], 0x1, 0x0) 6m4.064135082s ago: executing program 1 (id=51): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000b00)='./proc_mnt\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone3(&(0x7f0000000040)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r1, &(0x7f0000000bc0)=""/4128, 0x1020, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000bc0)=ANY=[], 0xfedd) 6m3.923312025s ago: executing program 1 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0xc0010141, 0x0, 0x7fffffff}]}) 5m48.880489413s ago: executing program 32 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0xc0010141, 0x0, 0x7fffffff}]}) 4m38.69863827s ago: executing program 4 (id=1210): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x103080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f00000001c0)=0x3) ppoll(&(0x7f0000000200)=[{r0, 0x80}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000240)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000280)={0x0, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4m37.78009644s ago: executing program 4 (id=1219): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x10106, 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x401, 0x0) write$UHID_INPUT(r2, &(0x7f0000001880)={0x8, {"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", 0xffffffffffffff30}}, 0x1006) 4m37.367266444s ago: executing program 4 (id=1225): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000002c0)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 4m36.555774907s ago: executing program 4 (id=1230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x122002, &(0x7f0000000100)=ANY=[]) 4m36.395528627s ago: executing program 4 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000b00)='./proc_mnt\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') syz_clone3(&(0x7f0000000040)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000bc0)=""/4128, 0x1020, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000bc0)=ANY=[], 0xfedd) 4m36.245382708s ago: executing program 4 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) clock_gettime(0x0, &(0x7f0000000400)) io_getevents(r1, 0x3, 0x3, &(0x7f0000000340)=[{}, {}, {}], 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x9, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)={0x1f}, 0x0, 0x0) shutdown(r0, 0x0) 4m20.615295597s ago: executing program 33 (id=1239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000200)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) clock_gettime(0x0, &(0x7f0000000400)) io_getevents(r1, 0x3, 0x3, &(0x7f0000000340)=[{}, {}, {}], 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x9, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)={0x1f}, 0x0, 0x0) shutdown(r0, 0x0) 4m8.997527744s ago: executing program 0 (id=1474): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m5.695892154s ago: executing program 0 (id=1523): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffe) 4m5.367786703s ago: executing program 0 (id=1526): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x10bb41) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 4m5.051434959s ago: executing program 0 (id=1528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x6, 0x0, 0x100, 0x4, 0x80540102}) 4m4.842750017s ago: executing program 0 (id=1531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000880)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x24602aa}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) 4m4.76419356s ago: executing program 0 (id=1532): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x814c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=0x0]) 4m3.947150923s ago: executing program 2 (id=1540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000880)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x24602aa}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) 4m3.871808728s ago: executing program 2 (id=1544): r0 = socket(0x2, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2e33, 0x4) sendmsg$inet(r0, 0x0, 0x40) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4m3.787743388s ago: executing program 2 (id=1546): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) setreuid(0xee01, 0xee01) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m3.731902476s ago: executing program 2 (id=1548): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x801, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x87000000) 4m3.626378592s ago: executing program 2 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000880)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x9, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x8, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x24602aa}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) 4m3.555434404s ago: executing program 2 (id=1554): mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x11c0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x12100ca, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 3m49.068997882s ago: executing program 34 (id=1532): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x814c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=0x0]) 3m48.429079675s ago: executing program 35 (id=1554): mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x11c0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x42, 0x85) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x12100ca, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m39.295196844s ago: executing program 6 (id=2153): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2m39.213212788s ago: executing program 6 (id=2155): timer_create(0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000180)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 2m38.971590996s ago: executing program 6 (id=2162): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000880)=0x0) read$eventfd(r0, &(0x7f00000008c0), 0x8) io_getevents(r1, 0x2, 0x2, &(0x7f0000000900)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 2m37.899146316s ago: executing program 6 (id=2178): socket$inet(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='\x00', 0x9801) move_mount(r0, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x22020600) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x1010) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) mount$bind(&(0x7f00000006c0)='.\x00', &(0x7f0000000700)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m37.714275397s ago: executing program 6 (id=2180): lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) syz_usb_connect$midi(0x3, 0x41, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1604, 0x8005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x1, 0xff, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x14, 0x25, 0x1, 0x10, "c9e9bdc7a5c054710f718e9dab00c2cc"}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 2m34.917475941s ago: executing program 6 (id=2198): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 2m33.968610806s ago: executing program 36 (id=2198): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x110) 8.071642508s ago: executing program 3 (id=3089): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x28b100e, 0x0) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0xb) 7.98762473s ago: executing program 3 (id=3091): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x2, 0xd7}, 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100), 0xfffffffffffffffc) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000000)=0x1) (async) syz_usb_connect$uac1(0x4, 0xc3, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902b1000301e4400309040000000101e5ff09240100072a0002f9bf01020c240203030406090900904c0d2408068000093b2f6e9f548907240506f94f5309040100000102000009047103ae5e7adff5d6936cae010101010200000a2402020010580309040e2402010204000bf5ee9a5083260905010900020703060725010001cd00090402000001020000090402010101020000092402010540100380072401070102100924020139fd0402020905820950"], &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x4, 0x5, 0xd, 0xff, 0x5}, 0x10e, &(0x7f0000000200)={0x5, 0xf, 0x10e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xf1, 0x18, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0x8, 0xe04}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x8, 0x1100f, 0x6}, @generic={0xec, 0x10, 0x2, "036e8134a77201dbeedbe26aa8de98a84f3524cfd26639a2b7f9a5ba5f09d47893c0c352c53500dd2cc776da57c0317b67cfbcfe0722bb7af81e9d70118495eadbaa3bf8c26d9cff5de0210820692d223ccd6bfcddc8f7f2810b828669ef0d117ee5d4a16133436b79af003b97cfbe3fe52aca385c3c58e27aecb96daa2070ce3bfa02983297d55e39365098c205400fbdf240f8edcc9e13a82d05853434e48426c4bb2a8b50cd83d15ce7975ad12e72b95b6a705458979f8a7621aaaa1f658e4d5f7e9cc88715168303110808cf14ce016a2873d95cedcd4e490c767060de844575f1aae76312f4fb"}]}, 0x5, [{0xb5, &(0x7f0000000340)=@string={0xb5, 0x3, "8a60a93aad31e84edaa7d4d0971c0b696945533cb557d0208bb9b4a2cfb915b09307dcaed206ff000c0075a97ac570935999fc0d04880ee9d760a8ee9355af8cfaa9da305c46bb8192d0639b8ba0fb90d095b9338c64f7de2516644ef5f6ed6715cc798b1bbfd85520a06e85cf8c9a2d6d1aca45f9bc657a600e4cd259b361ceb218602eb97921882c618c5c8c7986f481dac6b262fc8189b09ed9a4eba301bf05fa73755722e2ef513c85c25139eb2d5389b3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380d}}, {0x56, &(0x7f00000004c0)=@string={0x56, 0x3, "994de54f72a222261797923d1ea7ca25f8ddb1f7c8c28e5feee304d4142fd63468f7944c86281d59a745b0d2dc5974499dd664ebb2886e72044b692f7bebd7888632b54fc283454b48fc59185d68ea517d194f81"}}]}) 7.355498298s ago: executing program 3 (id=3103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0x8, 0x7b, 0xb, 0x4e, 0x9, 0x4, 0x4, 0x40, 0x6, 0x94, 0x2f, 0x3}, {0x7ff, 0x8, 0x8f, 0x4, 0x34, 0x4e, 0x40, 0x10, 0xa7, 0x9, 0x5, 0x3, 0x2}, {0x8723, 0xfff, 0x7f, 0x5, 0xa, 0x26, 0x9, 0x1, 0x9, 0x80, 0x84, 0x8, 0x5}], 0xb}) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 7.023345399s ago: executing program 3 (id=3108): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x9801) move_mount(r0, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x28b100e, 0x0) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0xb) 6.935410898s ago: executing program 7 (id=3109): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000140)}, 0x400000}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000180)=0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x1}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f00000004c0)={0x1, 0x3, @start={0x8000}}) 6.897825115s ago: executing program 3 (id=3110): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000a00)="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", 0x1bc}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a4b11948f01d4dde93ee9621c7c65b44f633588a23033917b3d7b4c4128ee1cde492b2f71429fba", 0x90}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 3) 6.489332301s ago: executing program 3 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000fff80000000500000a38000000060a010400000000000000000a0009000900010073797a31000000000c00064000000000000000040900020073797a32"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000008c0)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000900)) bind$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x58000) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000a00)='./file0/../file0\x00') mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000ac0)='./file0/../file0/file0\x00', &(0x7f0000000b00)='./file0/../file0/file0\x00') r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./pipe\x00', &(0x7f00000006c0)='rpc_pipefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000780)=""/193, 0xc1}], 0x1, 0xbbf9, 0x7fff) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000380)=[{&(0x7f00000003c0), 0x1000}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000000100140000400000"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000030601020000db00000800000200000205000100008052d60bef0b28158a37511bf9aaacd400000000000073797a32ddffffff"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x5010) 5.882286767s ago: executing program 37 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000fff80000000500000a38000000060a010400000000000000000a0009000900010073797a31000000000c00064000000000000000040900020073797a32"], 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f00000008c0)={0xa, 0x4e23, 0x4, @remote, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000900)) bind$rxrpc(r1, &(0x7f0000000200)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r1, 0x1) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x58000) mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000980)='.\x00', &(0x7f00000009c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000a00)='./file0/../file0\x00') mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000ac0)='./file0/../file0/file0\x00', &(0x7f0000000b00)='./file0/../file0/file0\x00') r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000005c0)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./pipe\x00', &(0x7f00000006c0)='rpc_pipefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000740)=[{&(0x7f0000000780)=""/193, 0xc1}], 0x1, 0xbbf9, 0x7fff) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000380)=[{&(0x7f00000003c0), 0x1000}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000010010000010000000100140000400000"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/210, 0xd2}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000030601020000db00000800000200000205000100008052d60bef0b28158a37511bf9aaacd400000000000073797a32ddffffff"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x5010) 5.839315814s ago: executing program 7 (id=3117): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e86"}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x4) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000640)='1', 0x1, 0x23000080000005}]) 5.565518116s ago: executing program 7 (id=3119): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x9e, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 5.115489702s ago: executing program 7 (id=3121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000500)={0x8, 0x28, '\x00', 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0]}) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$TIOCMGET(r2, 0x5415, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x1) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000440)="47117e7c21d7", 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01031c000500140006004523001c0064000002429078000000000000000011089078e0000020"], 0x26) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0a0006000802110000000000"], 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x20000800) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r8, &(0x7f00000005c0)='add foosyz [2', 0xd) ioctl$MEMGETREGIONCOUNT(r8, 0x80044d07, &(0x7f0000000600)) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000540)={{&(0x7f0000eb7000/0x1000)=nil, 0x1000}, 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000004, 0x4000010, r8, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}, 0x1c) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) 4.235096446s ago: executing program 7 (id=3126): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e86"}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x4) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000640)='1', 0x1, 0x23000080000005}]) 3.822686466s ago: executing program 7 (id=3128): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000001c0)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) fchdir(r0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000180), 0x4) (async) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000001c0)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000280)=0x3, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x4) (async) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}]}}) (async) 3.233412217s ago: executing program 5 (id=3132): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x204700, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x100, 0x8, &(0x7f0000000480)=[r1, 0x0, r2, r3, r4, r5, r6, r7], &(0x7f00000004c0)=[0x4, 0x7], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x6], 0x0, 0x112193e9}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r8, &(0x7f0000000600)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000680)={0x1, 0x19, "fff6a042bb4d045b47ce831eee1d6135e097d74d208a73867f"}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000006c0)={0x0, 0x0, r0}) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000700)={0x1ff, 0x0, 0x4, 0x0, 0x80}) ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000740)={r9, 0x0, 0x1000, 0x10000}) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r10, 0x8004af7a, &(0x7f00000007c0)) ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000000800)={0x2, r10}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, &(0x7f0000000840)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r10, 0xc0186445, &(0x7f0000000880)={0x8000000000000001, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r0, 0xc0186445, &(0x7f00000008c0)={0x2, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r0, 0xc0106450, &(0x7f0000000900)={0x0, 0x1, 0x2}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r9, 0xc0106450, &(0x7f0000000940)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PANTHOR_BO_SYNC(r9, 0xc010644f, &(0x7f0000000a00)={{0x18, 0x4, &(0x7f0000000980)=[{r11, 0x0, 0x0, 0x6}, {r12, 0x0, 0x100000001, 0x4}, {r13, 0x0, 0x7fffffff, 0x5}, {r14, 0x0, 0x7, 0x401}]}}) getpeername(r10, &(0x7f0000000a40)=@generic, &(0x7f0000000ac0)=0x80) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r10, 0xc0106441, &(0x7f0000000b00)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r9, 0xc0186445, &(0x7f0000000b40)={0x6, 0x0, r15}) sendmsg$key(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x2, 0x16, 0x1, 0x7, 0x1f, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@private2, @in=@loopback, 0x15, 0x0, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@private=0xa010100, 0x10, 0x0, 0x4}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd27}, @sadb_lifetime={0x4, 0x3, 0x7, 0x6, 0x3, 0x2}, @sadb_x_sec_ctx={0xd, 0x18, 0x1f, 0x80, 0x5f, "8a00707ea6f9467c1559ea291e1b010b23c7689dd376c59ca8a9518e2833caff8dbf9428ea54b25b10acf3f95d6eeb8a1a333851f4442a96f2bd5b7886f864293a448703d4990f1966accf24566b6fc91610c96fa34d0848742303bed7a15c"}]}, 0xf8}}, 0x4008805) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000d00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2.77143714s ago: executing program 5 (id=3134): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x1be}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f8753816730559058dcec151c64a358f9f940f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47e", 0x1bc}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a4b11948f01d4dde93ee9621c7c65b44f633588a23033917b3d7b4c4128", 0x86}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.672951273s ago: executing program 8 (id=3135): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e86"}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x4) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000640)='1', 0x1, 0x23000080000005}]) 1.942669435s ago: executing program 5 (id=3136): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='\x00', 0x9801) move_mount(r0, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount$bind(&(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x28b100e, 0x0) mount$bind(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000840)='./file0\x00', 0xb) 1.890515235s ago: executing program 8 (id=3137): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ifreq(r0, 0x894a, &(0x7f0000000200)={'veth1_to_team\x00', @ifru_mtu=0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)) setns(0xc9, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') read$FUSE(r2, &(0x7f0000002e00)={0x2020}, 0x2020) r3 = syz_open_pts(r1, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000b40)=0xf) ioctl$TCSBRK(r3, 0x400455c8, 0x81) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x6, 0x800000000004, @tid=r4}, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2581) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bd000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x28040, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000b80)=0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000bc0)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000cc0)=0x2f) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_NOP={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x27}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@new_dev={0x1, 0x1e0, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x6}}}, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FUTEX_WAKE={0x34, 0x8, 0x0, 0x79, 0x5, &(0x7f00000006c0), 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x4}}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d00)=0xcf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d40)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000d80)=0xc0) 1.704591741s ago: executing program 5 (id=3138): syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e147e02000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a000900000009040100000102300009040101"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x25, &(0x7f0000000c80)=""/4102, &(0x7f0000001cc0)=0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a2da4b45c0000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000140c000b8008"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000001d00)={@null, 0x5, 'lo\x00'}) listen(r0, 0x6) syz_usb_connect$cdc_ncm(0x1, 0x91, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x8, 0x48, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "b956"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0xa6, 0x5, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xba, 0xb2, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x66, 0xe, 0xeb}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xf5, 0x1, 0x4, 0xff, 0xf9}, 0x1d0, &(0x7f0000000300)={0x5, 0xf, 0x1d0, 0x4, [@generic={0xdd, 0x10, 0x2, "84869c9fe1e6b77beff0e34259ccd32dd403133d6b56dc7d5ece9a1505020097a4e323c2bab712db046ca84af7361072da964c088102f8a5b3cdbae61d33586ae377ab56cb67c71cc3dc8ccc3e2a078c04cb572bad4ce49cb2f5e1e4d9c2ac156bcace31d83058341f79d3cc0a28ab7c68afc8d47b30765d68765ab57c04693b6c02f06de25b069e89eacbc6b0479deaea528c293b6428691d22ffe31e64c13cc1620b8f69af586ce742a19a20d1f442e65f34bba620cfc7dbe15c0d31b2ad12dde1b27f23b904206afb02e4a8bd22a64c274aacaf845511b41e"}, @generic={0xca, 0x10, 0x3, "fd12571a99a40fba5eea741a41ed5d6da0763bde993297d0c2919881a38dd358d6697ae63efd7ff4b37ff48116eac66dc200d1cec23b8f2cd9763db89c0fba434e93f74914dc87b590dc6f2f17a9b181be31581fbf233ad68583e7d52c2cc3261971ecb0c28d62a95542a7717b5ddd3c3e179d3b06dde102a2da4bbd5303171c0b93ecb34dfe889cac01bdde04a515ed1582970ccbe5aafacaca65cdfda16ba729f50c641902e7fc0d556ac83ff8a8cce2732875586c99218fc480070ed860e0d71bafcee26c40"}, @generic={0x1a, 0x10, 0x4, "1a2f839547b3890de484085eb536b2a9044d6f90d638e9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x9, 0x9}]}, 0x8, [{0xde, &(0x7f0000000500)=@string={0xde, 0x3, "e7bfc0cfdc37ef28b361796b13b69174a5092fad9cf5e1b18f8464904a72368db13b1538e9750cfdd36c7ec49316468266e19b489fea5a3f37928c36b4e8ab467a11d9a942f840b84de5e10a2b484b721e496aadb788c4d18355b2e55301b86c5636e2bc803a2e27a5b51d9db0d1862f87f523dc2242b80a07bbe18c768b00e47adb1ffe55b6f5cdc445fba61feb27072b5a77e9c930accc22b1b203be75a98938b0d03aaae7d0525245c100763fd737b7b0aaf70509cccfa1e32a88c23322705322aedbef921c4825edcdee879413a4b80b8568946b9462212f25fc"}}, {0xbf, &(0x7f0000000600)=@string={0xbf, 0x3, "4b08b4ed7cd202e1b08f310a319f6172d9c8a00734a060141d756f97bef5a5af95b744d920c48b05fb2cd5e35e3edfce11fa25f846541128977fdd2c5078f3803573df0508dc24532aa535848d5996c16de13508b051ed5ae09e3071a6f42735e605554dc05555411b3a4a595b35d29026c15eff54ad5e807f641dc65295ea7030a185465c977e2f6ecacc27405e250ccc71c056b2d2ffe9374e9e413ea5df06f1700a1b20c1acbe87af62a260526da67aadeec0904621a73a82b3432f"}}, {0xa2, &(0x7f00000006c0)=@string={0xa2, 0x3, "c0fda5b8615dff20e11a67272a476a08efface21a7d8d62c972ca302fe51289d5ab9936c7625e38a9c0420115eaf6bbfe9e1cc731eea00398b428bac30b04bf838b692f3300f22ed030144ee2bb53de21480d326ccccab165c2fac9d468a68e62db9091b9c6e69883eae8f66c18823bd2d9d45b9e51ac97c33e4bcbe1fb6eac1c80764869f5e628842af013b922204cbbb928e16c1a95c895a6b37365de330fe"}}, {0xd0, &(0x7f0000000780)=@string={0xd0, 0x3, "e5c40e20b915651cfd1eb98690eefa8ad0cf61ae9ee59d1c9150f69d95ef7c60c0f9ea77d358c73bf4a0dd3d7a280d260393fe153f5ece106022055b3662b0a56b67fbe1b587c10bc0a2390ff5765ff83f4abe644b4da6cc7f8024f0e6004993078845aefb8fa1c3b5c06b0949c1763bb70fe474e2d3d37e602927892928f5c75cf574dd69b3d28af47405bf9d729e7331066f002704048b3acf69159fd79a3764e5a758766992d78a2735c268625f16e2c126ab79aacd27dc85778dfb512679118eac8c9b07e354f7355fec3785"}}, {0xeb, &(0x7f0000000880)=@string={0xeb, 0x3, "4b71d000bae436feacc0b98dded3e8b804c8f860772b3b5255349cc7a7ce845f271beda1f6dd2ab8b8376590f871388e938c0a98a937acd005ec0d527fd65b33a5deafba15b1b46392a654790086fda4450cddc56c2e8c76eee3ea01a4f73fd716c74b4b4871687fe346574d6150a8c883a298f48f7d42570d0b874f0a8509986d88a9aff6f1c5f787cf4acba013799517bf802037f340de2444935fca136ba50c00917912f45645b265e040a6aa82db0cb541f8e04ad2ea7d3bfb27dffeab93b51b0e93d97c647e21df5e1e5cfbe16912617971ab06e8bd2aa6e5f94172e798eb871bd5e896dce833"}}, {0xbe, &(0x7f0000000980)=@string={0xbe, 0x3, "03a34112a1d41592e574715b1df8fe4f3e25d92f9e05347d9490197fa3fcffa00a35f56b822faf25a41fdf7933d877de0c73fa8f742811c3237408e828cdd7c9bb88606b0a185633c03e388c5e315ca38894bd3f295123111dd98a0e08aac0e85f99e235457142386ee201d8603a94ca02318901cbfc7b56ef547d5369895f078082871803de6d4c3c2312715d18f6bdd90334bad9f6d8c07bfbc5ff754035cf932a5282edc5ac15aa4c8775cad59c6f742833fd5d9db287e9dd7413"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x42d}}]}) 859.856931ms ago: executing program 5 (id=3139): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001100010000000000ffdbdf2514000000270000002c"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 657.621735ms ago: executing program 5 (id=3140): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007ef000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x1000)=nil) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) syz_usb_connect$uac1(0x3, 0x9d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7f, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2e5bc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0x3a, {0x7, 0x25, 0x1, 0x6, 0x4, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x5, 0x1, "7f31fb"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x6, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0x378}, {&(0x7f0000000680)="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", 0x15e}, {&(0x7f0000000800)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d85900", 0x21}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c000000420001000000fffffff00000030100000f3900010000112233445566778899aabb860001017065ae44132403b1fd606412c325000000040002800400038000000000000000000000000100001df0794f224c8e0e459000d4428b4a5261722461527e"], 0x5c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000940)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{&(0x7f00000009c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/140, 0x8c}, {&(0x7f0000000c40)=""/224, 0xffffffffffffff76}], 0x2, &(0x7f0000000b00)=""/200, 0xc8}}], 0x1, 0x0, &(0x7f0000001f00)={0x77359400}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000040)={0x3, 0x1, 0x10000, 0x2000, &(0x7f0000fef000/0x2000)=nil}) 410.570307ms ago: executing program 8 (id=3141): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = dup(r0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f044}) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) (fail_nth: 3) 199.570752ms ago: executing program 8 (id=3142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x9, 0x8, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x9}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0xfc}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x1, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x3, '\x00', 0x7}, {0x6, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0x10, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x6, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x4, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) (fail_nth: 3) 112.578161ms ago: executing program 8 (id=3143): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x1be}, {&(0x7f0000000a00)="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", 0x1bc}, {&(0x7f0000000100)="05437c98b91bfe4d908657b5fc913814bde2bbeac2104eaea966c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d72906dd409d39ff6dd3d985d4e075543805ff919f42e8f4f5e46485f1bff1b7993a762c419d8e1c70235d3c9a4b11948f01d4dde93ee9621c7c65b44f633588a23033917b3d7b4c4128", 0x86}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 8 (id=3144): socket$unix(0x1, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/usb/devices\x00', 0x0, 0x60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x4) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000580)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f0000000600)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f0000000640)='1', 0x1, 0x23000080000005}]) kernel console output (not intermixed with test programs): e strings: Mfr=0, Product=0, SerialNumber=0 [ 264.986100][ T928] usb 6-1: config 0 descriptor?? [ 264.989648][ T9857] udevd[9857]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.989765][T10651] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 264.989945][T10651] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 265.034463][ T928] btusb 6-1:0.0: failed to enumerate endpoints [ 265.205824][ T928] usb 6-1: USB disconnect, device number 9 [ 265.660681][ T32] cdc_ncm 7-1:1.0: bind() failure [ 265.687249][ T32] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 265.688815][ T32] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 265.692368][ T32] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 265.727528][ T32] usb 7-1: USB disconnect, device number 4 [ 265.870772][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1849'. [ 266.436596][T10490] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 266.588542][T10490] usb 4-1: Using ep0 maxpacket: 8 [ 266.589424][T10490] usb 4-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 266.590721][T10490] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 203, changing to 7 [ 266.630597][T10490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.630625][T10490] usb 4-1: Product: syz [ 266.630642][T10490] usb 4-1: Manufacturer: syz [ 266.630657][T10490] usb 4-1: SerialNumber: syz [ 266.976066][T10490] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 266.979704][T10490] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 267.240025][T10736] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 267.780862][T10490] usb 4-1: USB disconnect, device number 9 [ 267.841306][ T9857] udevd[9857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.430482][T10490] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 268.474087][T10765] nfs: Unknown parameter 'context' [ 268.576694][T10490] usb 4-1: New USB device found: idVendor=05ac, idProduct=0269, bcdDevice=0.00 [ 268.577831][T10490] usb 4-1: config 0 interface 0 has no altsetting 0 [ 268.577871][T10490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.582707][T10490] usb 4-1: config 0 descriptor?? [ 269.015251][T10778] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 269.583501][T10490] hid (null): unknown global tag 0xd [ 269.615867][T10490] magicmouse 0003:05AC:0269.0007: unknown main item tag 0x2 [ 269.615976][T10490] magicmouse 0003:05AC:0269.0007: unknown global tag 0xd [ 269.615995][T10490] magicmouse 0003:05AC:0269.0007: item 0 2 1 13 parsing failed [ 269.620218][T10490] magicmouse 0003:05AC:0269.0007: magicmouse hid parse failed [ 269.620343][T10490] magicmouse 0003:05AC:0269.0007: probe with driver magicmouse failed with error -22 [ 269.792749][T10490] usb 4-1: USB disconnect, device number 10 [ 270.150771][T10793] kvm [10791]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 270.151023][T10793] kvm [10791]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 270.256361][ T5722] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 270.587304][ T5722] usb 7-1: New USB device found: idVendor=056a, idProduct=0307, bcdDevice=0.00 [ 270.588495][ T5722] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.588542][ T5722] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.976843][ T5722] usb 7-1: config 0 descriptor?? [ 271.497436][T10819] IPv4: Oversized IP packet from 127.202.26.0 [ 272.227337][ T5722] usb 7-1: USB disconnect, device number 5 [ 273.916158][T10490] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 274.066025][T10490] usb 6-1: Using ep0 maxpacket: 16 [ 274.066980][T10490] usb 6-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 274.073643][T10490] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 274.073674][T10490] usb 6-1: config 0 has no interface number 0 [ 274.073704][T10490] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 274.073723][T10490] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 274.091228][T10490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.091313][T10490] usb 6-1: Product: syz [ 274.091356][T10490] usb 6-1: Manufacturer: syz [ 274.091395][T10490] usb 6-1: SerialNumber: syz [ 274.115366][ T5722] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 274.133915][T10490] usb 6-1: config 0 descriptor?? [ 274.155746][T10892] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.159108][T10892] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.286773][ T5722] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.288181][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.292574][ T5722] usb 4-1: config 0 descriptor?? [ 274.321784][ T5722] cp210x 4-1:0.0: cp210x converter detected [ 274.387755][T10892] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.387890][T10892] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 274.721467][ T5722] usb 4-1: cp210x converter now attached to ttyUSB0 [ 274.911304][ T193] usb 4-1: USB disconnect, device number 11 [ 274.936581][ T193] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 274.940679][ T193] cp210x 4-1:0.0: device disconnected [ 275.470148][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1921'. [ 275.496163][ T193] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 275.649813][ T193] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 275.651019][ T193] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 275.651068][ T193] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 275.651095][ T193] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30768, setting to 1024 [ 275.651119][ T193] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 275.651142][ T193] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 275.651183][ T193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.688008][T10913] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 275.694714][T10913] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 275.758592][ T193] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 275.766765][ T193] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 275.772010][ T193] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 275.797764][ T193] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 275.805779][ T193] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 275.825969][ T193] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 275.833760][T10490] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 275.833795][T10490] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 275.834032][T10490] asix 6-1:0.34: probe with driver asix failed with error -71 [ 275.838629][ T193] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 275.886858][T10490] usb 6-1: USB disconnect, device number 10 [ 275.948680][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 275.950230][ T9857] udevd[9857]: setting mode of /dev/bus/usb/006/010 to 020664 failed: No such file or directory [ 275.950397][ T9857] udevd[9857]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 276.107907][ T10] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 276.109080][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.109215][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.112545][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.112574][ T10] usb 8-1: SerialNumber: syz [ 276.291411][ T5722] usb 7-1: USB disconnect, device number 6 [ 276.312926][ T5722] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 276.334354][ T5722] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 276.335695][ T5722] keyspan 7-1:1.0: device disconnected [ 276.470535][ T10] cdc_ether 8-1:1.0: More than one union descriptor, skipping ... [ 276.470565][ T10] cdc_ether 8-1:1.0: GUID doesn't match [ 276.505802][ T10] usb 8-1: USB disconnect, device number 5 [ 278.107435][ T193] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 278.255997][ T193] usb 8-1: Using ep0 maxpacket: 16 [ 278.256797][ T193] usb 8-1: New USB device found: idVendor=0525, idProduct=a6a1, bcdDevice=0.40 [ 278.258959][ T193] usb 8-1: config 1 has an invalid interface number: 62 but max is 0 [ 278.258987][ T193] usb 8-1: config 1 has no interface number 0 [ 278.259031][ T193] usb 8-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.259063][ T193] usb 8-1: config 1 interface 62 altsetting 253 bulk endpoint 0x83 has invalid maxpacket 64 [ 278.259090][ T193] usb 8-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 278.259119][ T193] usb 8-1: config 1 interface 62 has no altsetting 0 [ 278.260281][ T193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.260307][ T193] usb 8-1: SerialNumber: syz [ 278.266173][T10949] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 278.616620][ T193] usb 8-1: USB disconnect, device number 6 [ 279.313395][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1940'. [ 279.746854][ T32] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 279.896836][ T32] usb 8-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 279.898496][ T32] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 279.898577][ T32] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 279.898641][ T32] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.898751][ T32] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.952627][T10974] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.952784][T10974] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.964662][ T32] pl2303 8-1:1.0: pl2303 converter detected [ 280.004097][ T32] usb 8-1: pl2303 converter now attached to ttyUSB0 [ 280.307649][T10974] pl2303 8-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 280.308040][T10974] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 280.308398][T10974] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 280.309011][T10974] pl2303 8-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 280.309844][T10974] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 280.461876][T10990] Bluetooth: MGMT ver 1.23 [ 280.816703][T10974] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 280.823420][T10974] pl2303 ttyUSB0: error sending break = -32 [ 281.474267][ T32] usb 8-1: USB disconnect, device number 7 [ 281.558660][ T32] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 281.563400][ T32] pl2303 8-1:1.0: device disconnected [ 282.353358][T11005] syz.5.1957 (11005) used greatest stack depth: 12224 bytes left [ 282.623531][ T33] audit: type=1326 audit(1792309447.655:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11034 comm="syz.6.1972" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f509159e559 code=0x0 [ 282.774875][T11046] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[11047] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[11046] [ 282.848314][ T32] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 282.856727][ T5722] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 282.997017][ T32] usb 4-1: New USB device found: idVendor=2b53, idProduct=0024, bcdDevice=0.40 [ 282.998401][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 283.000596][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.000627][ T32] usb 4-1: Product: syz [ 283.000639][ T32] usb 4-1: Manufacturer: syz [ 283.000650][ T32] usb 4-1: SerialNumber: syz [ 283.014282][ T5722] usb 6-1: New USB device found: idVendor=0c70, idProduct=f010, bcdDevice=0.00 [ 283.020897][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.021344][ T5722] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.084837][ T5722] usb 6-1: config 0 descriptor?? [ 283.106049][ T193] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 283.256060][ T193] usb 8-1: Using ep0 maxpacket: 8 [ 283.256980][ T193] usb 8-1: New USB device found: idVendor=1235, idProduct=8204, bcdDevice=0.40 [ 283.258650][ T193] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.258674][ T193] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 283.261525][ T193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.261550][ T193] usb 8-1: Product: syz [ 283.261641][ T193] usb 8-1: Manufacturer: syz [ 283.261658][ T193] usb 8-1: SerialNumber: syz [ 283.348450][ T32] usb 4-1: USB disconnect, device number 12 [ 283.493629][T11051] udevd[11051]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.611545][ T193] usb 8-1: unit 6 not found! [ 283.611571][ T193] usb 8-1: unit 0 not found! [ 283.611605][ T193] usb 8-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 283.611780][ T193] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 283.683915][ T5722] aquacomputer_d5next 0003:0C70:F010.0009: hidraw0: USB HID v0.03 Joystick [HID 0c70:f010] on usb-dummy_hcd.5-1/input0 [ 283.724936][ T193] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 283.741833][ T193] usb 8-1: USB disconnect, device number 8 [ 283.822638][ T9852] udevd[9852]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.849806][T11058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.861051][ T5722] usb 6-1: USB disconnect, device number 11 [ 283.922940][T11056] fido_id[11056]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 284.178717][T11070] 9p: Bad value for 'rfdno' [ 284.516579][ T5655] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 284.666703][ T5655] usb 4-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 284.672557][ T5655] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 284.672592][ T5655] usb 4-1: config 127 has no interface number 0 [ 284.672644][ T5655] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 284.675597][ T5655] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.675629][ T5655] usb 4-1: Product: syz [ 284.675648][ T5655] usb 4-1: Manufacturer: syz [ 284.675666][ T5655] usb 4-1: SerialNumber: syz [ 284.724499][ T193] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 284.745670][T11075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 284.887034][ T193] usb 6-1: Using ep0 maxpacket: 8 [ 284.887880][ T193] usb 6-1: New USB device found: idVendor=22a8, idProduct=1989, bcdDevice=ac.22 [ 284.889350][ T193] usb 6-1: config 2 has an invalid interface number: 234 but max is 0 [ 284.889379][ T193] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 284.889402][ T193] usb 6-1: config 2 has no interface number 0 [ 284.889487][ T193] usb 6-1: config 2 interface 234 altsetting 4 endpoint 0xA has an invalid bInterval 43, changing to 7 [ 284.889521][ T193] usb 6-1: config 2 interface 234 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 284.889546][ T193] usb 6-1: config 2 interface 234 altsetting 4 bulk endpoint 0xB has invalid maxpacket 0 [ 284.889605][ T193] usb 6-1: config 2 interface 234 altsetting 4 endpoint 0x9 has invalid wMaxPacketSize 0 [ 284.889632][ T193] usb 6-1: config 2 interface 234 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 0 [ 284.889660][ T193] usb 6-1: config 2 interface 234 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 284.889690][ T193] usb 6-1: config 2 interface 234 has no altsetting 0 [ 284.896543][ T193] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.896711][ T193] usb 6-1: Product: syz [ 284.896778][ T193] usb 6-1: Manufacturer: syz [ 284.896897][ T193] usb 6-1: SerialNumber: syz [ 285.284692][ T193] usb-storage 6-1:2.234: USB Mass Storage device detected [ 285.285565][ T5655] asix 4-1:127.57: probe with driver asix failed with error -71 [ 285.337806][ T5655] usb 4-1: USB disconnect, device number 13 [ 285.444358][ T193] usb 6-1: USB disconnect, device number 12 [ 285.578657][ T5616] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 285.578707][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.578740][ T5616] Tainted: [L]=SOFTLOCKUP [ 285.578749][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.578766][ T5616] Workqueue: hci0 hci_rx_work [ 285.578837][ T5616] Call Trace: [ 285.578850][ T5616] [ 285.578860][ T5616] dump_stack_lvl+0xe8/0x150 [ 285.578896][ T5616] sysfs_create_dir_ns+0x271/0x2a0 [ 285.578931][ T5616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 285.578961][ T5616] ? do_raw_spin_unlock+0xf5/0x200 [ 285.579000][ T5616] kobject_add_internal+0x622/0xcd0 [ 285.579038][ T5616] kobject_add+0x163/0x240 [ 285.579068][ T5616] ? __pfx_kobject_add+0x10/0x10 [ 285.579099][ T5616] ? get_device_parent+0x366/0x3a0 [ 285.579137][ T5616] device_add+0x3fa/0xb80 [ 285.579168][ T5616] hci_conn_add_sysfs+0xd5/0x210 [ 285.579206][ T5616] le_conn_complete_evt+0x1094/0x1780 [ 285.579245][ T5616] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 285.579274][ T5616] ? __mutex_unlock_slowpath+0x731/0x900 [ 285.579320][ T5616] ? skb_pull_data+0xf0/0x200 [ 285.579371][ T5616] hci_le_conn_complete_evt+0x187/0x470 [ 285.579406][ T5616] hci_event_packet+0x67a/0xf10 [ 285.579448][ T5616] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 285.579485][ T5616] ? __pfx_hci_event_packet+0x10/0x10 [ 285.579526][ T5616] ? kcov_remote_start+0x523/0x7e0 [ 285.579555][ T5616] ? hci_send_to_monitor+0xdf/0x600 [ 285.579589][ T5616] hci_rx_work+0x2b4/0x1110 [ 285.579632][ T5616] ? process_scheduled_works+0x97a/0x1630 [ 285.579662][ T5616] process_scheduled_works+0xc3d/0x1630 [ 285.579727][ T5616] ? __pfx_process_scheduled_works+0x10/0x10 [ 285.579765][ T5616] ? assign_work+0x3cf/0x5d0 [ 285.579800][ T5616] worker_thread+0xa47/0xfb0 [ 285.579846][ T5616] ? __kthread_parkme+0x71/0x1f0 [ 285.579890][ T5616] kthread+0x38b/0x480 [ 285.579926][ T5616] ? __pfx_worker_thread+0x10/0x10 [ 285.579953][ T5616] ? __pfx_kthread+0x10/0x10 [ 285.579989][ T5616] ret_from_fork+0x514/0xb70 [ 285.580029][ T5616] ? __pfx_ret_from_fork+0x10/0x10 [ 285.580064][ T5616] ? __switch_to+0xc78/0x1410 [ 285.580098][ T5616] ? __pfx_kthread+0x10/0x10 [ 285.580135][ T5616] ret_from_fork_asm+0x1a/0x30 [ 285.580189][ T5616] [ 285.582492][ T5616] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 285.582536][ T5616] Bluetooth: hci0: failed to register connection device [ 286.356351][ T5616] Bluetooth: hci3: command 0x0405 tx timeout [ 286.536956][ T5722] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 286.686318][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 286.688566][ T5722] usb 6-1: New USB device found: idVendor=e5b7, idProduct=0811, bcdDevice=1.00 [ 286.699174][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.699249][ T5722] usb 6-1: Product: syz [ 286.699292][ T5722] usb 6-1: Manufacturer: syz [ 286.699334][ T5722] usb 6-1: SerialNumber: syz [ 286.960004][ T5722] usb-storage 6-1:24.0: USB Mass Storage device detected [ 286.989332][ T5722] usb-storage 6-1:24.0: device ignored [ 287.034485][ T5722] usb 6-1: USB disconnect, device number 13 [ 287.634890][ T4929] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 287.666042][ T5722] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 287.826008][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 287.826748][ T5722] usb 4-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 287.829702][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.829807][ T5722] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 4 [ 287.829964][ T5722] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 287.854476][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.854552][ T5722] usb 4-1: Product: syz [ 287.854595][ T5722] usb 4-1: Manufacturer: syz [ 287.854630][ T5722] usb 4-1: SerialNumber: syz [ 288.528805][ T5722] usb 4-1: 1:1: cannot get freq (v2/v3): err -32 [ 288.686153][ T193] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 288.732038][ T5722] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -1302549580 [ 288.837022][ T193] usb 6-1: New USB device found: idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 288.838186][ T193] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 288.838217][ T193] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 288.838256][ T193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.907042][ T5616] Bluetooth: hci4: urb ffff88802ccba800 submission failed (90) [ 289.052497][ T5722] usb 4-1: USB disconnect, device number 14 [ 289.088638][ T193] usb 6-1: USB disconnect, device number 14 [ 289.237123][ T5618] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 289.341389][T11051] udevd[11051]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.392125][ T5618] usb 7-1: New USB device found: idVendor=044f, idProduct=b65a, bcdDevice=0.00 [ 289.413671][ T5618] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.413710][ T5618] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.413739][ T5618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 289.413777][ T5618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.440314][ T5618] usb 7-1: config 0 descriptor?? [ 289.893119][ T5618] thrustmaster 0003:044F:B65A.000A: ignoring exceeding usage max [ 289.901307][ T5618] thrustmaster 0003:044F:B65A.000A: unknown main item tag 0x0 [ 289.920060][ T5618] thrustmaster 0003:044F:B65A.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65a] on usb-dummy_hcd.6-1/input0 [ 290.129934][ T5655] usb 7-1: USB disconnect, device number 7 [ 290.161698][T11203] fido_id[11203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 291.797035][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 292.366015][ T5655] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 292.517033][ T5655] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 292.518155][ T5655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.518188][ T5655] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.518213][ T5655] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.518258][ T5655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.522023][ T5655] usb 6-1: config 0 descriptor?? [ 292.548986][ T5618] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 292.714164][ T5618] usb 7-1: New USB device found: idVendor=27b8, idProduct=01ed, bcdDevice=0.00 [ 292.723772][ T5618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.723866][ T5618] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.723965][ T5618] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.758630][ T5618] usb 7-1: config 0 descriptor?? [ 293.000045][ T5655] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 293.048371][ T5655] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 293.309630][ T5655] usb 6-1: USB disconnect, device number 15 [ 293.397449][ T5618] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71 [ 293.419668][ T5618] usb 7-1: USB disconnect, device number 8 [ 293.946238][ T5618] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 294.116582][ T5618] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.117258][ T5618] usb 4-1: not running at top speed; connect to a high speed hub [ 294.117293][ T5618] usb 4-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40 [ 294.121473][ T5618] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 294.140273][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.140300][ T5618] usb 4-1: Product: syz [ 294.140316][ T5618] usb 4-1: Manufacturer: syz [ 294.140331][ T5618] usb 4-1: SerialNumber: syz [ 294.326143][ T928] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 294.433948][ T5618] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 294.488888][ T928] usb 7-1: New USB device found: idVendor=0644, idProduct=8020, bcdDevice=0.40 [ 294.503905][ T928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.504035][ T928] usb 7-1: Product: syz [ 294.504077][ T928] usb 7-1: Manufacturer: syz [ 294.504118][ T928] usb 7-1: SerialNumber: syz [ 294.622223][ T5618] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 294.622257][ T5618] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 294.622315][ T5618] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 294.622506][ T5618] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 294.622529][ T5618] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 294.622552][ T5618] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 295.509423][ T193] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 295.545231][ T193] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 295.585740][ T5618] usb 4-1: USB disconnect, device number 15 [ 295.594759][ T928] usb 7-1: Can't get UAC3 power state for id 10 [ 295.604258][ T928] usb 7-1: BAAD HEADSET c_chmask mismatch [ 295.904827][ T928] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 295.947564][ T928] usb 7-1: USB disconnect, device number 9 [ 296.096457][T11055] udevd[11055]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 296.280304][T11050] udevd[11050]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.395989][ T32] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 296.548183][ T32] usb 8-1: Using ep0 maxpacket: 8 [ 296.561146][ T32] usb 8-1: unable to get BOS descriptor or descriptor too short [ 296.561201][ T32] usb 8-1: New USB device found: idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 296.570501][ T32] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 296.570584][ T32] usb 8-1: config 4 has an invalid descriptor of length 197, skipping remainder of the config [ 296.570644][ T32] usb 8-1: config 4 has no interface number 0 [ 296.602438][ T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.602469][ T32] usb 8-1: Product: syz [ 296.602485][ T32] usb 8-1: Manufacturer: syz [ 296.602501][ T32] usb 8-1: SerialNumber: syz [ 296.874258][ T32] uvcvideo 8-1:4.147: probe with driver uvcvideo failed with error -22 [ 296.890744][ T32] usb 8-1: USB disconnect, device number 9 [ 297.093941][T11347] tmpfs: Unknown parameter 'measure' [ 297.196024][ T5655] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 297.347514][ T5655] usb 7-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 297.349138][ T5655] usb 7-1: config 127 has an invalid interface number: 57 but max is 0 [ 297.349167][ T5655] usb 7-1: config 127 has no interface number 0 [ 297.349222][ T5655] usb 7-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 297.353057][ T5655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.353085][ T5655] usb 7-1: Product: syz [ 297.353102][ T5655] usb 7-1: Manufacturer: syz [ 297.353117][ T5655] usb 7-1: SerialNumber: syz [ 297.377224][T11341] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 297.806085][T11341] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 298.013321][ T5655] asix 7-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 298.013571][ T5655] asix 7-1:127.57: probe with driver asix failed with error -71 [ 298.053724][ T5655] usb 7-1: USB disconnect, device number 10 [ 300.762036][T11428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2142'. [ 300.990763][T11439] netlink: 'syz.7.2147': attribute type 3 has an invalid length. [ 300.990787][T11439] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2147'. [ 300.990806][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2147'. [ 301.276659][T11451] Invalid option length (1048488) for dns_resolver key [ 301.822344][T11484] sock: sock_timestamping_bind_phc: sock not bind to device [ 303.261783][T11519] Could not find key with description: [0123456789abcdef] [ 303.261804][T11519] process_request_key_err: No key [ 303.261815][T11519] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 303.261830][T11519] One or more global auth toks could not properly register; rc = [-2] [ 303.261873][T11519] Error validating options; rc = [-2] [ 304.706244][T10490] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 304.788616][T11535] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2190'. [ 304.859154][T10490] usb 4-1: Using ep0 maxpacket: 16 [ 304.866462][T10490] usb 4-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 304.882052][T10490] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 304.882084][T10490] usb 4-1: config 1 has no interface number 0 [ 304.882129][T10490] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 304.882161][T10490] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 304.882195][T10490] usb 4-1: config 1 interface 105 has no altsetting 0 [ 304.912915][T10490] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 304.912988][T10490] usb 4-1: Product: syz [ 304.913031][T10490] usb 4-1: Manufacturer: syz [ 304.913073][T10490] usb 4-1: SerialNumber: syz [ 304.953941][T11532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 304.954091][T11532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.177386][ T210] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.374405][ T210] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.398373][T11532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.398528][T11532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 305.567449][ T210] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.767679][ T210] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.825294][T10490] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 305.828372][T10490] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 305.833747][T10490] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 306.020381][T10490] aqc111 4-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:78:c7:02:45:f7 [ 306.042621][T10490] usb 4-1: USB disconnect, device number 16 [ 306.063822][T10490] aqc111 4-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 306.187911][T10490] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 306.188062][T10490] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 306.188194][T10490] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 306.487737][ T210] bridge_slave_1: left allmulticast mode [ 306.487773][ T210] bridge_slave_1: left promiscuous mode [ 306.488031][ T210] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.494348][ T210] bridge_slave_0: left allmulticast mode [ 306.494376][ T210] bridge_slave_0: left promiscuous mode [ 306.497665][ T210] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.654509][T11556] FAULT_INJECTION: forcing a failure. [ 306.654509][T11556] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 306.654550][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.7.2203 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.654582][T11556] Tainted: [L]=SOFTLOCKUP [ 306.654591][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.654605][T11556] Call Trace: [ 306.654615][T11556] [ 306.654624][T11556] dump_stack_lvl+0xe8/0x150 [ 306.654662][T11556] should_fail_ex+0x3eb/0x540 [ 306.654700][T11556] prepare_alloc_pages+0x21e/0x5f0 [ 306.654747][T11556] __alloc_frozen_pages_noprof+0x17c/0x410 [ 306.654788][T11556] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 306.654836][T11556] ? policy_nodemask+0x2cc/0x8e0 [ 306.654868][T11556] alloc_pages_mpol+0x21e/0x390 [ 306.654901][T11556] alloc_pages_noprof+0xb1/0x2b0 [ 306.654931][T11556] get_zeroed_page_noprof+0x1a/0x90 [ 306.654967][T11556] mon_bin_open+0x236/0x530 [ 306.655021][T11556] chrdev_open+0x4d9/0x600 [ 306.655051][T11556] ? __pfx_chrdev_open+0x10/0x10 [ 306.655077][T11556] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 306.655104][T11556] ? devcgroup_check_permission+0x31/0x8f0 [ 306.655135][T11556] ? __pfx_chrdev_open+0x10/0x10 [ 306.655162][T11556] do_dentry_open+0x80e/0x1360 [ 306.655202][T11556] vfs_open_consume+0x4a/0x350 [ 306.655229][T11556] ? path_openat+0x16e1/0x20f0 [ 306.655256][T11556] path_openat+0x16fc/0x20f0 [ 306.655301][T11556] do_file_open+0x23e/0x4a0 [ 306.655331][T11556] ? __pfx_do_file_open+0x10/0x10 [ 306.655380][T11556] ? _raw_spin_unlock+0x28/0x50 [ 306.655406][T11556] ? alloc_fd+0x6af/0x760 [ 306.655451][T11556] do_sys_openat2+0x115/0x200 [ 306.655483][T11556] ? __pfx_do_sys_openat2+0x10/0x10 [ 306.655520][T11556] ? do_user_addr_fault+0xd3f/0x1480 [ 306.655556][T11556] __x64_sys_openat+0x138/0x170 [ 306.655585][T11556] do_syscall_64+0x166/0x520 [ 306.655616][T11556] ? trace_irq_disable+0x3b/0x140 [ 306.655670][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.655694][T11556] ? clear_bhb_loop+0x70/0xc0 [ 306.655724][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.655747][T11556] RIP: 0033:0x7fdee0b5ed8e [ 306.655779][T11556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.655799][T11556] RSP: 002b:00007fdee19fbb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 306.655826][T11556] RAX: ffffffffffffffda RBX: 00007fdee19fc6c0 RCX: 00007fdee0b5ed8e [ 306.655844][T11556] RDX: 0000000000008800 RSI: 00007fdee19fbc00 RDI: ffffffffffffff9c [ 306.655861][T11556] RBP: 00007fdee19fbc00 R08: 0000000000000000 R09: 0000000000000000 [ 306.655875][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 306.655889][T11556] R13: 00007fdee0e26038 R14: 00007fdee0e25fa0 R15: 00007ffe59c56298 [ 306.655924][T11556] [ 306.997157][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.000476][ T5616] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.001215][ T5616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.002203][ T5616] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.002853][ T5616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.388254][ T210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.395056][ T210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.421325][ T210] bond0 (unregistering): Released all slaves [ 307.426271][ T928] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 307.586900][ T928] usb 6-1: New USB device found: idVendor=056a, idProduct=00dd, bcdDevice=0.00 [ 307.588054][ T928] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.588086][ T928] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 307.588115][ T928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 307.588148][ T928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.593732][ T928] usb 6-1: config 0 descriptor?? [ 308.037848][ T928] wacom 0003:056A:00DD.000E: reserved main item tag 0xe [ 308.037888][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.037919][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.037954][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.037981][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.038010][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.038038][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.038066][ T928] wacom 0003:056A:00DD.000E: unknown main item tag 0x0 [ 308.241123][T10490] usb 6-1: USB disconnect, device number 16 [ 308.647155][T11563] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.854744][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 308.945071][ T210] hsr_slave_0: left promiscuous mode [ 308.957661][ T210] hsr_slave_1: left promiscuous mode [ 308.958712][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.958739][ T210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.961189][ T210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.961209][ T210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.018880][ T210] veth1_macvtap: left promiscuous mode [ 309.018924][ T210] veth0_macvtap: left promiscuous mode [ 309.019038][ T210] veth1_vlan: left promiscuous mode [ 309.019134][ T210] veth0_vlan: left promiscuous mode [ 309.076003][ T5616] Bluetooth: hci3: command tx timeout [ 309.296806][ T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 309.438216][T11608] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.449101][ T10] usb 8-1: New USB device found: idVendor=05a4, idProduct=2000, bcdDevice=0.00 [ 309.455048][ T10] usb 8-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.455084][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 309.455120][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.513103][ T10] usb 8-1: config 0 descriptor?? [ 309.768108][ T210] team0 (unregistering): Port device team_slave_1 removed [ 309.829430][ T210] team0 (unregistering): Port device team_slave_0 removed [ 310.003178][ T10] ortek 0003:05A4:2000.000F: hidraw0: USB HID v10.01 Device [HID 05a4:2000] on usb-dummy_hcd.7-1/input0 [ 310.056260][ T5655] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 310.158583][ T5618] usb 8-1: USB disconnect, device number 10 [ 310.207475][ T5655] usb 6-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.212159][ T5655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.235711][ T5655] usb 6-1: config 0 descriptor?? [ 310.244955][ T5655] cp210x 6-1:0.0: cp210x converter detected [ 310.488694][T11626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2219'. [ 310.687573][ T5655] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 310.736647][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2220'. [ 310.906409][ T5655] usb 6-1: cp210x converter now attached to ttyUSB0 [ 311.096326][ T5655] usb 6-1: USB disconnect, device number 17 [ 311.142162][ T5655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.145424][ T5655] cp210x 6-1:0.0: device disconnected [ 311.156091][ T5616] Bluetooth: hci3: command tx timeout [ 311.222233][T11643] Config c/1 of g1 needs at least one function. [ 311.222569][T11643] udc dummy_udc.0: failed to start g1: -22 [ 311.222595][T11643] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 311.227622][T11643] UDC core: g1: couldn't find an available UDC or it's busy [ 311.324656][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.324777][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.324934][T11563] bridge_slave_0: entered allmulticast mode [ 311.344006][T11563] bridge_slave_0: entered promiscuous mode [ 311.363740][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.363860][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.363995][T11563] bridge_slave_1: entered allmulticast mode [ 311.388431][T11563] bridge_slave_1: entered promiscuous mode [ 311.503963][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.534324][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.592269][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 311.595525][T11563] team0: Port device team_slave_0 added [ 311.623254][T11563] team0: Port device team_slave_1 added [ 311.686235][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.686252][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.686277][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.688773][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.688790][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.688818][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.874815][T11563] hsr_slave_0: entered promiscuous mode [ 311.881519][T11563] hsr_slave_1: entered promiscuous mode [ 311.883887][T11563] debugfs: 'hsr0' already exists in 'hsr' [ 311.883954][T11563] Cannot create hsr debugfs directory [ 312.057707][T11672] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2228'. [ 312.740831][T11700] smpboot: CPU 1 is now offline [ 312.930779][T11563] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 312.958232][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.973835][T11563] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 312.994541][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.009471][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 313.014656][T11563] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 313.042004][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 313.055437][T11563] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 313.081173][T11563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.236269][ T5616] Bluetooth: hci3: command tx timeout [ 313.300219][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2239'. [ 313.445348][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.519030][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.553044][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.553120][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.591954][ T210] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.592031][ T210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.583161][T11742] tun0: tun_chr_ioctl cmd 1074812117 [ 315.072173][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 315.264919][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.317834][ T5616] Bluetooth: hci3: command tx timeout [ 315.831176][T11563] veth0_vlan: entered promiscuous mode [ 315.843931][T11563] veth1_vlan: entered promiscuous mode [ 315.881104][T11563] veth0_macvtap: entered promiscuous mode [ 315.884910][T11563] veth1_macvtap: entered promiscuous mode [ 315.912044][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.928713][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.946431][ T1110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.946465][ T1110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.946491][ T1110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.946517][ T1110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.078268][ T210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.078286][ T210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.130790][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.130807][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.292795][T11773] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2256'. [ 316.493894][T11784] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2249'. [ 317.061029][ T5699] kernel read not supported for file /rfkill (pid: 5699 comm: kworker/0:5) [ 317.241232][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241276][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.442030][T11810] FAULT_INJECTION: forcing a failure. [ 317.442030][T11810] name failslab, interval 1, probability 0, space 0, times 0 [ 317.442058][T11810] CPU: 0 UID: 0 PID: 11810 Comm: syz.3.2263 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 317.442083][T11810] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 317.442089][T11810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.442100][T11810] Call Trace: [ 317.442106][T11810] [ 317.442113][T11810] dump_stack_lvl+0xe8/0x150 [ 317.442139][T11810] should_fail_ex+0x3eb/0x540 [ 317.442166][T11810] should_failslab+0xa8/0x100 [ 317.442185][T11810] __kmalloc_noprof+0xf9/0x710 [ 317.442209][T11810] ? tomoyo_encode+0x2ad/0x570 [ 317.442233][T11810] ? tomoyo_encode+0x2ad/0x570 [ 317.442263][T11810] tomoyo_encode+0x2ad/0x570 [ 317.442292][T11810] tomoyo_realpath_from_path+0x5fa/0x640 [ 317.442328][T11810] tomoyo_mount_permission+0x3e9/0x9e0 [ 317.442352][T11810] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 317.442379][T11810] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 317.442402][T11810] ? kasan_save_track+0x4f/0x80 [ 317.442476][T11810] ? kasan_quarantine_put+0xbb/0x1f0 [ 317.442503][T11810] security_sb_mount+0xe4/0x320 [ 317.442531][T11810] path_mount+0xbc/0x1050 [ 317.442557][T11810] ? user_path_at+0xd4/0x160 [ 317.442584][T11810] __se_sys_mount+0x31d/0x420 [ 317.442612][T11810] ? __pfx___se_sys_mount+0x10/0x10 [ 317.442639][T11810] ? __x64_sys_mount+0x20/0xc0 [ 317.442664][T11810] do_syscall_64+0x166/0x520 [ 317.442686][T11810] ? trace_irq_disable+0x3b/0x140 [ 317.442704][T11810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.442720][T11810] ? clear_bhb_loop+0x70/0xc0 [ 317.442740][T11810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.442756][T11810] RIP: 0033:0x7fd66299e559 [ 317.442771][T11810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.442785][T11810] RSP: 002b:00007fd663929028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.442802][T11810] RAX: ffffffffffffffda RBX: 00007fd662c25fa0 RCX: 00007fd66299e559 [ 317.442815][T11810] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 0000000000000000 [ 317.442826][T11810] RBP: 00007fd662a35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 317.442836][T11810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.442845][T11810] R13: 00007fd662c26038 R14: 00007fd662c25fa0 R15: 00007ffd1cdf96a8 [ 317.442871][T11810] [ 317.444983][T11810] ERROR: Out of memory at tomoyo_realpath_from_path. [ 318.547068][ T4929] Bluetooth: hci3: command 0x0405 tx timeout [ 323.056540][ T5655] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 323.208239][ T5655] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 323.209235][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.282450][T11876] netlink: 'syz.5.2289': attribute type 8 has an invalid length. [ 323.443626][ T5655] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 323.516996][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 323.666328][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 323.669532][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 323.669566][ T9] usb 6-1: New USB device found: idVendor=0582, idProduct=0052, bcdDevice=0.40 [ 323.670824][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.670841][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.726292][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.726314][ T9] usb 6-1: Product: syz [ 323.726325][ T9] usb 6-1: Manufacturer: syz [ 323.726336][ T9] usb 6-1: SerialNumber: syz [ 323.769408][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.944871][ T9] usb 6-1: USB disconnect, device number 18 [ 324.057482][T11893] netlink: 'syz.7.2296': attribute type 9 has an invalid length. [ 324.280317][ T9] usb 4-1: USB disconnect, device number 17 [ 324.674888][T11905] FAULT_INJECTION: forcing a failure. [ 324.674888][T11905] name failslab, interval 1, probability 0, space 0, times 0 [ 324.674918][T11905] CPU: 0 UID: 0 PID: 11905 Comm: syz.7.2301 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 324.674943][T11905] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 324.674950][T11905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 324.674960][T11905] Call Trace: [ 324.674966][T11905] [ 324.674973][T11905] dump_stack_lvl+0xe8/0x150 [ 324.675000][T11905] should_fail_ex+0x3eb/0x540 [ 324.675028][T11905] should_failslab+0xa8/0x100 [ 324.675047][T11905] __kmalloc_noprof+0xf9/0x710 [ 324.675070][T11905] ? rcu_is_watching+0x16/0xb0 [ 324.675090][T11905] ? tomoyo_realpath_from_path+0xef/0x640 [ 324.675115][T11905] ? tomoyo_realpath_from_path+0xef/0x640 [ 324.675146][T11905] tomoyo_realpath_from_path+0xef/0x640 [ 324.675182][T11905] tomoyo_check_open_permission+0x229/0x470 [ 324.675204][T11905] ? tomoyo_check_open_permission+0x1d3/0x470 [ 324.675226][T11905] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 324.675249][T11905] ? __asan_memset+0x22/0x50 [ 324.675276][T11905] ? seqcount_lockdep_reader_access+0xea/0x100 [ 324.675329][T11905] ? devcgroup_check_permission+0x31/0x8f0 [ 324.675350][T11905] security_file_open+0xa9/0x240 [ 324.675371][T11905] do_dentry_open+0x495/0x1360 [ 324.675400][T11905] vfs_open_consume+0x4a/0x350 [ 324.675418][T11905] ? path_openat+0x16e1/0x20f0 [ 324.675436][T11905] path_openat+0x16fc/0x20f0 [ 324.675467][T11905] do_file_open+0x23e/0x4a0 [ 324.675487][T11905] ? __pfx_do_file_open+0x10/0x10 [ 324.675520][T11905] ? _raw_spin_unlock+0x28/0x50 [ 324.675539][T11905] ? alloc_fd+0x6af/0x760 [ 324.675570][T11905] do_sys_openat2+0x115/0x200 [ 324.675590][T11905] ? __se_sys_futex+0x3a8/0x450 [ 324.675613][T11905] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.675639][T11905] ? rcu_is_watching+0x16/0xb0 [ 324.675662][T11905] __x64_sys_openat+0x138/0x170 [ 324.675687][T11905] do_syscall_64+0x166/0x520 [ 324.675709][T11905] ? trace_irq_disable+0x3b/0x140 [ 324.675726][T11905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.675743][T11905] ? clear_bhb_loop+0x70/0xc0 [ 324.675763][T11905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.675779][T11905] RIP: 0033:0x7fdee0b9e559 [ 324.675795][T11905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.675808][T11905] RSP: 002b:00007fdee19fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 324.675829][T11905] RAX: ffffffffffffffda RBX: 00007fdee0e25fa0 RCX: 00007fdee0b9e559 [ 324.675841][T11905] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 324.675852][T11905] RBP: 00007fdee0c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 324.675862][T11905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.675872][T11905] R13: 00007fdee0e26038 R14: 00007fdee0e25fa0 R15: 00007ffe59c56298 [ 324.675897][T11905] [ 324.860721][T11905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.163195][ T33] audit: type=1326 audit(1792309490.195:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.163243][ T33] audit: type=1326 audit(1792309490.195:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.231749][ T33] audit: type=1326 audit(1792309490.265:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.231790][ T33] audit: type=1326 audit(1792309490.265:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.234731][ T33] audit: type=1326 audit(1792309490.265:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.234769][ T33] audit: type=1326 audit(1792309490.265:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.234802][ T33] audit: type=1326 audit(1792309490.265:30): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.235391][ T33] audit: type=1326 audit(1792309490.265:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.235426][ T33] audit: type=1326 audit(1792309490.265:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.430517][ T33] audit: type=1326 audit(1792309490.475:33): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11908 comm="syz.8.2303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fbe1eb9e559 code=0x7ffc0000 [ 325.596766][T11918] netlink: 'syz.8.2306': attribute type 9 has an invalid length. [ 325.788534][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2309'. [ 328.500307][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2339'. [ 328.999949][ T5616] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 330.041564][T12057] rxe_eth0 speed is unknown, defaulting to 1000 [ 331.889291][T12063] ptrace attach of ""[12064] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[12063] [ 333.586392][ T5655] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 333.856161][ T5655] usb 8-1: Using ep0 maxpacket: 16 [ 333.857784][ T5655] usb 8-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 333.860074][ T5655] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.860108][ T5655] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.860127][ T5655] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.860143][ T5655] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 333.860162][ T5655] usb 8-1: config 0 interface 0 has no altsetting 0 [ 333.860187][ T5655] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.865174][ T5655] usb 8-1: config 0 descriptor?? [ 334.572211][ T5655] logitech-djreceiver 0003:046D:C53A.0010: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.7-1/input0 [ 335.678608][ T5689] usb 8-1: USB disconnect, device number 11 [ 338.856502][T12138] fuse: blksize only supported for fuseblk [ 339.307888][ T5689] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 339.456405][ T5689] usb 8-1: Using ep0 maxpacket: 16 [ 339.457735][ T5689] usb 8-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 339.462704][ T5689] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.462741][ T5689] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.462760][ T5689] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.462776][ T5689] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 339.462796][ T5689] usb 8-1: config 0 interface 0 has no altsetting 0 [ 339.462822][ T5689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.548954][ T5689] usb 8-1: config 0 descriptor?? [ 340.024294][ T5689] logitech-djreceiver 0003:046D:C53A.0011: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.7-1/input0 [ 341.568129][ T5655] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 341.669097][T12189] fuse: fd is not a fuse device [ 342.457555][ T5689] usb 8-1: USB disconnect, device number 12 [ 343.850383][T12215] rxe_eth0 speed is unknown, defaulting to 1000 [ 346.216745][T12229] raw_sendmsg: syz.5.2413 forgot to set AF_INET. Fix it! [ 346.908940][ T33] kauditd_printk_skb: 4 callbacks suppressed [ 346.908957][ T33] audit: type=1326 audit(1792309511.945:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.5.2419" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f13b9e559 code=0x0 [ 347.544622][T12260] input: syz1 as /devices/virtual/input/input19 [ 347.922731][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 347.922754][T12270] netlink: 'syz.5.2429': attribute type 2 has an invalid length. [ 347.922765][T12270] netlink: 'syz.5.2429': attribute type 1 has an invalid length. [ 347.922775][T12270] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2429'. [ 347.976655][ T5655] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 348.128503][ T5655] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 348.131841][ T5655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.131866][ T5655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.131882][ T5655] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.131912][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.145730][ T5655] usb 4-1: config 0 descriptor?? [ 349.570551][ T5655] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x7 [ 349.570579][ T5655] plantronics 0003:047F:FFFF.0012: item fetching failed at offset 13/15 [ 349.590416][ T5655] plantronics 0003:047F:FFFF.0012: parse failed [ 349.590495][ T5655] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 350.164861][T12281] fuse: fd is not a fuse device [ 350.206489][ T5655] usb 4-1: USB disconnect, device number 18 [ 350.560281][T12285] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2436'. [ 352.738739][T12307] fuse: blksize only supported for fuseblk [ 353.696417][ T5655] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 353.845947][ T5655] usb 4-1: Using ep0 maxpacket: 16 [ 353.846507][ T5655] usb 4-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 353.847587][ T5655] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.847623][ T5655] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.847642][ T5655] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.847658][ T5655] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 353.847677][ T5655] usb 4-1: config 0 interface 0 has no altsetting 0 [ 353.847702][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.849933][ T5655] usb 4-1: config 0 descriptor?? [ 355.158183][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 355.416670][ T5655] logitech-djreceiver 0003:046D:C53A.0013: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0 [ 356.729409][ T5655] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 357.581594][ T193] usb 4-1: USB disconnect, device number 19 [ 358.522553][T12374] netlink: 'syz.3.2476': attribute type 8 has an invalid length. [ 360.118936][ T193] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 360.256074][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2483'. [ 360.287183][ T193] usb 8-1: Using ep0 maxpacket: 32 [ 360.288870][ T193] usb 8-1: unable to get BOS descriptor or descriptor too short [ 360.288905][ T193] usb 8-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40 [ 360.304874][ T193] usb 8-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 360.304894][ T193] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.344360][ T193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.344381][ T193] usb 8-1: Product: syz [ 360.344392][ T193] usb 8-1: Manufacturer: syz [ 360.344403][ T193] usb 8-1: SerialNumber: syz [ 361.541098][ T193] usb 8-1: 3:0: failed to get current value for ch 1 (-71) [ 362.520694][ T193] usb 8-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 362.520718][ T193] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 362.520731][ T193] usb 8-1: [3] FU [LFE Playback Volume] ch = 2, val = 0/1/1 [ 363.144133][T12394] fuse: fd is not a fuse device [ 363.151345][ T193] usb 8-1: 3:0: cannot get RANGE values for control 2 (id 3) [ 363.151367][ T193] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 363.151380][ T193] usb 8-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 363.183682][ T193] usb 8-1: 3:0: cannot get RANGE values for control 4 (id 3) [ 363.213944][ T193] usb 8-1: 3:0: failed to get current value for ch 1 (-71) [ 363.244081][ T193] usb 8-1: 3:0: failed to get current value for ch 0 (-71) [ 363.308540][ T193] usb 8-1: 3:0: failed to get current value for ch 1 (-71) [ 363.329504][ T193] usb 8-1: 3:0: failed to get current value for ch 0 (-71) [ 363.354879][ T193] usb 8-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 363.366390][ T193] usb 8-1: 3:0: cannot get RANGE values for control 11 (id 3) [ 363.381000][ T193] usb 8-1: 3:0: failed to get current value for ch 0 (-71) [ 363.546598][ T193] usb 8-1: USB disconnect, device number 13 [ 363.607396][T11866] udevd[11866]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.796086][T12400] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2487'. [ 364.018385][ T4929] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 367.614337][T12413] Config c/1 of g1 needs at least one function. [ 367.614427][T12413] udc dummy_udc.0: failed to start g1: -22 [ 367.614442][T12413] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 367.614937][T12413] UDC core: g1: couldn't find an available UDC or it's busy [ 368.506158][ T193] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 368.666537][ T193] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 368.666990][ T193] usb 4-1: config 0 has no interfaces? [ 368.667994][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 368.668011][ T193] usb 4-1: SerialNumber: syz [ 368.735802][ T193] usb 4-1: config 0 descriptor?? [ 368.997327][T10490] usb 4-1: USB disconnect, device number 20 [ 370.172911][T12468] Config c/1 of g1 needs at least one function. [ 370.186188][T12468] udc dummy_udc.0: failed to start g1: -22 [ 370.186209][T12468] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 370.186757][T12468] UDC core: g1: couldn't find an available UDC or it's busy [ 370.521838][ T4929] Bluetooth: hci5: command 0x0406 tx timeout [ 370.521885][ T4929] Bluetooth: hci2: command 0x0406 tx timeout [ 371.199656][ T5689] wiimote 0005:057E:0306.0014: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 371.204727][ T5689] wiimote 0005:057E:0306.0014: New device registered [ 371.244292][T12502] wiimote 0005:057E:0306.0014: Device removed [ 371.427301][T12506] fido_id[12506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 371.642517][T12517] 9p: Bad value for 'rfdno' [ 371.867896][T12505] Config c/1 of g1 needs at least one function. [ 371.867984][T12505] udc dummy_udc.0: failed to start g1: -22 [ 371.868000][T12505] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 371.868530][T12505] UDC core: g1: couldn't find an available UDC or it's busy [ 372.943369][ T33] audit: type=1326 audit(1792309537.975:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.943815][ T33] audit: type=1326 audit(1792309537.975:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.943852][ T33] audit: type=1326 audit(1792309537.975:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.945730][ T33] audit: type=1326 audit(1792309537.975:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.945764][ T33] audit: type=1326 audit(1792309537.975:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.945794][ T33] audit: type=1326 audit(1792309537.975:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 372.945822][ T33] audit: type=1326 audit(1792309537.975:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 373.092909][ T193] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 373.119386][ T33] audit: type=1326 audit(1792309538.165:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 373.119426][ T33] audit: type=1326 audit(1792309538.165:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 373.214437][ T33] audit: type=1326 audit(1792309538.255:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12553 comm="syz.3.2551" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd66295ed8e code=0x7ffc0000 [ 373.326383][ T193] usb 8-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 373.327395][ T193] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.327412][ T193] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.328276][ T193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.328293][ T193] usb 8-1: SerialNumber: syz [ 373.575155][ T193] usb 8-1: 0:2 : does not exist [ 373.705524][ T193] usb 8-1: USB disconnect, device number 14 [ 373.857104][T12563] udevd[12563]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.688391][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688436][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.001755][ T5616] Bluetooth: hci5: unexpected event for opcode 0x202a [ 379.343822][T12654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 380.250919][T12684] Could not find key with description: [syz0] [ 380.250932][T12684] process_request_key_err: No key [ 380.250965][T12684] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 380.250974][T12684] One or more global auth toks could not properly register; rc = [-2] [ 380.250993][T12684] Error validating options; rc = [-2] [ 380.602928][T12679] Config c/1 of g1 needs at least one function. [ 380.603016][T12679] udc dummy_udc.0: failed to start g1: -22 [ 380.603031][T12679] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 380.603531][T12679] UDC core: g1: couldn't find an available UDC or it's busy [ 381.123288][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 383.081778][ T5689] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 383.328727][ T5689] usb 4-1: New USB device found: idVendor=7392, idProduct=a611, bcdDevice=f3.d9 [ 383.342564][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.342592][ T5689] usb 4-1: Product: syz [ 383.342603][ T5689] usb 4-1: Manufacturer: syz [ 383.342614][ T5689] usb 4-1: SerialNumber: syz [ 383.373501][ T5689] usb 4-1: config 0 descriptor?? [ 383.649021][T12745] veth1_to_bond: entered allmulticast mode [ 383.649754][T12744] veth1_to_bond: left allmulticast mode [ 384.022050][ T33] kauditd_printk_skb: 82 callbacks suppressed [ 384.022084][ T33] audit: type=1326 audit(1792309549.055:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.022279][ T33] audit: type=1326 audit(1792309549.055:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.022572][ T33] audit: type=1326 audit(1792309549.055:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.023362][ T33] audit: type=1326 audit(1792309549.055:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.115340][ T33] audit: type=1326 audit(1792309549.155:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.115379][ T33] audit: type=1326 audit(1792309549.155:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.115410][ T33] audit: type=1326 audit(1792309549.155:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.231128][ T33] audit: type=1326 audit(1792309549.275:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.231318][ T33] audit: type=1326 audit(1792309549.275:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.290689][ T33] audit: type=1326 audit(1792309549.325:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12754 comm="syz.5.2639" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f13b9e559 code=0x7ffc0000 [ 384.994226][T10490] usb 4-1: USB disconnect, device number 21 [ 385.186143][T12779] netlink: 13 bytes leftover after parsing attributes in process `syz.7.2649'. [ 386.156430][ T5689] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 387.264458][ T5689] usb 8-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 387.265417][ T5689] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.265459][ T5689] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.584290][ T5616] Bluetooth: hci0: Malformed LE Event: 0x0d [ 387.739533][ T5689] usb 8-1: USB disconnect, device number 15 [ 390.244194][T12841] Config c/1 of g1 needs at least one function. [ 390.244282][T12841] udc dummy_udc.0: failed to start g1: -22 [ 390.244298][T12841] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 390.281553][T12841] UDC core: g1: couldn't find an available UDC or it's busy [ 391.919018][ T193] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 392.066959][ T193] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 392.067835][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.067857][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.067874][ T193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.067904][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.072802][ T193] usb 4-1: config 0 descriptor?? [ 392.573110][ T193] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 392.856048][ T193] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 393.622959][ T193] usb 8-1: unable to get BOS descriptor or descriptor too short [ 393.623727][ T193] usb 8-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=0.00 [ 393.623756][ T193] usb 8-1: no configurations [ 393.623765][ T193] usb 8-1: can't read configurations, error -22 [ 393.837803][ C0] plantronics 0003:047F:FFFF.0015: usb_submit_urb(ctrl) failed: -1 [ 394.422516][T12960] 9p: Bad value for 'rfdno' [ 394.611760][T10490] usb 4-1: USB disconnect, device number 22 [ 395.257097][T10490] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 395.417047][T10490] usb 8-1: New USB device found: idVendor=0a5c, idProduct=21e8, bcdDevice=1.00 [ 395.417975][T10490] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.418018][T10490] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 395.418036][T10490] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 395.418065][T10490] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.485831][T12974] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 395.493580][T12974] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 395.727480][ T5616] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 395.730150][ T193] usb 8-1: USB disconnect, device number 18 [ 397.320099][ T5616] Bluetooth: hci0: ISO packet too small [ 397.464695][T13011] fuse: fd is not a fuse device [ 400.726903][ T33] kauditd_printk_skb: 10 callbacks suppressed [ 400.726919][ T33] audit: type=1326 audit(1792309565.765:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.728767][ T33] audit: type=1326 audit(1792309565.765:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.803326][ T33] audit: type=1326 audit(1792309565.835:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.803500][ T33] audit: type=1326 audit(1792309565.835:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.857234][ T33] audit: type=1326 audit(1792309565.895:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.857276][ T33] audit: type=1326 audit(1792309565.895:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.857309][ T33] audit: type=1326 audit(1792309565.895:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.944252][ T33] audit: type=1326 audit(1792309565.975:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.944423][ T33] audit: type=1326 audit(1792309565.975:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 400.945266][ T33] audit: type=1326 audit(1792309565.975:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.2772" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd66299e559 code=0x7ffc0000 [ 401.302595][T13071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2778'. [ 401.774794][T13063] syz.7.2773 (13063) used greatest stack depth: 10760 bytes left [ 401.801148][T13079] input: syz1 as /devices/virtual/input/input20 [ 401.970644][ T5616] Bluetooth: hci5: unexpected event for opcode 0x0c23 [ 403.506972][T13103] trusted_key: encrypted_key: insufficient parameters specified [ 403.760137][T13110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2795'. [ 404.106772][T13120] fuse: fd is not a fuse device [ 404.286851][T13127] netlink: 'syz.8.2803': attribute type 11 has an invalid length. [ 404.466961][T10490] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 404.616372][T10490] usb 8-1: Using ep0 maxpacket: 16 [ 404.618032][T10490] usb 8-1: unable to get BOS descriptor or descriptor too short [ 404.618067][T10490] usb 8-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40 [ 404.618970][T10490] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 404.621032][T10490] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.621050][T10490] usb 8-1: Product: syz [ 404.621061][T10490] usb 8-1: Manufacturer: syz [ 404.621072][T10490] usb 8-1: SerialNumber: syz [ 404.914135][T10490] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 404.926685][T10490] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 405.313255][T10490] usb 8-1: 2:1 : invalid Cluster Descriptor size [ 405.526189][T10490] usb 8-1: USB disconnect, device number 19 [ 405.572604][T12924] udevd[12924]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.526205][T13171] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 409.185640][T13182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 409.824845][ T5616] Bluetooth: hci5: unexpected cc 0x1407 length: 11 > 9 [ 409.824883][ T5616] Bluetooth: hci5: unexpected event for opcode 0x1407 [ 412.516052][T13255] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2856'. [ 413.082223][ T5616] Bluetooth: hci5: unexpected event for opcode 0x2028 [ 413.395941][ T193] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 413.545946][ T193] usb 8-1: Using ep0 maxpacket: 16 [ 413.546544][ T193] usb 8-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00 [ 413.547817][ T193] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.547852][ T193] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.547872][ T193] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.547888][ T193] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 413.547908][ T193] usb 8-1: config 0 interface 0 has no altsetting 0 [ 413.547932][ T193] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.552072][ T193] usb 8-1: config 0 descriptor?? [ 414.023427][ T193] logitech-djreceiver 0003:046D:C53A.0016: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.7-1/input0 [ 414.191161][ T193] usb 8-1: USB disconnect, device number 20 [ 414.268070][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2869'. [ 414.307670][T13283] fido_id[13283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 416.742517][T13326] Config c/1 of g1 needs at least one function. [ 416.742608][T13326] udc dummy_udc.0: failed to start g1: -22 [ 416.742624][T13326] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 416.743141][T13326] UDC core: g1: couldn't find an available UDC or it's busy [ 419.906373][T13389] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2898'. [ 424.286134][T10490] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 424.437176][T10490] usb 4-1: New USB device found: idVendor=0eef, idProduct=72c4, bcdDevice=0.00 [ 424.449409][T10490] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.449435][T10490] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 424.449454][T10490] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.449480][T10490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.495929][T10490] usb 4-1: config 0 descriptor?? [ 424.619935][ T33] kauditd_printk_skb: 30 callbacks suppressed [ 424.619970][ T33] audit: type=1800 audit(1792309589.655:191): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2908" name="bus" dev="tmpfs" ino=906 res=0 errno=-22 [ 424.939661][T10490] hid-multitouch 0003:0EEF:72C4.0017: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 425.118359][T10490] usb 4-1: USB disconnect, device number 23 [ 425.240133][T13434] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2915'. [ 428.165998][ T193] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 428.316644][ T193] usb 8-1: New USB device found: idVendor=0bda, idProduct=8150, bcdDevice=0.00 [ 428.332829][ T193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.332849][ T193] usb 8-1: Product: syz [ 428.332860][ T193] usb 8-1: Manufacturer: syz [ 428.332871][ T193] usb 8-1: SerialNumber: syz [ 430.795329][ T193] rtl8150 8-1:1.0: couldn't reset the device [ 430.802751][ T193] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 430.839322][ T193] usb 8-1: USB disconnect, device number 21 [ 431.771744][T13520] Config c/1 of g1 needs at least one function. [ 431.771831][T13520] udc dummy_udc.0: failed to start g1: -22 [ 431.771846][T13520] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 431.772347][T13520] UDC core: g1: couldn't find an available UDC or it's busy [ 433.007054][ T5608] Bluetooth: hci3: command 0x0405 tx timeout [ 433.377020][T13545] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2963'. [ 433.377043][T13545] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2963'. [ 433.377056][T13545] netlink: 'syz.8.2963': attribute type 5 has an invalid length. [ 433.377065][T13545] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2963'. [ 434.153627][T13556] Config c/1 of g1 needs at least one function. [ 434.153719][T13556] udc dummy_udc.0: failed to start g1: -22 [ 434.153735][T13556] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 434.155209][T13556] UDC core: g1: couldn't find an available UDC or it's busy [ 435.413196][T13591] Config c/1 of g1 needs at least one function. [ 435.415586][T13591] udc dummy_udc.0: failed to start g1: -22 [ 435.415605][T13591] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 435.454002][T13591] UDC core: g1: couldn't find an available UDC or it's busy [ 438.267250][ T5655] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 438.267946][ T5616] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 439.337013][ T5655] usb 8-1: Using ep0 maxpacket: 16 [ 439.340375][ T5655] usb 8-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 439.345269][ T5655] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 439.371197][ T5655] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.371217][ T5655] usb 8-1: Product: syz [ 439.371228][ T5655] usb 8-1: Manufacturer: syz [ 439.371239][ T5655] usb 8-1: SerialNumber: syz [ 439.521667][ T5655] r8152-cfgselector 8-1: Unknown version 0x0000 [ 439.521689][ T5655] r8152-cfgselector 8-1: config 0 descriptor?? [ 439.614920][ T5616] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 440.834835][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.834881][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.875707][ T5655] r8152-cfgselector 8-1: USB disconnect, device number 22 [ 442.677650][T13675] fuse: Unknown parameter 'fd0x0000000000000005' [ 444.743720][ T5616] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 445.068572][ T5616] Bluetooth: hci2: unexpected event for opcode 0x080f [ 445.984986][T13720] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.278039][T13751] openvswitch: netlink: IPv6 tunnel dst address is zero [ 448.444527][T13755] bridge0: port 3(veth0_to_bridge) entered blocking state [ 448.444626][T13755] bridge0: port 3(veth0_to_bridge) entered disabled state [ 448.444754][T13755] veth0_to_bridge: entered allmulticast mode [ 448.487868][T13755] veth0_to_bridge: entered promiscuous mode [ 448.487987][T13755] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.489789][T13755] bridge0: port 3(veth0_to_bridge) entered blocking state [ 448.489875][T13755] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 449.077696][ T5616] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 449.077754][ T5616] Bluetooth: hci2: Injecting HCI hardware error event [ 449.079211][ T5622] Bluetooth: hci2: hardware error 0x00 [ 449.196004][T10490] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 449.226151][T13774] netlink: 'syz.5.3056': attribute type 21 has an invalid length. [ 449.228847][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3056'. [ 449.229300][T13774] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3056'. [ 449.345980][T10490] usb 4-1: Using ep0 maxpacket: 8 [ 449.349984][T10490] usb 4-1: New USB device found: idVendor=1385, idProduct=4251, bcdDevice=e4.a4 [ 449.351980][T10490] usb 4-1: config 8 has an invalid interface number: 171 but max is 0 [ 449.351999][T10490] usb 4-1: config 8 has no interface number 0 [ 449.352020][T10490] usb 4-1: config 8 interface 171 has no altsetting 0 [ 449.361480][T10490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.361498][T10490] usb 4-1: Product: syz [ 449.361509][T10490] usb 4-1: Manufacturer: syz [ 449.361520][T10490] usb 4-1: SerialNumber: syz [ 449.644630][T10490] usb 4-1: Could not find all expected endpoints [ 449.664582][T10490] usb 4-1: USB disconnect, device number 24 [ 449.747320][T13782] bridge0: port 3(veth0_to_bridge) entered blocking state [ 449.747382][T13782] bridge0: port 3(veth0_to_bridge) entered disabled state [ 449.747517][T13782] veth0_to_bridge: entered allmulticast mode [ 449.750004][T13782] veth0_to_bridge: entered promiscuous mode [ 449.750120][T13782] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.750575][T13782] bridge0: port 3(veth0_to_bridge) entered blocking state [ 449.750641][T13782] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 450.319523][T13797] smbdirect: ib_dev[rxe0] renamed to [syz1] [ 450.917025][T13759] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 451.088413][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3075'. [ 451.088550][T13827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.156109][ T5622] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 451.194245][T13827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.559334][T13837] bridge0: port 3(veth0_to_bridge) entered blocking state [ 451.559402][T13837] bridge0: port 3(veth0_to_bridge) entered disabled state [ 451.559533][T13837] veth0_to_bridge: entered allmulticast mode [ 451.562442][T13837] veth0_to_bridge: entered promiscuous mode [ 451.562571][T13837] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.562926][T13837] bridge0: port 3(veth0_to_bridge) entered blocking state [ 451.562991][T13837] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 451.660257][T13836] FAULT_INJECTION: forcing a failure. [ 451.660257][T13836] name failslab, interval 1, probability 0, space 0, times 0 [ 451.660296][T13836] CPU: 0 UID: 0 PID: 13836 Comm: syz.3.3081 Tainted: G L Y syzkaller #0 PREEMPT(full) [ 451.660327][T13836] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 451.660335][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 451.660347][T13836] Call Trace: [ 451.660354][T13836] [ 451.660360][T13836] dump_stack_lvl+0xe8/0x150 [ 451.660391][T13836] should_fail_ex+0x3eb/0x540 [ 451.660420][T13836] should_failslab+0xa8/0x100 [ 451.660436][T13836] ? skb_clone+0x212/0x3a0 [ 451.660461][T13836] kmem_cache_alloc_noprof+0x9c/0x600 [ 451.660484][T13836] ? skb_clone+0x212/0x3a0 [ 451.660512][T13836] skb_clone+0x212/0x3a0 [ 451.660538][T13836] __netlink_deliver_tap+0x355/0x6e0 [ 451.660568][T13836] ? netlink_deliver_tap+0x2e/0x1b0 [ 451.660587][T13836] netlink_deliver_tap+0x19c/0x1b0 [ 451.660606][T13836] netlink_dump+0x95b/0xee0 [ 451.660631][T13836] ? __pfx_netlink_dump+0x10/0x10 [ 451.660657][T13836] ? genl_start+0x57e/0x6d0 [ 451.660685][T13836] __netlink_dump_start+0x589/0x7b0 [ 451.660707][T13836] genl_family_rcv_msg_dumpit+0x213/0x310 [ 451.660733][T13836] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 451.660755][T13836] ? genl_get_cmd+0x4d6/0x960 [ 451.660782][T13836] ? __pfx_genl_start+0x10/0x10 [ 451.660802][T13836] ? __pfx_genl_dumpit+0x10/0x10 [ 451.660822][T13836] ? __pfx_genl_done+0x10/0x10 [ 451.660855][T13836] genl_rcv_msg+0x5e1/0x7a0 [ 451.660882][T13836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.660903][T13836] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 451.660924][T13836] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 451.660944][T13836] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 451.660968][T13836] ? __asan_memcpy+0x40/0x70 [ 451.660996][T13836] netlink_rcv_skb+0x226/0x4a0 [ 451.661014][T13836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 451.661037][T13836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 451.661067][T13836] ? down_read+0x2b9/0x320 [ 451.661094][T13836] genl_rcv+0x28/0x40 [ 451.661113][T13836] netlink_unicast+0x8ef/0xa80 [ 451.661152][T13836] netlink_sendmsg+0x7f0/0xb20 [ 451.661174][T13836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.661194][T13836] ? aa_sock_msg_perm+0x144/0x210 [ 451.661221][T13836] ? apparmor_socket_sendmsg+0x98/0x360 [ 451.661242][T13836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.661259][T13836] sock_sendmsg_nosec+0x14e/0x190 [ 451.661277][T13836] ____sys_sendmsg+0x54e/0x850 [ 451.661304][T13836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.661332][T13836] ? import_iovec+0x73/0xa0 [ 451.661357][T13836] ___sys_sendmsg+0x2a5/0x360 [ 451.661378][T13836] ? __lock_acquire+0x747/0x2de0 [ 451.661397][T13836] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.661447][T13836] ? __fget_files+0x3a2/0x420 [ 451.661468][T13836] ? __fget_files+0x2a/0x420 [ 451.661498][T13836] __x64_sys_sendmsg+0x1b1/0x290 [ 451.661522][T13836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.661572][T13836] do_syscall_64+0x166/0x520 [ 451.661593][T13836] ? trace_irq_disable+0x3b/0x140 [ 451.661610][T13836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.661625][T13836] ? clear_bhb_loop+0x70/0xc0 [ 451.661645][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.661661][T13836] RIP: 0033:0x7fd66299e559 [ 451.661680][T13836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.661694][T13836] RSP: 002b:00007fd663929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.661714][T13836] RAX: ffffffffffffffda RBX: 00007fd662c25fa0 RCX: 00007fd66299e559 [ 451.661726][T13836] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000003 [ 451.661736][T13836] RBP: 00007fd663929090 R08: 0000000000000000 R09: 0000000000000000 [ 451.661746][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.661755][T13836] R13: 00007fd662c26038 R14: 00007fd662c25fa0 R15: 00007ffd1cdf96a8 [ 451.661781][T13836] [ 452.585438][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3092'. [ 452.700038][T13871] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 452.701475][T13871] No source specified [ 454.200822][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.363320][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.473747][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.570529][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.991916][ T51] bridge_slave_1: left allmulticast mode [ 454.991938][ T51] bridge_slave_1: left promiscuous mode [ 454.992133][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.031548][ T51] bridge_slave_0: left allmulticast mode [ 455.031570][ T51] bridge_slave_0: left promiscuous mode [ 455.031736][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.179016][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 455.183980][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 455.185056][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 455.213386][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 455.225264][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 455.417108][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3120'. [ 455.491452][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 455.789236][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.792935][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.795355][ T51] bond0 (unregistering): Released all slaves [ 455.855160][T13938] tipc: Enabling of bearer rejected, failed to enable media [ 457.183425][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3131'. [ 457.304690][T13932] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.316193][ T5616] Bluetooth: hci4: command tx timeout [ 457.383285][ T51] hsr_slave_0: left promiscuous mode [ 457.402234][ T51] hsr_slave_1: left promiscuous mode [ 457.403000][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.403017][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.434961][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.434979][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.483082][ T51] veth1_macvtap: left promiscuous mode [ 457.483114][ T51] veth0_macvtap: left promiscuous mode [ 457.483204][ T51] veth1_vlan: left promiscuous mode [ 457.483253][ T51] veth0_vlan: left promiscuous mode [ 458.308043][ T51] team0 (unregistering): Port device team_slave_1 removed [ 458.329958][ T51] team0 (unregistering): Port device team_slave_0 removed [ 458.495529][ T5273] 8021q: adding VLAN 0 to HW filter on device eth17 [ 459.396986][ T5616] Bluetooth: hci4: command tx timeout [ 459.433015][T13932] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.434714][T13932] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.434837][T13932] bridge_slave_0: entered allmulticast mode [ 459.459607][T13932] bridge_slave_0: entered promiscuous mode [ 459.471240][T13932] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.471646][T13932] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.471753][T13932] bridge_slave_1: entered allmulticast mode [ 459.475360][T13932] bridge_slave_1: entered promiscuous mode [ 459.621176][T13932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.642596][T13932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.718408][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3139'. [ 459.758428][T13932] team0: Port device team_slave_0 added [ 459.777883][T13932] team0: Port device team_slave_1 added [ 459.884302][T13932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.884318][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.884338][T13932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.939332][T13932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.939346][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.939366][T13932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.139611][T13932] hsr_slave_0: entered promiscuous mode [ 460.140391][T13932] hsr_slave_1: entered promiscuous mode [ 460.353030][ T5273] 8021q: adding VLAN 0 to HW filter on device eth18 [ 461.567598][ T5616] Bluetooth: hci4: command tx timeout [ 463.650135][ T5616] Bluetooth: hci4: command tx timeout [ 465.095849][ C0] sched: DL replenish lagged too much [ 491.326522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.326805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.328308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.328648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.330193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.330509][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.331984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.332300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.333791][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.334140][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.336873][ C0] net_ratelimit: 5496 callbacks suppressed [ 496.336893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.337210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.338672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.339023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.340527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.340870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.342425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.342744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.344288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 496.344608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.347219][ C0] net_ratelimit: 5518 callbacks suppressed [ 501.347238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.347671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.349284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.349651][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.351137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.351464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.352984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.353333][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.354947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.355269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.357319][ C0] net_ratelimit: 7155 callbacks suppressed [ 506.357338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.357654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.357938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 506.359650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.359986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.360659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 506.362168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.362482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.362792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 506.364292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.366648][ C0] net_ratelimit: 8377 callbacks suppressed [ 511.366667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.367664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.367980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.368248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 511.369124][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.370048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.370364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 511.370698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 511.371554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 511.372499][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.376044][ C0] net_ratelimit: 8485 callbacks suppressed [ 516.376063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 516.376935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.377884][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.378215][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.378490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 516.379347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.380302][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.380646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.380916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 516.381765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.386589][ C0] net_ratelimit: 8555 callbacks suppressed [ 521.386607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.387525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.387837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.388107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 521.388961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.389907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.390218][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 521.390490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 521.391321][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.392484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.396044][ C0] net_ratelimit: 10270 callbacks suppressed [ 526.396063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.396331][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 526.397221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.397487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.397794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.398682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.399012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 526.399279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 526.400143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 526.400407][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.406518][ C0] net_ratelimit: 9542 callbacks suppressed [ 531.406536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.407452][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 531.407718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.408027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.408861][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.409173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 531.409436][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 531.410267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 531.411240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 531.411457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.416379][ C0] net_ratelimit: 9395 callbacks suppressed [ 536.416396][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.416698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.416960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 536.417804][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 536.418749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 536.418987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.419345][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.420153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.420465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 536.420767][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 541.426140][ C0] net_ratelimit: 9918 callbacks suppressed [ 541.426157][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.426432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.427276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 541.427487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.427847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.428696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.429038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 541.429312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 541.430179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 541.430461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.435990][ C0] net_ratelimit: 9925 callbacks suppressed [ 546.436008][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 546.436885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.437182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 546.438139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 546.438360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.438672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.439554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.439904][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 546.440172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 546.441064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.445965][ C0] net_ratelimit: 10748 callbacks suppressed [ 551.445984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.446910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 551.447166][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.447487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.448344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.448666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 551.448935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 551.449771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 551.450094][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:cf:e3:42:9e:85, vlan:0) [ 551.450318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.312122][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 553.320872][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.455820][ C0] net_ratelimit: 11211 callbacks suppressed [ 556.455838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 556.456086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.456403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.457257][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.457576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 556.457840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 556.458733][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.459095][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:cf:e3:42:9e:85, vlan:0) [ 556.459314][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 556.459584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.465906][ C0] net_ratelimit: 11140 callbacks suppressed [ 561.465924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 561.466175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.466496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.467346][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.467662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 561.467960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 561.468841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.469156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:cf:e3:42:9e:85, vlan:0) [ 561.469383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.469676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.476097][ C0] net_ratelimit: 10836 callbacks suppressed [ 566.476116][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.476462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:cf:e3:42:9e:85, vlan:0) [ 566.476691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.476984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.477925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 566.478147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.478459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.479308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.479624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 566.479960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 569.125798][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 571.092731][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14042/1:b..l.. P14052/1:b..l.. [ 571.103254][ C0] rcu: (detected by 0, t=10502 jiffies, g=113089, q=926 ncpus=1) [ 571.111081][ C0] task:syz.8.3144 state:R running task stack:26232 pid:14052 tgid:14051 ppid:11563 task_flags:0x40054c flags:0x00080001 [ 571.124643][ C0] Call Trace: [ 571.127949][ C0] [ 571.130888][ C0] __schedule+0x17dd/0x5820 [ 571.135417][ C0] ? __lock_acquire+0x747/0x2de0 [ 571.140361][ C0] ? __lock_acquire+0x747/0x2de0 [ 571.145307][ C0] ? __pfx___schedule+0x10/0x10 [ 571.150174][ C0] preempt_schedule_irq+0x4b/0x90 [ 571.155252][ C0] irqentry_exit+0x14f/0x9b0 [ 571.159865][ C0] ? trace_irq_disable+0x3b/0x140 [ 571.164910][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.170899][ C0] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 571.176776][ C0] Code: 08 8b 15 2d d2 2f 0d 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 d8 4a 09 93 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 571.196394][ C0] RSP: 0018:ffffc90005497500 EFLAGS: 00000a07 [ 571.202467][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8000000000000000 [ 571.210441][ C0] RDX: 00000000000b0d2a RSI: ffffffff8c8fbd60 RDI: ffffffff8c8fbd20 [ 571.218421][ C0] RBP: ffffffff8c08a3d7 R08: ffffffff817889cf R09: 0000000000000000 [ 571.226409][ C0] R10: ffffc900054975f8 R11: ffffffff81b3a250 R12: dffffc0000000000 [ 571.234391][ C0] R13: ffffffff93356d64 R14: ffffc900054975a8 R15: 00000000000b08a3 [ 571.242375][ C0] ? do_syscall_64+0x327/0x520 [ 571.247163][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.253338][ C0] ? unwind_next_frame+0x8f/0x2550 [ 571.258485][ C0] ? do_syscall_64+0x328/0x520 [ 571.263267][ C0] ? unwind_next_frame+0x8f/0x2550 [ 571.268387][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.274550][ C0] arch_stack_walk+0x11b/0x150 [ 571.279323][ C0] ? do_syscall_64+0x328/0x520 [ 571.284105][ C0] stack_trace_save+0xa9/0x100 [ 571.288868][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 571.294242][ C0] ? stack_trace_save+0xa9/0x100 [ 571.299185][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 571.304655][ C0] kasan_save_track+0x3e/0x80 [ 571.309358][ C0] ? kasan_save_track+0x3e/0x80 [ 571.314224][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 571.318987][ C0] ? __kmalloc_cache_noprof+0x31c/0x600 [ 571.324540][ C0] ? kmem_cache_free+0x156/0x650 [ 571.329487][ C0] ? task_work_run+0x1d9/0x260 [ 571.334250][ C0] ? do_exit+0x705/0x2360 [ 571.338603][ C0] ? do_group_exit+0x22d/0x2f0 [ 571.343372][ C0] ? get_signal+0x1216/0x12c0 [ 571.348050][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 571.353775][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 571.359412][ C0] ? do_syscall_64+0x328/0x520 [ 571.364216][ C0] ? rcu_is_watching+0x16/0xb0 [ 571.369007][ C0] __kasan_kmalloc+0x93/0xb0 [ 571.373614][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 571.378999][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 571.384551][ C0] ? kmem_cache_free+0x156/0x650 [ 571.389496][ C0] ? kmem_cache_free+0x156/0x650 [ 571.394451][ C0] ? task_work_run+0x1d9/0x260 [ 571.399229][ C0] kmem_cache_free+0x156/0x650 [ 571.404009][ C0] task_work_run+0x1d9/0x260 [ 571.408623][ C0] ? __pfx_task_work_run+0x10/0x10 [ 571.413754][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 571.418885][ C0] do_exit+0x705/0x2360 [ 571.423079][ C0] ? __pfx_do_exit+0x10/0x10 [ 571.427680][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 571.432720][ C0] do_group_exit+0x22d/0x2f0 [ 571.437339][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.442566][ C0] get_signal+0x1216/0x12c0 [ 571.447090][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 571.452648][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.458822][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 571.464202][ C0] ? rcu_is_watching+0x16/0xb0 [ 571.468980][ C0] do_syscall_64+0x328/0x520 [ 571.473581][ C0] ? trace_irq_disable+0x3b/0x140 [ 571.478607][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.484676][ C0] ? clear_bhb_loop+0x70/0xc0 [ 571.489360][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.495260][ C0] RIP: 0033:0x7fbe1eb9e559 [ 571.499686][ C0] RSP: 002b:00007fbe1fa500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 571.508110][ C0] RAX: 0000000000000001 RBX: 00007fbe1ee25fa8 RCX: 00007fbe1eb9e559 [ 571.516080][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbe1ee25fac [ 571.524058][ C0] RBP: 00007fbe1ee25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 571.532034][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 571.540018][ C0] R13: 00007fbe1ee26038 R14: 00007ffe80235520 R15: 00007ffe80235608 [ 571.548015][ C0] [ 571.551126][ C0] task:syz.5.3140 state:R running task stack:26856 pid:14042 tgid:14039 ppid:10206 task_flags:0x40044c flags:0x00080000 [ 571.564617][ C0] Call Trace: [ 571.567931][ C0] [ 571.570864][ C0] __schedule+0x17dd/0x5820 [ 571.575394][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 571.580426][ C0] ? __pfx___schedule+0x10/0x10 [ 571.585293][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 571.590670][ C0] preempt_schedule_common+0x7f/0xd0 [ 571.595964][ C0] preempt_schedule_thunk+0x16/0x40 [ 571.601172][ C0] _raw_spin_unlock+0x41/0x50 [ 571.605856][ C0] __zap_vma_range+0x3d29/0x4b50 [ 571.610858][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 571.616161][ C0] ? mas_find+0x6d6/0xcb0 [ 571.620504][ C0] unmap_vmas+0x38b/0x550 [ 571.624846][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 571.629718][ C0] ? mas_next_slot+0xc91/0xd70 [ 571.634509][ C0] exit_mmap+0x290/0xa40 [ 571.638762][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 571.643552][ C0] ? __pfx_exit_aio+0x10/0x10 [ 571.648247][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 571.653487][ C0] __mmput+0x118/0x420 [ 571.657561][ C0] exit_mm+0x18e/0x240 [ 571.661645][ C0] do_exit+0x6a8/0x2360 [ 571.665814][ C0] ? __pfx_do_exit+0x10/0x10 [ 571.670413][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 571.675470][ C0] do_group_exit+0x22d/0x2f0 [ 571.680064][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.685273][ C0] get_signal+0x1216/0x12c0 [ 571.689799][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 571.695354][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.701524][ C0] ? __x64_sys_recvmmsg+0x1fa/0x250 [ 571.706740][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 571.712116][ C0] ? rcu_is_watching+0x16/0xb0 [ 571.716887][ C0] do_syscall_64+0x328/0x520 [ 571.721487][ C0] ? trace_irq_disable+0x3b/0x140 [ 571.726523][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.732590][ C0] ? clear_bhb_loop+0x70/0xc0 [ 571.737272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.743171][ C0] RIP: 0033:0x7f1f13b9e559 [ 571.747589][ C0] RSP: 002b:00007f1f14b160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 571.756004][ C0] RAX: fffffffffffffe00 RBX: 00007f1f13e26098 RCX: 00007f1f13b9e559 [ 571.763994][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f13e26098 [ 571.771986][ C0] RBP: 00007f1f13e26090 R08: 0000000000000000 R09: 0000000000000000 [ 571.779975][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.788050][ C0] R13: 00007f1f13e26128 R14: 00007fff3259f0b0 R15: 00007fff3259f198 [ 571.796056][ C0] [ 571.799461][ C0] net_ratelimit: 5753 callbacks suppressed [ 571.799474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.800536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:e7:1b:0a:46:34, vlan:0) [ 571.800812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.801139][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.802047][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.802397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.802668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:2e:00:01:1f:9c, vlan:0) [ 571.803516][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.803852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:42:cf:e3:42:9e:85, vlan:0) [ 571.804102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 573.166681][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.175400][ T1318] ieee802154 phy1 wpan1: encryption failed: -22