last executing test programs: 6m30.24156887s ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13) 6m29.026759216s ago: executing program 0 (id=36): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0571589cf617db13", "e20d62c428fbfcb135b4239da542ca8f", "03de0400", "949ef22124eb0e38"}, 0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1000}}, 0x0, 0x0, 0x38, 0x0, "824770ed9d3fc1114fa98b3115b51a7042ccec5e95bd9f46a985c3cf9ffa5fb6b26498702bcbe954eea58a3582073718f1ad6bd6721d341b42f3e5aae27255f15e424dc0e9b55d3af11e97f6ef2f1b4c"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 6m28.381689079s ago: executing program 0 (id=41): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6m27.502638508s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 6m26.842585827s ago: executing program 0 (id=49): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x400) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m23.943910354s ago: executing program 0 (id=67): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x263}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) 6m23.350731061s ago: executing program 32 (id=67): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x263}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) 6m18.641767698s ago: executing program 4 (id=93): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f00000010c0)={0x20, 0xd}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000f40)={0x34, &(0x7f0000000d40)={0x40, 0x14}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e80)={0xc0, 0xa1, 0x4, 0xffffffff}, &(0x7f0000000ec0)={0x40, 0xa0, 0x4}, &(0x7f0000000f00)={0xc0, 0xa2, 0x2f, "956c7bf6ce6eb8d2a41fdb7b0f6d077c99fb4e6e48a081e8ec2e16d1bd884cd753c92e1d97f24157d2485add2c5bda"}}) 6m15.829954936s ago: executing program 4 (id=99): r0 = syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m13.38778939s ago: executing program 4 (id=109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098", 0x38}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 6m13.169635411s ago: executing program 4 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 6m12.9742882s ago: executing program 4 (id=112): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/75, 0x4b}, 0x10001}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m11.140060254s ago: executing program 4 (id=120): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) read(r3, &(0x7f00000000c0)=""/94, 0x5e) 6m10.439935033s ago: executing program 33 (id=120): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) read(r3, &(0x7f00000000c0)=""/94, 0x5e) 5m48.254137915s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4\x00', 0x2) 5m47.975974052s ago: executing program 2 (id=245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0xffffffffffffffff, 0x0) 5m47.493977489s ago: executing program 2 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5m47.281268473s ago: executing program 2 (id=250): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 5m46.955041629s ago: executing program 2 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000040)={0x15ab3f44, 0x1, 0x6, 0x9, 0x200, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec004a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 5m45.5796401s ago: executing program 2 (id=256): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000300)={0x0, 0x0, 0x0, r2}) 5m45.241734301s ago: executing program 34 (id=256): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000300)={0x0, 0x0, 0x0, r2}) 26.971395599s ago: executing program 7 (id=1563): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80c42, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) socketpair(0x26, 0x5, 0x9, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r3}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 25.176211871s ago: executing program 7 (id=1564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x8030b5, 0x100, 0x2, 0x11f}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x626, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x80, 0xffffffff, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x3, 0x12e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x40000, 0x2, 0x36b}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1258c1, 0x60) 24.967559736s ago: executing program 5 (id=1567): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='usb1\x00', 0x5) 24.135622849s ago: executing program 7 (id=1570): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x20000880) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = epoll_create(0x8001) fchmod(r4, 0x100) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x1) unshare(0x64000600) 22.39415829s ago: executing program 5 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000008, 0x31, 0xffffffffffffffff, 0xd363f000) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x4e}, 0x28) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000900)={0x19}) 20.467975044s ago: executing program 5 (id=1572): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f00000000c0)='.\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xffffff01, 0x0, 0x54, 0x4, 0x73}, 0x9c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r3, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 19.861473522s ago: executing program 6 (id=1574): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd\x00') socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.969668568s ago: executing program 5 (id=1576): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) 16.608170568s ago: executing program 7 (id=1578): prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f000900000000000000400004000000040019"], 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x10) 16.297048149s ago: executing program 1 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00') socket$key(0xf, 0x3, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 13.100005588s ago: executing program 6 (id=1581): memfd_create(&(0x7f00000003c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\x00', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd(0x5f0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 12.380682659s ago: executing program 5 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) setns(0xc9, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x40106183, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) r4 = timerfd_create(0x7, 0x80800) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 11.94572515s ago: executing program 1 (id=1584): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x1) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1e3) landlock_restrict_self(r2, 0x7) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x6490, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 10.252183826s ago: executing program 6 (id=1585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0xc}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) pread64(r4, &(0x7f0000000140)=""/245, 0xf5, 0x4) socket(0x10, 0x3, 0x0) 10.230655425s ago: executing program 7 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200080000100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x8000000000000005) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) 7.368359839s ago: executing program 3 (id=1587): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) recvfrom(0xffffffffffffffff, &(0x7f00000003c0)=""/109, 0x6d, 0x2001, &(0x7f0000000540)=@llc={0x1a, 0x323, 0x2, 0x3, 0x1, 0xc, @broadcast}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x26, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0xd7, 0xa5, &(0x7f00000002c0)=""/165, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7.362632094s ago: executing program 1 (id=1588): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)={{0x12, 0x1, 0x201, 0xc8, 0x33, 0x89, 0x8, 0x4c8, 0x720, 0xb651, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x6, 0x50, 0x7f, "", [{{0x9, 0x4, 0xd4, 0x7, 0x0, 0x60, 0x3e, 0x70, 0x92}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r0, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 7.346734831s ago: executing program 6 (id=1589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e22, 0x6, @mcast1}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 5.755097445s ago: executing program 3 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r3, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) 5.753784572s ago: executing program 6 (id=1591): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) 4.455204333s ago: executing program 3 (id=1592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 2.539275884s ago: executing program 7 (id=1593): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x500, 0x100, 0x32315842, 0x9, 0xa, [{0x80, 0x3}, {0x1, 0x7fffffff}, {0x1, 0x4}, {0x10001, 0x1}, {0x2, 0x320d4ffa}, {0x101, 0xf}, {0x40040, 0x5da1}, {0x3c7, 0x2}], 0x2, 0x3, 0x7}}) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x58, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x44, 0x1, [@m_bpf={0x40, 0xb, 0x0, 0x0, {{0x8}, {0x4}, {0x16, 0x6, "8c5e889680ea699f0286c6926deecbcf795b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x58}}, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="080001"], 0x90}}, 0x0) listen(r0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 2.42321731s ago: executing program 5 (id=1594): ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) add_key$user(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000001c0)="7f", 0x1, 0xffffffffffffffff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffff801, @local, 0x8}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000340)="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", 0x12e) chroot(&(0x7f0000000240)='./config\x00') 2.180048701s ago: executing program 3 (id=1595): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() r1 = open(0x0, 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x1, 0x5e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000480)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0x2cf, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x8}}}, &(0x7f0000000280)) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007780), 0x0, 0x4048040) 1.395592061s ago: executing program 1 (id=1596): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4905, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r1, 0x6) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x1005, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) 1.056601945s ago: executing program 1 (id=1597): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfd00, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0x1}]}, 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x1c6, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb88a820008100400086dd67c172f501883a0100000000000000000000ffffac1414aaff020000000000000000000000000001040090780000ffbf6554d03a0400880100000000000000000000ffff0a010100fc0000000000000000000000000000003a000000000000000c29000000000000c910fc010000000000000000000000000000000100050200010189d57918428e2233d2cca400adffd73f37046be142f92e38e5c78b0baf8c1162087e305fd718f76f49cce0c69a86334360d4d14b752ba68f3e31b97b0dd485dd27ec3aa4743b71fc466d88c0a958cf40981973725d2ca61573e72dfb571af48286605c3ad28d33960414b3cd5c58c49d8b42251b775d5c43ee98c1ca5e4dbd9b7ccb685ccedfcdaaf9910a600000863bf4c90d00000000000000f5955eccdb53cdf5717b13ca5bfb6396224c907f5c79cb0e89b2f4e7fe12a0b49e6dac7d28e617cc2f4336d409a3e16b8325eefe64ef26f9459adbffa91387553c98ef417a2a36fac0977c5b8cab4fdc9cd10740000000010e0f090008000000000000000180000000000000000000000000000008000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 983.058701ms ago: executing program 3 (id=1598): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x101082, 0xe8) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 207.371189ms ago: executing program 6 (id=1599): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/vmcoreinfo', 0x100, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) userfaultfd(0x80001) r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r0, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x7, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x191}}}, &(0x7f0000000200)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xffffffee, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x93}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x282f, 0x1000, 0x40000003, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x20000001, 0xffffffff}}], 0x1, 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x271f, 0x0, 0x0) 144.424628ms ago: executing program 3 (id=1600): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d", 0xa6}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc0740", 0x52}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46", 0xa1}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=1601): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ce number 3 [ 125.252003][ T5605] Bluetooth: hci0: command tx timeout [ 125.313665][ T13] bridge_slave_1: left allmulticast mode [ 125.347397][ T13] bridge_slave_1: left promiscuous mode [ 125.425208][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.795232][ T13] bridge_slave_0: left allmulticast mode [ 125.795270][ T13] bridge_slave_0: left promiscuous mode [ 125.795543][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.902445][ T6080] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 126.133516][ T5898] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.374694][ T5898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.379886][ T5898] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 126.401004][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 126.401036][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.401055][ T5898] usb 5-1: Product: syz [ 126.401068][ T5898] usb 5-1: Manufacturer: syz [ 126.401082][ T5898] usb 5-1: SerialNumber: syz [ 126.815712][ T5898] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 126.931154][ T5898] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 126.931185][ T5898] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 127.327001][ T5898] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 127.327032][ T5898] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 127.334663][ T5605] Bluetooth: hci0: command tx timeout [ 127.535789][ T5898] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 127.829770][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.004234][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.066445][ T5898] usb 5-1: USB disconnect, device number 4 [ 128.299129][ T13] bond0 (unregistering): Released all slaves [ 128.898008][ T6080] syz_tun: entered promiscuous mode [ 129.002951][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.027213][ T6080] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 129.071708][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 129.769754][ T6120] binder: 6119:6120 ioctl c0306201 2000000001c0 returned -14 [ 129.809621][ T42] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 130.013376][ T42] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 132.081774][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.120055][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.138431][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.158149][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.158917][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.098955][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099044][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.248526][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.248837][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.249073][ T5980] bridge_slave_0: entered allmulticast mode [ 133.265261][ T5980] bridge_slave_0: entered promiscuous mode [ 133.320630][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.320770][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.323942][ T5980] bridge_slave_1: entered allmulticast mode [ 133.337699][ T5980] bridge_slave_1: entered promiscuous mode [ 133.538797][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.549901][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.827012][ T5980] team0: Port device team_slave_0 added [ 133.877433][ T5980] team0: Port device team_slave_1 added [ 134.213276][ T5612] Bluetooth: hci3: command tx timeout [ 134.988028][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 134.990204][ T6191] Zero length message leads to an empty skb [ 135.200415][ T6194] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 135.236349][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.236368][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.236394][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.371789][ T6194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.383852][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.383872][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.383903][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.704217][ T6198] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 136.061239][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 136.061268][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 136.063965][ T13] hsr_slave_0: left promiscuous mode [ 136.116609][ T13] hsr_slave_1: left promiscuous mode [ 136.119244][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.119329][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.198210][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.198242][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.299104][ T5612] Bluetooth: hci3: command tx timeout [ 136.385364][ T13] veth1_macvtap: left promiscuous mode [ 136.385650][ T13] veth0_macvtap: left promiscuous mode [ 136.385962][ T13] veth1_vlan: left promiscuous mode [ 136.434929][ T13] veth0_vlan: left promiscuous mode [ 138.372191][ T5612] Bluetooth: hci3: command tx timeout [ 138.794263][ T13] team0 (unregistering): Port device team_slave_1 removed [ 138.862683][ T13] team0 (unregistering): Port device team_slave_0 removed [ 139.912995][ T5980] hsr_slave_0: entered promiscuous mode [ 139.936707][ T5980] hsr_slave_1: entered promiscuous mode [ 140.456617][ T5612] Bluetooth: hci3: command tx timeout [ 141.962065][ T42] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 142.136921][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.136984][ T42] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 142.171679][ T42] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 142.171716][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.171738][ T42] usb 4-1: Product: syz [ 142.171753][ T42] usb 4-1: Manufacturer: syz [ 142.171767][ T42] usb 4-1: SerialNumber: syz [ 142.219275][ T6303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 142.285086][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 142.375148][ T42] sisusb 4-1:1.0: Invalid USB2VGA device [ 142.388818][ T42] sisusb 4-1:1.0: probe with driver sisusb failed with error -22 [ 142.585428][ T5898] usb 4-1: USB disconnect, device number 3 [ 143.269921][ T36] audit: type=1326 audit(1785707858.336:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.269978][ T36] audit: type=1326 audit(1785707858.336:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383479][ T36] audit: type=1326 audit(1785707858.356:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383544][ T36] audit: type=1326 audit(1785707858.416:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383590][ T36] audit: type=1326 audit(1785707858.416:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383635][ T36] audit: type=1326 audit(1785707858.416:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383679][ T36] audit: type=1326 audit(1785707858.426:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383724][ T36] audit: type=1326 audit(1785707858.426:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383770][ T36] audit: type=1326 audit(1785707858.426:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.383817][ T36] audit: type=1326 audit(1785707858.426:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6326 comm="syz.1.176" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 143.827942][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.065614][ T6145] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.065764][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.066017][ T6145] bridge_slave_0: entered allmulticast mode [ 144.102335][ T6145] bridge_slave_0: entered promiscuous mode [ 144.108663][ T5980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.259209][ T5980] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 144.260762][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.260991][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.261250][ T6145] bridge_slave_1: entered allmulticast mode [ 144.299651][ T6145] bridge_slave_1: entered promiscuous mode [ 144.329301][ T5980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.407009][ T5980] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 144.424517][ T6348] batadv_slave_1: entered promiscuous mode [ 144.481377][ T5980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.638986][ T5980] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 144.639635][ T6350] batadv_slave_1: left promiscuous mode [ 144.852174][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 145.026814][ T42] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 145.026848][ T42] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 145.026867][ T42] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 145.026880][ T42] usb 2-1: config 220 has no interface number 2 [ 145.026921][ T42] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 145.026937][ T42] usb 2-1: config 220 interface 0 has no altsetting 0 [ 145.026948][ T42] usb 2-1: config 220 interface 76 has no altsetting 0 [ 145.026959][ T42] usb 2-1: config 220 interface 1 has no altsetting 0 [ 145.029331][ T42] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 145.029360][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.029381][ T42] usb 2-1: Product: syz [ 145.029394][ T42] usb 2-1: Manufacturer: syz [ 145.029408][ T42] usb 2-1: SerialNumber: syz [ 145.109432][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.295440][ T5980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.493002][ T42] usb 2-1: selecting invalid altsetting 0 [ 145.500057][ T42] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 145.500097][ T42] uvcvideo 2-1:220.0: No valid video chain found. [ 145.580229][ T5980] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 145.622987][ T42] usb 2-1: selecting invalid altsetting 0 [ 145.623033][ T42] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 145.639105][ T6145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.698943][ T42] usb 2-1: USB disconnect, device number 4 [ 145.901780][ T6145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.638436][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.784410][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 147.201609][ T6145] team0: Port device team_slave_0 added [ 147.238359][ T6145] team0: Port device team_slave_1 added [ 147.777040][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.956700][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.956719][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.956745][ T6145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.073137][ T6145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.073157][ T6145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.073184][ T6145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.539715][ T6145] hsr_slave_0: entered promiscuous mode [ 148.561122][ T6145] hsr_slave_1: entered promiscuous mode [ 148.567784][ T6145] debugfs: 'hsr0' already exists in 'hsr' [ 148.567814][ T6145] Cannot create hsr debugfs directory [ 149.061799][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 149.909485][ T1012] kernel read not supported for file /mdstat (pid: 1012 comm: kworker/1:3) [ 150.489836][ T6461] syz.3.217 (6461) used greatest stack depth: 19032 bytes left [ 150.551759][ T13] bridge_slave_1: left allmulticast mode [ 150.551796][ T13] bridge_slave_1: left promiscuous mode [ 150.561247][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.563258][ T10] IPVS: starting estimator thread 0... [ 150.664102][ T6475] IPVS: using max 14 ests per chain, 33600 per kthread [ 150.754799][ T6479] netlink: 'syz.2.225': attribute type 3 has an invalid length. [ 150.830468][ T13] bridge_slave_0: left allmulticast mode [ 150.830510][ T13] bridge_slave_0: left promiscuous mode [ 150.838653][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.956560][ T6499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.233'. [ 152.366529][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.471266][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.514686][ T13] bond0 (unregistering): Released all slaves [ 153.069229][ T6517] sg_write: data in/out 475100/136 bytes for SCSI command 0x0-- guessing data in; [ 153.069229][ T6517] program syz.1.240 not setting count and/or reply_len properly [ 154.794677][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.887669][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.037737][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 156.335661][ T3421] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.337041][ T3421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.564236][ T13] hsr_slave_0: left promiscuous mode [ 156.576726][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.620683][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.622420][ T13] hsr_slave_1: left promiscuous mode [ 156.625049][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.625076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.651009][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.656696][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.658425][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.671366][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.671393][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.885040][ T13] veth1_macvtap: left promiscuous mode [ 156.909188][ T13] veth0_macvtap: left promiscuous mode [ 156.909612][ T13] veth1_vlan: left promiscuous mode [ 156.909823][ T13] veth0_vlan: left promiscuous mode [ 157.782639][ T13] team0 (unregistering): Port device team_slave_1 removed [ 157.822987][ T13] team0 (unregistering): Port device team_slave_0 removed [ 158.050257][ T6145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.090091][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 158.204016][ T6145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.275756][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 158.460466][ T6145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.545702][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 158.609248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.645488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.672150][ T6145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 158.727222][ T6145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.856090][ T5612] Bluetooth: hci2: command tx timeout [ 159.926487][ T5612] Bluetooth: hci1: unexpected cc 0x2029 length: 100 > 1 [ 160.047965][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 160.204025][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 160.237289][ T5903] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 160.237322][ T5903] usb 4-1: config 0 has no interface number 0 [ 160.237371][ T5903] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.237396][ T5903] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.237419][ T5903] usb 4-1: config 0 interface 85 has no altsetting 0 [ 160.264006][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 160.264038][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.264056][ T5903] usb 4-1: Product: syz [ 160.264070][ T5903] usb 4-1: Manufacturer: syz [ 160.264083][ T5903] usb 4-1: SerialNumber: syz [ 160.292197][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.481981][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 160.488481][ T31] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 160.488540][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.488567][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.488589][ T31] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 160.488614][ T31] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 160.488637][ T31] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.488679][ T31] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.488701][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.541069][ T5903] usb 4-1: config 0 descriptor?? [ 160.856936][ T31] usb 2-1: GET_CAPABILITIES returned 0 [ 160.856988][ T31] usbtmc 2-1:16.0: can't read capabilities [ 160.944588][ T5612] Bluetooth: hci2: command tx timeout [ 160.956163][ T5903] appletouch 4-1:0.85: Failed to request geyser raw mode [ 160.956409][ T5903] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 161.123458][ T5903] usb 4-1: USB disconnect, device number 4 [ 161.254094][ T10] usb 2-1: USB disconnect, device number 5 [ 161.382132][ T6145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.739155][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.845256][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 162.295842][ T6669] capability: warning: `syz.3.276' uses 32-bit capabilities (legacy support in use) [ 162.357886][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.548636][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 162.848435][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.022054][ T5612] Bluetooth: hci2: command tx timeout [ 163.092957][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 163.168896][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.349891][ T6145] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.752106][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.952384][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.952641][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.281629][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.283768][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.463461][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.463676][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.463904][ T6584] bridge_slave_0: entered allmulticast mode [ 164.495911][ T6584] bridge_slave_0: entered promiscuous mode [ 164.510777][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.510961][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.511173][ T6584] bridge_slave_1: entered allmulticast mode [ 164.525609][ T6584] bridge_slave_1: entered promiscuous mode [ 165.092422][ T5612] Bluetooth: hci2: command tx timeout [ 165.144949][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.189213][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.648751][ T6584] team0: Port device team_slave_0 added [ 165.704464][ T6584] team0: Port device team_slave_1 added [ 166.047264][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 166.281634][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.281653][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.281680][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.384630][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.384649][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.384679][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.628847][ T13] bridge_slave_1: left allmulticast mode [ 166.628903][ T13] bridge_slave_1: left promiscuous mode [ 166.660151][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.851285][ T13] bridge_slave_0: left allmulticast mode [ 166.851326][ T13] bridge_slave_0: left promiscuous mode [ 166.851596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.863334][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.012088][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 168.017807][ T31] usb 2-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 168.017839][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.021639][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.021673][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.021694][ T31] usb 2-1: Product: syz [ 168.021709][ T31] usb 2-1: Manufacturer: syz [ 168.021724][ T31] usb 2-1: SerialNumber: syz [ 168.126852][ T31] usb 2-1: 0:2 : does not exist [ 168.179550][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.263633][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.289212][ T13] bond0 (unregistering): Released all slaves [ 168.306078][ T31] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 168.417786][ T13] bond1 (unregistering): (slave veth3): Releasing backup interface [ 168.521079][ T13] bond1 (unregistering): Released all slaves [ 168.659842][ T31] usb 2-1: USB disconnect, device number 6 [ 168.756317][ T5980] veth0_vlan: entered promiscuous mode [ 168.871392][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.001418][ T6584] hsr_slave_0: entered promiscuous mode [ 169.021250][ T6584] hsr_slave_1: entered promiscuous mode [ 169.022075][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 169.022099][ T6584] Cannot create hsr debugfs directory [ 169.184465][ T5980] veth1_vlan: entered promiscuous mode [ 170.279072][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 170.279329][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.426647][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 170.475526][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.559331][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.364396][ T13] hsr_slave_0: left promiscuous mode [ 171.402121][ T13] hsr_slave_1: left promiscuous mode [ 171.403304][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.403331][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.453573][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.453613][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.724694][ T13] veth1_macvtap: left promiscuous mode [ 171.724835][ T13] veth0_macvtap: left promiscuous mode [ 171.725121][ T13] veth1_vlan: left promiscuous mode [ 171.725337][ T13] veth0_vlan: left promiscuous mode [ 172.582662][ T13] team0 (unregistering): Port device team_slave_1 removed [ 172.643365][ T13] team0 (unregistering): Port device team_slave_0 removed [ 172.928414][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 173.205512][ T5980] veth0_macvtap: entered promiscuous mode [ 173.845131][ T6145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.882541][ T5980] veth1_macvtap: entered promiscuous mode [ 174.211387][ T10] kernel read not supported for file /audio (pid: 10 comm: kworker/0:1) [ 174.361143][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.527493][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.062277][ T6584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 175.123824][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.128683][ T6584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 175.215940][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.306746][ T6584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 175.407201][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.444686][ T6584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 175.462037][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.617943][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.662139][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 175.668369][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.668429][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.668453][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.722663][ T9] usb 4-1: config 0 descriptor?? [ 175.966218][ T6855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.966969][ T6855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.967673][ T5612] Bluetooth: hci4: Malformed LE Event: 0x0d [ 176.135081][ T5903] usb 4-1: USB disconnect, device number 5 [ 176.476748][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.476771][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.655629][ T3292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.655653][ T3292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.705295][ T6145] veth0_vlan: entered promiscuous mode [ 176.880045][ T6145] veth1_vlan: entered promiscuous mode [ 176.952184][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.207656][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.398022][ T6145] veth0_macvtap: entered promiscuous mode [ 177.588819][ T6145] veth1_macvtap: entered promiscuous mode [ 177.669129][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.918677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.920486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.036901][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.037080][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.088224][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.314815][ T6145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.312011][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 179.479374][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.479920][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480170][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480620][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.493059][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 179.559394][ T10] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 179.559427][ T10] usb 4-1: config 0 has no interface number 0 [ 179.559474][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 179.559501][ T10] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 179.583773][ T10] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 179.583803][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.583822][ T10] usb 4-1: Product: syz [ 179.583835][ T10] usb 4-1: Manufacturer: syz [ 179.583847][ T10] usb 4-1: SerialNumber: syz [ 179.719459][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.002641][ T3421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.004783][ T3421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.260535][ T10] usb 4-1: config 0 descriptor?? [ 180.261614][ T6926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.262882][ T6926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.548365][ T6926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.548512][ T6926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.759773][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 181.106267][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.106287][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.591007][ T10] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.591301][ T10] asix 4-1:0.34: probe with driver asix failed with error -71 [ 181.632856][ T10] usb 4-1: USB disconnect, device number 6 [ 181.810205][ T1372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.810228][ T1372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.219774][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 182.966394][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.186560][ T6584] veth0_vlan: entered promiscuous mode [ 184.199922][ T6584] veth1_vlan: entered promiscuous mode [ 184.349154][ T6584] veth0_macvtap: entered promiscuous mode [ 184.411254][ T6584] veth1_macvtap: entered promiscuous mode [ 184.609562][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.808894][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.023937][ T1372] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.025992][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.062085][ T1012] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.216471][ T1012] usb 6-1: Using ep0 maxpacket: 32 [ 185.236765][ T1012] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.236797][ T1012] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.236822][ T1012] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.250387][ T1012] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 185.250422][ T1012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.250441][ T1012] usb 6-1: Product: syz [ 185.250467][ T1012] usb 6-1: Manufacturer: syz [ 185.250481][ T1012] usb 6-1: SerialNumber: syz [ 185.339323][ T1012] usb 6-1: config 0 descriptor?? [ 185.800574][ T1012] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 185.800626][ T1012] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 186.269583][ T5731] usb 6-1: USB disconnect, device number 2 [ 186.458125][ T31] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 186.832052][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.985052][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.986669][ T5898] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 186.990724][ T5898] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 186.990757][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.990778][ T5898] usb 4-1: Product: syz [ 186.990793][ T5898] usb 4-1: Manufacturer: syz [ 186.990808][ T5898] usb 4-1: SerialNumber: syz [ 187.066920][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 187.093559][ T3421] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.297456][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.370'. [ 187.297497][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.370'. [ 187.406509][ T7055] geneve2: entered promiscuous mode [ 187.421555][ T7055] geneve2: entered allmulticast mode [ 187.634462][ T2942] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.669443][ T3353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.669466][ T3353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.499534][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.499557][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.449632][ T5898] usb 4-1: USB disconnect, device number 7 [ 190.703245][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 191.157101][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.591142][ T7149] tipc: Started in network mode [ 191.591177][ T7149] tipc: Node identity ac14140f, cluster identity 4711 [ 191.789800][ T7149] tipc: New replicast peer: 255.255.255.255 [ 191.944353][ T7149] tipc: Enabled bearer , priority 10 [ 192.636433][ T7158] dvmrp0: entered allmulticast mode [ 192.917659][ T7171] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 193.041419][ T5898] tipc: Node number set to 2886997007 [ 193.213642][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 193.413569][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 193.416440][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.416468][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.416508][ T31] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 193.416533][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.465560][ T7187] process 'syz.7.407' launched './file0' with NULL argv: empty string added [ 193.490009][ T31] usb 6-1: config 0 descriptor?? [ 193.717416][ T31] usb 6-1: USB disconnect, device number 3 [ 194.009647][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'. [ 194.394269][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 194.543017][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543096][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.678741][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.424'. [ 195.679402][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.7.424'. [ 195.679442][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.7.424'. [ 195.786516][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.424'. [ 195.786553][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.424'. [ 197.587175][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 199.087996][ T7321] syz.3.448 (7321) used greatest stack depth: 18736 bytes left [ 199.526127][ T7347] capability: warning: `syz.6.455' uses deprecated v2 capabilities in a way that may be insecure [ 200.202050][ T31] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 200.360964][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.361000][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.361022][ T31] usb 4-1: Product: syz [ 200.361037][ T31] usb 4-1: Manufacturer: syz [ 200.361052][ T31] usb 4-1: SerialNumber: syz [ 200.420806][ T31] usb 4-1: config 0 descriptor?? [ 200.682024][ T31] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 200.832114][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 201.076157][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.076218][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 201.076246][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 201.076273][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 201.076295][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.145946][ T10] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 201.145977][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 201.145998][ T10] usb 8-1: Product: syz [ 201.146013][ T10] usb 8-1: Manufacturer: syz [ 201.146028][ T10] usb 8-1: SerialNumber: syz [ 201.207898][ T10] usb 8-1: config 0 descriptor?? [ 201.302908][ T31] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 201.323690][ T31] usb 4-1: USB disconnect, device number 8 [ 201.433237][ T10] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 201.433267][ T10] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 201.628794][ T10] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 201.628821][ T10] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 201.628840][ T10] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 201.832907][ T10] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 202.436722][ T10] radio-si470x 8-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 202.437133][ T10] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 202.458036][ T10] usb 8-1: USB disconnect, device number 2 [ 204.140518][ T7455] input: syz0 as /devices/virtual/input/input8 [ 204.256196][ T7473] pim6reg1: entered promiscuous mode [ 204.256224][ T7473] pim6reg1: entered allmulticast mode [ 204.375825][ T7455] input: failed to attach handler evdev to device input8, error: -4 [ 204.890211][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 204.890688][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 204.904944][ T7485] binder: 7484:7485 ioctl c0306201 0 returned -14 [ 204.907308][ T31] libceph: connect (1)[c::]:6789 error -101 [ 204.907525][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 204.914325][ T7461] ceph: No mds server is up or the cluster is laggy [ 204.942580][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 204.942771][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 204.998138][ T7465] ceph: No mds server is up or the cluster is laggy [ 205.216410][ T10] libceph: connect (1)[c::]:6789 error -101 [ 205.216626][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 205.303709][ T1012] libceph: connect (1)[c::]:6789 error -101 [ 205.303946][ T1012] libceph: mon0 (1)[c::]:6789 connect error [ 205.474711][ T7492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.474732][ T7492] IPv6: NLM_F_CREATE should be set when creating new route [ 205.687959][ T7493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.622508][ T7516] input: syz1 as /devices/virtual/input/input9 [ 206.703053][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 206.703084][ T7520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 208.255382][ T7559] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 209.479171][ T7584] netlink: 'syz.3.527': attribute type 2 has an invalid length. [ 209.479196][ T7584] netlink: 'syz.3.527': attribute type 8 has an invalid length. [ 209.479209][ T7584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.527'. [ 213.825263][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.001187][ T5873] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.001219][ T5873] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 214.001238][ T5873] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.001286][ T5873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 214.001313][ T5873] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 214.066384][ T5873] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.066418][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.066439][ T5873] usb 6-1: Product: syz [ 214.066454][ T5873] usb 6-1: Manufacturer: syz [ 214.130720][ T5873] cdc_wdm 6-1:1.0: skipping garbage [ 214.130743][ T5873] cdc_wdm 6-1:1.0: skipping garbage [ 214.165507][ T5873] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 214.311412][ T7672] trusted_key: syz.1.551 sent an empty control message without MSG_MORE. [ 214.437196][ T5873] usb 6-1: USB disconnect, device number 4 [ 217.178760][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 217.188467][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 217.697872][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.706061][ T7722] batadv_slave_1: entered promiscuous mode [ 219.996114][ T7769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.244547][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 221.749763][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.584'. [ 222.248792][ T7815] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 222.672129][ T3342] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.672183][ T3342] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.672223][ T3342] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.672260][ T3342] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.732003][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 225.633517][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.5.603'. [ 225.633543][ T7871] bridge: RTM_NEWNEIGH with invalid ether address [ 225.637018][ T7871] netlink: 32 bytes leftover after parsing attributes in process `syz.5.603'. [ 225.637043][ T7871] bridge: RTM_NEWNEIGH with invalid ether address [ 226.544895][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 226.544991][ T10] usb 8-1: no configurations [ 226.545004][ T10] usb 8-1: can't read configurations, error -22 [ 227.332743][ T7895] netlink: 'syz.3.608': attribute type 17 has an invalid length. [ 230.335657][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 230.608084][ T7895] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.761225][ T7895] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.408737][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.622'. [ 231.435203][ T7895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.357710][ T7925] syz_tun: Device is already in use. [ 232.369474][ T7937] warning: `syz.7.621' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.439063][ T7940] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 232.935912][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.628'. [ 232.952097][ T3353] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.956080][ T1034] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.956131][ T1034] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.956166][ T1034] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.047323][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 235.047342][ T36] audit: type=1326 audit(1785707950.116:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8011 comm="syz.1.648" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f06b4447d97 code=0x0 [ 235.452299][ T8029] sctp: [Deprecated]: syz.3.652 (pid 8029) Use of int in max_burst socket option deprecated. [ 235.452299][ T8029] Use struct sctp_assoc_value instead [ 235.835997][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.657'. [ 236.001352][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.6.659'. [ 236.212103][ T5717] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 236.378112][ T5717] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.378146][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.391793][ T5717] usb 2-1: config 0 descriptor?? [ 236.404719][ T5717] cp210x 2-1:0.0: cp210x converter detected [ 236.877213][ T5717] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 237.029183][ T8070] size and base must be multiples of 4 kiB [ 237.029210][ T8070] CPU: 1 UID: 0 PID: 8070 Comm: syz.3.669 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.029241][ T8070] Tainted: [L]=SOFTLOCKUP [ 237.029249][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.029262][ T8070] Call Trace: [ 237.029270][ T8070] [ 237.029282][ T8070] dump_stack_lvl+0xe8/0x150 [ 237.029322][ T8070] mtrr_del+0xc8/0xf0 [ 237.029352][ T8070] mtrr_ioctl+0xcc4/0x13c0 [ 237.029381][ T8070] ? smk_tskacc+0x2fb/0x370 [ 237.029412][ T8070] ? __pfx_mtrr_ioctl+0x10/0x10 [ 237.029439][ T8070] ? smack_file_ioctl+0x263/0x360 [ 237.029477][ T8070] ? __fget_files+0x2a/0x420 [ 237.029499][ T8070] ? __fget_files+0x3a8/0x420 [ 237.029519][ T8070] ? __fget_files+0x2a/0x420 [ 237.029540][ T8070] ? __pfx_mtrr_ioctl+0x10/0x10 [ 237.029569][ T8070] proc_reg_unlocked_ioctl+0x1df/0x2d0 [ 237.029607][ T8070] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 237.029633][ T8070] __se_sys_ioctl+0xff/0x170 [ 237.029662][ T8070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.029684][ T8070] do_syscall_64+0x174/0x580 [ 237.029714][ T8070] ? clear_bhb_loop+0x40/0x90 [ 237.029738][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.029760][ T8070] RIP: 0033:0x7fed2396e019 [ 237.029780][ T8070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.029799][ T8070] RSP: 002b:00007fed21bc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.029831][ T8070] RAX: ffffffffffffffda RBX: 00007fed23bf5fa0 RCX: 00007fed2396e019 [ 237.029848][ T8070] RDX: 0000200000000240 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 237.029863][ T8070] RBP: 00007fed23a0500c R08: 0000000000000000 R09: 0000000000000000 [ 237.029876][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.029889][ T8070] R13: 00007fed23bf6038 R14: 00007fed23bf5fa0 R15: 00007fff059ca398 [ 237.029923][ T8070] [ 237.226672][ T5717] usb 2-1: cp210x converter now attached to ttyUSB0 [ 237.368224][ T5717] usb 2-1: USB disconnect, device number 7 [ 237.610071][ T5717] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.873861][ T5717] cp210x 2-1:0.0: device disconnected [ 238.271964][ T5903] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.454216][ T5903] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.454246][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.455496][ T5903] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.455526][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.455546][ T5903] usb 6-1: SerialNumber: syz [ 238.742040][ T5903] usb 6-1: 0:2 : does not exist [ 238.742163][ T5903] usb 6-1: unit 48 not found! [ 239.024174][ T5903] usb 6-1: USB disconnect, device number 5 [ 239.230101][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.182221][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 240.275703][ T8119] smpboot: CPU 1 is now offline [ 240.402031][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 240.403608][ T5903] usb 7-1: config 0 interface 0 has no altsetting 0 [ 240.403642][ T5903] usb 7-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 240.403660][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.510384][ T5903] usb 7-1: config 0 descriptor?? [ 240.627999][ T8127] bridge0: entered promiscuous mode [ 240.629186][ T8126] bridge0: left promiscuous mode [ 240.916151][ T8122] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 241.111768][ T5903] kye 0003:0458:5019.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 241.112445][ T5903] kye 0003:0458:5019.0004: ignoring exceeding usage max [ 241.307122][ T5903] kye 0003:0458:5019.0004: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.6-1/input0 [ 241.307150][ T5903] kye 0003:0458:5019.0004: tablet-enabling feature report not found [ 241.307160][ T5903] kye 0003:0458:5019.0004: tablet enabling failed [ 241.561436][ T5903] usb 7-1: USB disconnect, device number 2 [ 241.710852][ T8136] fido_id[8136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 241.757781][ T36] audit: type=1326 audit(1785707956.796:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.757841][ T36] audit: type=1326 audit(1785707956.806:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.757894][ T36] audit: type=1326 audit(1785707956.806:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.757943][ T36] audit: type=1326 audit(1785707956.806:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.757997][ T36] audit: type=1326 audit(1785707956.806:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.758045][ T36] audit: type=1326 audit(1785707956.826:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.758104][ T36] audit: type=1326 audit(1785707956.826:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.758151][ T36] audit: type=1326 audit(1785707956.826:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.759277][ T36] audit: type=1326 audit(1785707956.826:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 241.763178][ T36] audit: type=1326 audit(1785707956.826:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.5.697" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2ed0e019 code=0x7ffc0000 [ 242.390055][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 242.583544][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 242.737642][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 242.741617][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.741648][ T31] usb 2-1: config 0 has no interface number 0 [ 242.778217][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.778253][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.778275][ T31] usb 2-1: Product: syz [ 242.778291][ T31] usb 2-1: Manufacturer: syz [ 242.778305][ T31] usb 2-1: SerialNumber: syz [ 242.843571][ T31] usb 2-1: config 0 descriptor?? [ 243.495014][ T5903] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 243.646429][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.646468][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.646509][ T5903] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.646535][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.685574][ T5903] usb 7-1: config 0 descriptor?? [ 243.890466][ T8173] netlink: 136 bytes leftover after parsing attributes in process `syz.5.711'. [ 243.890493][ T8173] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 244.314095][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 244.314130][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 244.319215][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 244.319582][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 244.392959][ T31] usb 2-1: USB disconnect, device number 8 [ 244.975368][ T5903] uclogic 0003:256C:006D.0005: v1 frame probing failed: -71 [ 244.975478][ T5903] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 244.975670][ T5903] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 245.003424][ T5903] usb 7-1: USB disconnect, device number 3 [ 245.507004][ T8188] netlink: 48 bytes leftover after parsing attributes in process `syz.5.716'. [ 245.891700][ T8198] netlink: 27 bytes leftover after parsing attributes in process `syz.3.720'. [ 246.309657][ T8208] tipc: Started in network mode [ 246.309691][ T8208] tipc: Node identity fe1ed3df773d, cluster identity 4711 [ 246.310179][ T8208] tipc: Enabled bearer , priority 10 [ 246.439433][ T8206] tipc: Disabling bearer [ 248.652005][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 248.817574][ T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 248.817609][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.817624][ T9] usb 6-1: Product: syz [ 248.817633][ T9] usb 6-1: Manufacturer: syz [ 248.817642][ T9] usb 6-1: SerialNumber: syz [ 250.142075][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 250.193802][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 250.193867][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 250.193888][ T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 250.251388][ T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 250.339791][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 250.339825][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.417798][ T31] usb 7-1: config 0 descriptor?? [ 250.433439][ T9] usb 6-1: USB disconnect, device number 6 [ 250.494990][ T31] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 250.612590][ T8286] Bluetooth: MGMT ver 1.23 [ 251.127492][ T8298] netlink: 'syz.5.756': attribute type 1 has an invalid length. [ 251.265988][ T31] usb 7-1: USB disconnect, device number 4 [ 251.677280][ T8298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.894116][ T8301] bond1: (slave geneve2): making interface the new active one [ 251.941588][ T8301] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 252.038829][ T8301] syz.5.756 (8301) used greatest stack depth: 15744 bytes left [ 254.766005][ T5605] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 255.221499][ T8394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.323398][ T8397] netlink: 'syz.5.794': attribute type 83 has an invalid length. [ 255.822006][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 255.822026][ T36] audit: type=1326 audit(1785707970.886:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822079][ T36] audit: type=1326 audit(1785707970.886:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822126][ T36] audit: type=1326 audit(1785707970.886:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822171][ T36] audit: type=1326 audit(1785707970.886:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822213][ T36] audit: type=1326 audit(1785707970.886:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822260][ T36] audit: type=1326 audit(1785707970.886:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822307][ T36] audit: type=1326 audit(1785707970.886:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822448][ T36] audit: type=1326 audit(1785707970.886:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822514][ T36] audit: type=1326 audit(1785707970.886:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.822566][ T36] audit: type=1326 audit(1785707970.896:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.3.797" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 255.940083][ T8407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 255.999125][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.999197][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.154557][ T8407] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.561986][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 256.596952][ T8416] netlink: 'syz.7.802': attribute type 7 has an invalid length. [ 256.714609][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.714640][ T31] usb 6-1: config 0 has no interfaces? [ 256.717738][ T31] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 256.717770][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.717790][ T31] usb 6-1: Product: syz [ 256.717805][ T31] usb 6-1: Manufacturer: syz [ 256.717819][ T31] usb 6-1: SerialNumber: syz [ 256.773361][ T31] usb 6-1: config 0 descriptor?? [ 257.681966][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 257.839477][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 257.845212][ T10] usb 4-1: config 0 has no interfaces? [ 257.845251][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 257.845273][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.947571][ T10] usb 4-1: config 0 descriptor?? [ 258.185271][ T5873] usb 4-1: USB disconnect, device number 9 [ 258.588866][ T8458] netlink: 7 bytes leftover after parsing attributes in process `syz.6.817'. [ 259.439802][ T5898] usb 6-1: USB disconnect, device number 7 [ 259.554017][ T8465] gadgetfs: bound to dummy_udc driver [ 259.811459][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 259.869860][ T8488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.828'. [ 260.273185][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 260.276498][ C0] gadgetfs: connected [ 260.276926][ T10] gadgetfs: disconnected [ 260.442322][ C0] gadgetfs: connected [ 260.445408][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 260.445457][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 260.445489][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.558392][ C0] gadgetfs: configuration #1 [ 260.952004][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 261.118154][ T5898] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 261.118185][ T5898] usb 4-1: config 0 has no interface number 0 [ 261.118234][ T5898] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 261.118257][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.142967][ T5898] usb 4-1: config 0 descriptor?? [ 261.174248][ T5898] ums-realtek 4-1:0.4: USB Mass Storage device detected [ 261.205520][ T8465] gadgetfs: suspended from state 3 [ 261.293433][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 261.331999][ T31] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 261.346648][ T5904] usb 1-1: USB disconnect, device number 2 [ 261.393885][ T8465] gadgetfs: disconnected [ 261.507638][ T31] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 261.507673][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.507695][ T31] usb 8-1: Product: syz [ 261.507710][ T31] usb 8-1: Manufacturer: syz [ 261.507734][ T31] usb 8-1: SerialNumber: syz [ 261.910363][ T31] usb 8-1: config 0 descriptor?? [ 261.981381][ T5898] usb 4-1: USB disconnect, device number 10 [ 262.108928][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.841'. [ 262.108956][ T8523] openvswitch: netlink: Flow key attr not present in new flow. [ 262.196872][ T31] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 262.848666][ T8521] batman_adv: batadv0: Adding interface: dummy0 [ 262.848687][ T8521] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.848718][ T8521] batman_adv: batadv0: Interface activated: dummy0 [ 263.648374][ T31] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 263.704764][ T31] usb 8-1: USB disconnect, device number 5 [ 263.802100][ T5717] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 263.804044][ T8522] batadv0: mtu less than device minimum [ 263.951978][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 263.977848][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 263.977881][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.977910][ T5717] usb 2-1: Product: syz [ 263.977924][ T5717] usb 2-1: Manufacturer: syz [ 263.977937][ T5717] usb 2-1: SerialNumber: syz [ 264.016002][ T5717] usb 2-1: config 0 descriptor?? [ 264.044699][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.127506][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.145884][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.171672][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.225109][ T5717] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.247251][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.284467][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.305971][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.368326][ T8522] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.636141][ T5717] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 264.692231][ T5717] usb 2-1: USB disconnect, device number 9 [ 267.717518][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 268.552640][ T8642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.793841][ T8680] netlink: 'syz.3.896': attribute type 2 has an invalid length. [ 269.793867][ T8680] netlink: 1279 bytes leftover after parsing attributes in process `syz.3.896'. [ 270.292065][ T5717] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 270.402461][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 270.461957][ T5717] usb 7-1: Using ep0 maxpacket: 16 [ 270.466147][ T5717] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 270.469961][ T5717] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 270.469995][ T5717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.470016][ T5717] usb 7-1: Product: syz [ 270.470031][ T5717] usb 7-1: Manufacturer: syz [ 270.470046][ T5717] usb 7-1: SerialNumber: syz [ 270.524181][ T5717] usb 7-1: config 0 descriptor?? [ 270.529765][ T5717] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 270.557592][ T5717] usb 7-1: Detected FT232R [ 270.730597][ T5717] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 271.082034][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 271.120912][ T5717] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 271.232059][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 271.267427][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 271.267461][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.267475][ T10] usb 6-1: Product: syz [ 271.267484][ T10] usb 6-1: Manufacturer: syz [ 271.267492][ T10] usb 6-1: SerialNumber: syz [ 271.854595][ T5904] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 272.059009][ T5904] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.059282][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.059305][ T5904] usb 8-1: Product: syz [ 272.059320][ T5904] usb 8-1: Manufacturer: syz [ 272.059335][ T5904] usb 8-1: SerialNumber: syz [ 272.179479][ T5898] usb 7-1: USB disconnect, device number 5 [ 272.968795][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 273.082241][ T10] usb 6-1: USB disconnect, device number 8 [ 273.937615][ T5903] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.966812][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 273.967842][ T5898] ftdi_sio 7-1:0.0: device disconnected [ 276.290125][ T5898] usb 8-1: USB disconnect, device number 6 [ 276.340020][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 276.415481][ T5903] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 276.453925][ T8731] kthread_run failed with err -4 [ 276.502257][ T5903] ath9k_htc: Failed to initialize the device [ 276.544043][ T5898] usb 8-1: ath9k_htc: USB layer deinitialized [ 276.743758][ T8753] binder: 8752:8753 ioctl c0306201 0 returned -14 [ 277.352030][ T5717] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 277.515294][ T5717] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.515354][ T5717] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.515398][ T5717] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 277.515423][ T5717] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.741196][ T5717] as10x_usb: device has been detected [ 277.763738][ T5717] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 278.343751][ T8776] gadgetfs: bound to dummy_udc driver [ 278.477983][ T5717] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 278.653790][ T5903] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 278.654069][ C0] gadgetfs: connected [ 278.654295][ T5903] gadgetfs: disconnected [ 279.544884][ T5873] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.566124][ T5717] as10x_usb: error during firmware upload part1 [ 279.566857][ T5717] Registered device Abilis Systems DVB-Titan [ 279.689291][ T5717] usb 8-1: USB disconnect, device number 7 [ 279.701977][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 279.728545][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.731749][ T5873] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.731783][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.731803][ T5873] usb 7-1: Product: syz [ 279.747578][ T5873] usb 7-1: Manufacturer: syz [ 279.747603][ T5873] usb 7-1: SerialNumber: syz [ 279.829493][ T5873] usb 7-1: config 0 descriptor?? [ 279.862017][ T5873] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.862065][ T5873] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 280.184677][ T5717] Unregistered device Abilis Systems DVB-Titan [ 280.221268][ T5717] as10x_usb: device has been disconnected [ 280.464782][ T5873] em28xx 7-1:0.0: chip ID is em2765 [ 280.602969][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.7.946'. [ 281.686641][ T8835] kvm: apic: phys broadcast and lowest prio [ 281.711967][ T5873] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 281.712012][ T5873] em28xx 7-1:0.0: board has no eeprom [ 281.721653][ T8841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.851940][ T5873] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 281.851973][ T5873] em28xx 7-1:0.0: dvb set to bulk mode. [ 281.852319][ T5717] em28xx 7-1:0.0: Binding DVB extension [ 281.949654][ T5873] usb 7-1: USB disconnect, device number 6 [ 281.973847][ T5873] em28xx 7-1:0.0: Disconnecting em28xx [ 282.222674][ T5717] em28xx 7-1:0.0: Registering input extension [ 282.224899][ T5873] em28xx 7-1:0.0: Closing input extension [ 283.651996][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 284.008192][ T5873] em28xx 7-1:0.0: Freeing device [ 284.037054][ T8877] netlink: 156 bytes leftover after parsing attributes in process `syz.7.966'. [ 284.157005][ T8881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.966'. [ 284.821424][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 285.065064][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 285.072162][ T9] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 285.072190][ T9] usb 6-1: config 0 has no interface number 0 [ 285.072236][ T9] usb 6-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 285.072260][ T9] usb 6-1: config 0 interface 89 has no altsetting 0 [ 285.086327][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 285.086357][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.086384][ T9] usb 6-1: Product: syz [ 285.086397][ T9] usb 6-1: Manufacturer: syz [ 285.086411][ T9] usb 6-1: SerialNumber: syz [ 285.116625][ T9] usb 6-1: config 0 descriptor?? [ 285.188105][ T9] em28xx 6-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 285.188148][ T9] em28xx 6-1:0.89: Video interface 89 found: [ 285.743029][ T9] em28xx 6-1:0.89: unknown em28xx chip ID (0) [ 286.362013][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 286.532207][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 286.574097][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.574135][ T5903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.574178][ T5903] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 286.574203][ T5903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.649284][ T5903] usb 7-1: config 0 descriptor?? [ 286.716114][ T5903] hub 7-1:0.0: USB hub found [ 286.881989][ T5903] hub 7-1:0.0: 1 port detected [ 286.908767][ T9] em28xx 6-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 286.908858][ T9] em28xx 6-1:0.89: board has no eeprom [ 286.961980][ T9] em28xx 6-1:0.89: Identified as Terratec Grabby (card=67) [ 286.962014][ T9] em28xx 6-1:0.89: analog set to bulk mode. [ 287.153485][ T9] usb 6-1: USB disconnect, device number 9 [ 287.156423][ T9] em28xx 6-1:0.89: Disconnecting em28xx [ 287.160847][ T10] em28xx 6-1:0.89: Registering V4L2 extension [ 287.395436][ T10] em28xx 6-1:0.89: Config register raw data: 0xffffffed [ 287.395465][ T10] em28xx 6-1:0.89: AC97 chip type couldn't be determined [ 287.395478][ T10] em28xx 6-1:0.89: No AC97 audio processor [ 288.025680][ T10] usb 6-1: Decoder not found [ 288.025703][ T10] em28xx 6-1:0.89: failed to create media graph [ 288.025787][ T10] em28xx 6-1:0.89: V4L2 device video103 deregistered [ 288.297398][ T5898] hub 7-1:0.0: activate --> -90 [ 288.450977][ T10] em28xx 6-1:0.89: Registering snapshot button... [ 288.534297][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.841996][ T5903] usb 7-1.1: new full-speed USB device number 8 using dummy_hcd [ 288.842018][ T5903] usb 7-1.1: parent hub has no TT [ 288.842295][ T5903] usb 7-1-port1: cannot disable (err = -71) [ 288.842638][ T5903] usb 7-1-port1: cannot reset (err = -71) [ 288.842890][ T5903] usb 7-1-port1: cannot reset (err = -71) [ 288.843065][ T5903] usb 7-1-port1: Cannot enable. Maybe the USB cable is bad? [ 288.843329][ T5903] usb 7-1-port1: cannot disable (err = -71) [ 288.843367][ T5903] usb 7-1-port1: attempt power cycle [ 288.950314][ T200] usb 7-1: USB disconnect, device number 7 [ 289.135496][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.89/input/input11 [ 289.542034][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.992'. [ 289.597174][ T10] em28xx 6-1:0.89: Remote control support is not available for this card. [ 289.597244][ T9] em28xx 6-1:0.89: Closing input extension [ 289.617282][ T9] em28xx 6-1:0.89: Deregistering snapshot button [ 290.874462][ T9] em28xx 6-1:0.89: Freeing device [ 291.022260][ T200] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 291.049393][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 291.049413][ T36] audit: type=1326 audit(1785708006.116:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.050488][ T36] audit: type=1326 audit(1785708006.116:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.050791][ T36] audit: type=1326 audit(1785708006.116:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.051039][ T36] audit: type=1326 audit(1785708006.116:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.051595][ T36] audit: type=1326 audit(1785708006.116:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.051646][ T36] audit: type=1326 audit(1785708006.116:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.054332][ T36] audit: type=1326 audit(1785708006.126:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.056784][ T36] audit: type=1326 audit(1785708006.126:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.056830][ T36] audit: type=1326 audit(1785708006.126:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.059289][ T36] audit: type=1326 audit(1785708006.126:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8988 comm="syz.1.1006" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f06b444e019 code=0x7ffc0000 [ 291.183855][ T200] usb 8-1: Using ep0 maxpacket: 16 [ 291.190490][ T200] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.190546][ T200] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 291.190588][ T200] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.190610][ T200] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.287070][ T200] usb 8-1: config 0 descriptor?? [ 291.409957][ T200] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 292.396732][ T9015] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 292.446777][ T9018] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 292.863880][ T5873] usb 8-1: USB disconnect, device number 8 [ 294.631964][ T5873] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.744917][ T9067] i2c i2c-0: delete_device: Can't parse I2C address [ 294.790154][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.790209][ T5873] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.790234][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.828340][ T5873] usb 4-1: config 0 descriptor?? [ 295.109629][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 295.109773][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 295.140153][ T5873] usb 4-1: USB disconnect, device number 11 [ 295.722529][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 295.731765][ T9089] netlink: 'syz.7.1044': attribute type 11 has an invalid length. [ 295.907589][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.907645][ T5873] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 295.907670][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.951461][ T5873] usb 4-1: config 0 descriptor?? [ 296.569754][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.570440][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.776606][ T5873] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 296.996552][ T5873] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12 [ 297.574534][ T200] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 297.724672][ T200] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 297.724708][ T200] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.798553][ T200] usb 6-1: config 0 descriptor?? [ 297.842296][ T200] cp210x 6-1:0.0: cp210x converter detected [ 298.459652][ T200] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 298.585962][ T9130] net_ratelimit: 11 callbacks suppressed [ 298.585985][ T9130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.634753][ T200] usb 6-1: cp210x converter now attached to ttyUSB0 [ 298.910520][ T5702] usb 6-1: USB disconnect, device number 10 [ 299.275105][ T5873] usb 4-1: USB disconnect, device number 12 [ 299.275241][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 299.301105][ T5702] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 299.307652][ T5702] cp210x 6-1:0.0: device disconnected [ 301.216227][ T9166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.284704][ T9170] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 301.750585][ T9173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.122434][ T9166] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 302.122745][ T9166] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 302.456325][ T9187] comedi comedi0: Minor 3 could not be opened [ 303.194569][ T9196] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 304.725327][ T9225] netlink: 'syz.6.1091': attribute type 1 has an invalid length. [ 305.158203][ T9225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.607476][ T9228] gretap1: entered promiscuous mode [ 305.658531][ T9228] bond1: (slave gretap1): making interface the new active one [ 306.027260][ T9228] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 306.221849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 307.443308][ T9257] input: syz0 as /devices/virtual/input/input13 [ 311.293479][ T42] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 311.401998][ T200] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 311.552002][ T200] usb 8-1: Using ep0 maxpacket: 16 [ 311.554421][ T42] usb 7-1: not running at top speed; connect to a high speed hub [ 311.555188][ T200] usb 8-1: unable to get BOS descriptor or descriptor too short [ 311.556754][ T200] usb 8-1: config 127 has an invalid interface number: 16 but max is 0 [ 311.556779][ T200] usb 8-1: config 127 has no interface number 0 [ 311.556812][ T200] usb 8-1: config 127 interface 16 has no altsetting 0 [ 311.557480][ T42] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.557528][ T42] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 311.557549][ T42] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 311.563987][ T42] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 311.564016][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 311.564035][ T42] usb 7-1: Product: syz [ 311.564048][ T42] usb 7-1: Manufacturer: syz [ 311.719437][ T200] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 311.719471][ T200] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.719494][ T200] usb 8-1: Product: syz [ 311.719508][ T200] usb 8-1: Manufacturer: syz [ 311.719523][ T200] usb 8-1: SerialNumber: syz [ 311.838540][ T42] sisusb 7-1:1.0: Invalid USB2VGA device [ 311.862387][ T42] sisusb 7-1:1.0: probe with driver sisusb failed with error -22 [ 312.160271][ T200] usb_ehset_test 8-1:127.16: probe with driver usb_ehset_test failed with error -32 [ 312.222358][ T200] usb 8-1: USB disconnect, device number 9 [ 312.572064][ T200] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 312.693718][ T5612] Bluetooth: hci4: command 0x0406 tx timeout [ 312.697106][ T5702] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 312.697133][ T5702] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 312.758002][ T200] usb 8-1: unable to get BOS descriptor or descriptor too short [ 312.758576][ T200] usb 8-1: not running at top speed; connect to a high speed hub [ 312.760130][ T200] usb 8-1: config 127 has an invalid interface number: 16 but max is 0 [ 312.760154][ T200] usb 8-1: config 127 has no interface number 0 [ 312.760183][ T200] usb 8-1: config 127 interface 16 has no altsetting 0 [ 312.831208][ T200] usb 8-1: string descriptor 0 read error: -22 [ 312.831368][ T200] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=70.8a [ 312.831394][ T200] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.905473][ T200] usb_ehset_test 8-1:127.16: probe with driver usb_ehset_test failed with error -32 [ 313.184302][ T5731] usb 7-1: USB disconnect, device number 12 [ 313.320795][ T9] usb 8-1: USB disconnect, device number 10 [ 314.378405][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 315.971950][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 315.975005][ T5702] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 315.975028][ T5702] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 317.428898][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.428980][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.092295][ T9] IPVS: starting estimator thread 0... [ 318.182061][ T9461] IPVS: using max 8 ests per chain, 19200 per kthread [ 318.731960][ T5873] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 318.884109][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 318.886651][ T5873] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 318.886681][ T5873] usb 8-1: config 0 has no interface number 0 [ 318.886733][ T5873] usb 8-1: config 0 interface 12 has no altsetting 0 [ 318.935431][ T5873] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 318.935464][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.935486][ T5873] usb 8-1: Product: syz [ 318.935500][ T5873] usb 8-1: Manufacturer: syz [ 318.935515][ T5873] usb 8-1: SerialNumber: syz [ 318.984374][ T5873] usb 8-1: config 0 descriptor?? [ 320.212050][ T5605] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.231875][ T5702] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 320.231902][ T5702] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 320.894768][ T5873] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 320.894830][ T5873] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 320.894847][ T5873] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 320.894966][ T5873] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 322.071900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 322.133720][ T5873] usb 8-1: USB disconnect, device number 11 [ 322.618761][ T5702] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 322.618790][ T5702] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 322.691952][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 323.073956][ T5873] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 323.258058][ T5873] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 323.258093][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.024747][ T5873] cxacru_cm: 22 callbacks suppressed [ 324.024930][ T5873] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 324.024953][ T5873] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 324.024967][ T5873] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 324.100121][ T5873] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 324.314096][ T5873] usb 2-1: USB disconnect, device number 10 [ 325.011986][ T5605] Bluetooth: hci2: command 0x0406 tx timeout [ 325.166052][ T5702] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 325.166156][ T5702] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 330.240411][ T36] audit: type=1326 audit(1785708045.306:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.240476][ T36] audit: type=1326 audit(1785708045.306:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.307615][ T36] audit: type=1326 audit(1785708045.376:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.307679][ T36] audit: type=1326 audit(1785708045.376:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.307726][ T36] audit: type=1326 audit(1785708045.376:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.311697][ T36] audit: type=1326 audit(1785708045.376:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.327967][ T36] audit: type=1326 audit(1785708045.396:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.328025][ T36] audit: type=1326 audit(1785708045.396:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.328068][ T36] audit: type=1326 audit(1785708045.396:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 330.328109][ T36] audit: type=1326 audit(1785708045.396:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9683 comm="syz.3.1219" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 332.452063][ T31] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 332.635833][ T31] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 332.635871][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.694086][ T31] usb 7-1: config 0 descriptor?? [ 332.895011][ T9735] binder: 9734:9735 ioctl c0306201 200000000080 returned -14 [ 332.969404][ T9735] binder: 9734:9735 ioctl c0306201 2000000003c0 returned -14 [ 333.926987][ T9748] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 333.949210][ T31] usb 7-1: Cannot set autoneg [ 333.949497][ T31] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 333.993372][ T31] usb 7-1: USB disconnect, device number 13 [ 337.482008][ T5731] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 337.632096][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 337.636530][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.636561][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.674547][ T5731] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 337.674584][ T5731] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.674607][ T5731] usb 2-1: Product: syz [ 337.674622][ T5731] usb 2-1: Manufacturer: syz [ 337.674638][ T5731] usb 2-1: SerialNumber: syz [ 337.842860][ T5731] usb 2-1: 0:2 : does not exist [ 337.953941][ T5731] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 338.403761][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 338.529884][ T5731] usb 2-1: USB disconnect, device number 11 [ 338.572983][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 338.575634][ T10] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 338.575665][ T10] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 338.575688][ T10] usb 6-1: config 0 has no interface number 0 [ 338.575735][ T10] usb 6-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.579966][ T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 338.579998][ T10] usb 6-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 338.580021][ T10] usb 6-1: Product: syz [ 338.580035][ T10] usb 6-1: Manufacturer: syz [ 338.977543][ T9828] binder: 9827:9828 ioctl c0306201 0 returned -14 [ 339.563258][ T10] usb 6-1: config 0 descriptor?? [ 340.361913][ T5731] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 340.413674][ T5702] usb 6-1: USB disconnect, device number 11 [ 340.512287][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 340.516792][ T5731] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 340.516823][ T5731] usb 4-1: config 0 has no interface number 0 [ 340.516875][ T5731] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 340.516902][ T5731] usb 4-1: config 0 interface 184 has no altsetting 0 [ 340.572969][ T5731] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 340.573004][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.573025][ T5731] usb 4-1: Product: syz [ 340.573041][ T5731] usb 4-1: Manufacturer: syz [ 340.573056][ T5731] usb 4-1: SerialNumber: syz [ 340.618138][ T5731] usb 4-1: config 0 descriptor?? [ 340.619239][ T9840] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 340.855438][ T9840] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.165383][ T9848] netlink: 'syz.5.1274': attribute type 10 has an invalid length. [ 341.165409][ T9848] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1274'. [ 341.266843][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 341.266878][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 343.046656][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 343.046692][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 343.046713][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 343.046731][ T5731] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 343.047065][ T5731] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 343.136133][ T5731] usb 4-1: USB disconnect, device number 13 [ 344.100027][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1284'. [ 344.102011][ T5702] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 344.273663][ T5702] usb 4-1: Using ep0 maxpacket: 16 [ 344.296328][ T5702] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 344.296362][ T5702] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.296384][ T5702] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.296404][ T5702] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 344.296424][ T5702] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 344.296446][ T5702] usb 4-1: config 0 has no interface number 0 [ 344.296506][ T5702] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 344.296535][ T5702] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 344.296560][ T5702] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.296598][ T5702] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.296629][ T5702] usb 4-1: config 0 interface 125 has no altsetting 0 [ 344.296648][ T5702] usb 4-1: config 0 interface 125 has no altsetting 2 [ 344.300057][ T5702] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 344.300089][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.300111][ T5702] usb 4-1: Product: syz [ 344.300126][ T5702] usb 4-1: Manufacturer: syz [ 344.300143][ T5702] usb 4-1: SerialNumber: syz [ 344.371496][ T5702] usb 4-1: config 0 descriptor?? [ 344.486393][ T5702] usb 4-1: selecting invalid altsetting 2 [ 345.654008][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.654692][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.817297][ T5702] get_1284_register timeout [ 345.865569][ C1] usb 4-1: async_complete: urb error -71 [ 345.874416][ C1] usb 4-1: async_complete: urb error -104 [ 345.874526][ C1] usb 4-1: async_complete: urb error -104 [ 345.874632][ C1] usb 4-1: async_complete: urb error -104 [ 345.874760][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 346.053632][ T5702] usb 4-1: USB disconnect, device number 14 [ 346.283721][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 346.431960][ T5731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 346.477644][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.477675][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.477692][ T10] usb 6-1: Product: syz [ 346.477705][ T10] usb 6-1: Manufacturer: syz [ 346.477719][ T10] usb 6-1: SerialNumber: syz [ 346.524628][ T10] usb 6-1: config 0 descriptor?? [ 346.612954][ T5731] usb 2-1: Using ep0 maxpacket: 16 [ 346.637517][ T5731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.637558][ T5731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.664435][ T5731] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 346.664469][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.664550][ T5731] usb 2-1: SerialNumber: syz [ 346.802848][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.839587][ T5731] usb 2-1: 0:2 : does not exist [ 347.075606][ T9902] syzkaller1: entered promiscuous mode [ 347.075714][ T9902] syzkaller1: entered allmulticast mode [ 347.292853][ T5731] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 347.292944][ T5731] usb 2-1: Warning! Unlikely big volume step count (=18971), linear volume or wrong cval->res? [ 347.292965][ T5731] usb 2-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/18971/1 [ 347.301262][ T5731] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 347.487428][ T5731] usb 2-1: USB disconnect, device number 12 [ 348.171967][ T9913] input: syz0 as /devices/virtual/input/input14 [ 348.309586][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 348.558083][ T10] usb 6-1: USB disconnect, device number 12 [ 348.610335][ T9906] sctp: [Deprecated]: syz.7.1293 (pid 9906) Use of int in max_burst socket option. [ 348.610335][ T9906] Use struct sctp_assoc_value instead [ 350.406323][ T9927] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 350.694782][ T9930] macvtap1: entered promiscuous mode [ 350.694821][ T9930] macvtap1: entered allmulticast mode [ 350.695455][ T9930] veth1_to_bridge: entered promiscuous mode [ 350.695476][ T9930] veth1_to_bridge: entered allmulticast mode [ 350.796314][ T9930] team0: Device macvtap1 failed to register rx_handler [ 350.947338][ T9930] veth1_to_bridge: left allmulticast mode [ 350.947652][ T9930] veth1_to_bridge: left promiscuous mode [ 351.816391][ T9948] input: syz1 as /devices/virtual/input/input15 [ 362.046481][T10058] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 362.333525][T10056] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 362.334768][T10056] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 362.334878][T10056] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 362.334968][T10056] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 362.334988][T10056] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 362.335005][T10056] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 362.335366][T10056] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 362.335468][T10056] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 362.335494][T10056] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 363.467060][T10083] Invalid argument reading file caps for ./file0 [ 367.738601][T10115] syzkaller0: entered promiscuous mode [ 367.738631][T10115] syzkaller0: entered allmulticast mode [ 367.878714][T10115] tipc: Started in network mode [ 367.878750][T10115] tipc: Node identity 260917a9cb24, cluster identity 4711 [ 367.879308][T10115] tipc: Enabled bearer , priority 0 [ 368.081820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 368.125399][T10116] tipc: Resetting bearer [ 368.570543][T10120] netlink: zone id is out of range [ 368.570799][T10120] netlink: zone id is out of range [ 368.734365][T10120] netlink: zone id is out of range [ 368.776004][T10116] tipc: Disabling bearer [ 368.781164][T10120] netlink: zone id is out of range [ 368.870466][T10120] netlink: zone id is out of range [ 368.870700][T10120] netlink: zone id is out of range [ 368.870735][T10120] netlink: zone id is out of range [ 368.884978][T10120] netlink: zone id is out of range [ 368.885144][T10120] netlink: zone id is out of range [ 368.885414][T10120] netlink: zone id is out of range [ 369.467135][ T5873] tipc: Node number set to 3979155369 [ 373.581814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 373.720385][T10142] syzkaller0: entered promiscuous mode [ 373.881813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 374.001808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 374.061806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 374.121808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 374.181812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 376.608043][T10173] futex_wake_op: syz.6.1379 tries to shift op by 144; fix this program [ 378.294148][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 378.294181][ T36] audit: type=1326 audit(1785708092.327:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.294384][ T36] audit: type=1326 audit(1785708092.337:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.294494][ T36] audit: type=1326 audit(1785708092.337:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.294598][ T36] audit: type=1326 audit(1785708092.337:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.294774][ T36] audit: type=1326 audit(1785708092.357:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.303011][ T36] audit: type=1326 audit(1785708092.367:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2392e84e code=0x7ffc0000 [ 378.305687][ T36] audit: type=1326 audit(1785708092.377:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 378.389471][ T36] audit: type=1326 audit(1785708092.457:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2392e84e code=0x7ffc0000 [ 378.547095][ T36] audit: type=1326 audit(1785708092.467:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2392e84e code=0x7ffc0000 [ 378.547210][ T36] audit: type=1326 audit(1785708092.477:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10185 comm="syz.3.1383" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2392e84e code=0x7ffc0000 [ 379.730400][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.730450][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.400736][T10198] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1387'. [ 381.385022][T10207] netlink: 'syz.6.1388': attribute type 11 has an invalid length. [ 383.471843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 384.788670][T10226] net_ratelimit: 9 callbacks suppressed [ 384.788753][T10226] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 391.588646][T10289] netlink: 132732 bytes leftover after parsing attributes in process `syz.3.1410'. [ 392.068248][T10301] tipc: Started in network mode [ 392.068274][T10301] tipc: Node identity 2007ff, cluster identity 4711 [ 392.068289][T10301] tipc: Node number set to 2099199 [ 394.291971][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 394.751927][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 394.978772][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 394.979905][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 394.979943][ T9] usb 7-1: can't read configurations, error -71 [ 395.151931][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 395.315179][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.315244][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 395.315269][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.336203][ T31] usb 4-1: config 0 descriptor?? [ 395.388883][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 395.570289][ T31] pwc: send_video_command error -71 [ 395.570312][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 395.570433][ T31] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 395.587941][ T31] usb 4-1: USB disconnect, device number 15 [ 396.834850][ T42] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 396.994871][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 396.994937][ T42] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 396.994963][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.184327][ T42] usb 4-1: config 0 descriptor?? [ 397.191036][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 397.939008][T10344] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 398.115391][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.199192][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.217460][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.220145][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.261787][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.266713][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.303165][ T42] pwc: recv_control_msg error -71 req 02 val 2b00 [ 398.339965][ T42] pwc: recv_control_msg error -71 req 02 val 2700 [ 398.340620][ T42] pwc: recv_control_msg error -71 req 02 val 2c00 [ 398.341150][ T42] pwc: recv_control_msg error -71 req 04 val 1000 [ 398.369081][ T42] pwc: recv_control_msg error -71 req 04 val 1300 [ 398.371155][ T42] pwc: recv_control_msg error -71 req 04 val 1400 [ 398.371738][ T42] pwc: recv_control_msg error -71 req 02 val 2000 [ 398.396231][ T42] pwc: recv_control_msg error -71 req 02 val 2100 [ 398.396915][ T42] pwc: recv_control_msg error -71 req 04 val 1500 [ 398.397609][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 398.398284][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 398.398930][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 398.399453][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 398.400083][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 398.400963][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 398.401597][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 398.447315][T10347] overlayfs: failed to clone upperpath [ 398.585613][ T42] pwc: Registered as video103. [ 398.605091][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 398.642669][ T42] usb 4-1: USB disconnect, device number 16 [ 398.698648][T10349] overlayfs: failed to clone lowerpath [ 398.948173][T10351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.000553][T10352] dummy_hcd dummy_hcd.0: remove, state 4 [ 399.079388][T10352] usb usb1: USB disconnect, device number 1 [ 401.717736][T10352] dummy_hcd dummy_hcd.0: stopped [ 401.717764][T10352] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 401.873958][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 404.871984][ T200] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 405.021970][ T200] usb 2-1: Using ep0 maxpacket: 16 [ 405.024562][ T200] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 405.052013][ T200] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 405.052036][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.052048][ T200] usb 2-1: Product: syz [ 405.052063][ T200] usb 2-1: Manufacturer: syz [ 405.052072][ T200] usb 2-1: SerialNumber: syz [ 406.310589][ T200] r8152-cfgselector 2-1: Unknown version 0x0000 [ 406.310619][ T200] r8152-cfgselector 2-1: config 0 descriptor?? [ 406.849762][ T200] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 413.966892][T10444] tipc: Enabled bearer , priority 0 [ 414.008289][T10443] syzkaller0: entered promiscuous mode [ 414.008317][T10443] syzkaller0: entered allmulticast mode [ 414.388842][T10434] tipc: Resetting bearer [ 414.744165][T10434] tipc: Disabling bearer [ 417.030482][ T5904] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 417.198726][ T5904] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 417.198752][ T5904] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 417.198769][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 417.200742][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 417.200760][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 417.200773][ T5904] usb 4-1: Product: syz [ 417.200781][ T5904] usb 4-1: Manufacturer: syz [ 417.200790][ T5904] usb 4-1: SerialNumber: syz [ 417.284832][ T5904] usb 4-1: config 0 descriptor?? [ 417.319617][ T5904] usb 4-1: selecting invalid altsetting 0 [ 418.855266][ T5904] usb 4-1: USB disconnect, device number 17 [ 420.879412][T10474] udevd[10474]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 422.162045][ T5717] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 422.342104][ T5717] usb 2-1: Using ep0 maxpacket: 8 [ 422.344891][ T5717] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 422.344922][ T5717] usb 2-1: config 179 has no interface number 0 [ 422.344981][ T5717] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 422.345012][ T5717] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 422.345077][ T5717] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 422.345202][ T5717] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.345229][ T5717] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 422.345258][ T5717] usb 2-1: config 179 interface 65 has no altsetting 0 [ 422.345294][ T5717] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 422.345317][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.627489][ T5717] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 426.820952][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 426.821361][ T5717] usb 2-1: USB disconnect, device number 14 [ 427.350547][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 435.483970][T10607] netlink: 'syz.6.1495': attribute type 10 has an invalid length. [ 436.665571][T10607] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 438.589337][T10626] tipc: Started in network mode [ 438.589374][T10626] tipc: Node identity 0010000000000000002, cluster identity 1 [ 440.331410][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.331493][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.516966][T10719] netlink: 'syz.7.1522': attribute type 13 has an invalid length. [ 452.750992][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 452.751015][ T36] audit: type=1326 audit(1785708166.817:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.751150][ T36] audit: type=1326 audit(1785708166.817:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.824233][ T36] audit: type=1326 audit(1785708166.887:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.824301][ T36] audit: type=1326 audit(1785708166.887:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.830799][ T36] audit: type=1326 audit(1785708166.897:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.831932][ T36] audit: type=1326 audit(1785708166.897:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.831984][ T36] audit: type=1326 audit(1785708166.897:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.832026][ T36] audit: type=1326 audit(1785708166.897:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.832285][ T36] audit: type=1326 audit(1785708166.907:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 452.883863][ T36] audit: type=1326 audit(1785708166.957:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10735 comm="syz.3.1525" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed2396e019 code=0x7ffc0000 [ 454.196986][T10742] program syz.5.1526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.987889][T10787] syzkaller0: entered promiscuous mode [ 460.987909][T10787] syzkaller0: entered allmulticast mode [ 464.682027][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 464.682049][ T36] audit: type=1326 audit(1785708178.747:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.7.1549" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a70a4e019 code=0x0 [ 464.864309][T10853] mmap: syz.5.1550 (10853) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 472.828721][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 472.828741][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 472.859967][T10894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1559'. [ 491.724077][T10986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.782056][ T5702] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 495.934286][ T5702] usb 2-1: Using ep0 maxpacket: 8 [ 495.937439][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 495.939009][ T5702] usb 2-1: config 6 has an invalid interface number: 212 but max is 0 [ 495.939036][ T5702] usb 2-1: config 6 has no interface number 0 [ 495.939070][ T5702] usb 2-1: config 6 interface 212 has no altsetting 0 [ 495.980041][ T5702] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51 [ 495.980077][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.980099][ T5702] usb 2-1: Product: syz [ 495.980114][ T5702] usb 2-1: Manufacturer: syz [ 495.980129][ T5702] usb 2-1: SerialNumber: syz [ 496.833804][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1588'. [ 497.031060][ T5702] gspca_main: konica-2.14.0 probing 04c8:0720 [ 500.703429][ T36] audit: type=1800 audit(1785708214.727:333): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1598" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 501.738800][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.738874][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.786259][T11040] gadgetfs: bound to dummy_udc driver [ 501.786315][T11040] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 501.786448][T11040] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 501.786525][T11040] CPU: 1 UID: 0 PID: 11040 Comm: syz.1.1601 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 501.786557][T11040] Tainted: [L]=SOFTLOCKUP [ 501.786566][T11040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 501.786579][T11040] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 501.786759][T11040] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 95 12 98 fa eb 0c e8 8e 12 98 fa eb 05 e8 87 12 98 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 01 86 01 fb 4d 8b 36 4c 89 f7 e8 [ 501.786778][T11040] RSP: 0018:ffffc9000157f850 EFLAGS: 00010246 [ 501.786823][T11040] RAX: 0000000000000000 RBX: ffffffff8efd0100 RCX: 0000000000080000 [ 501.786838][T11040] RDX: ffffc90006761000 RSI: 0000000000001d5f RDI: 0000000000001d60 [ 501.786853][T11040] RBP: ffff88802aa76000 R08: ffff8880274e1f00 R09: 0000000000000004 [ 501.786868][T11040] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 501.786881][T11040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 501.786893][T11040] FS: 00007f06b26a66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 501.786912][T11040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.786925][T11040] CR2: 00007f2a6ec85d58 CR3: 000000005a5e4000 CR4: 00000000003526f0 [ 501.786944][T11040] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 501.786959][T11040] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 501.786972][T11040] Call Trace: [ 501.787009][T11040] [ 501.787060][T11040] ? __pfx_dummy_udc_start+0x10/0x10 [ 501.787127][T11040] gadget_bind_driver+0x3a8/0x9e0 [ 501.787186][T11040] ? __pfx_gadget_bind_driver+0x10/0x10 [ 501.787215][T11040] really_probe+0x254/0xae0 [ 501.787333][T11040] __driver_probe_device+0x1e8/0x360 [ 501.787365][T11040] driver_probe_device+0x4f/0x240 [ 501.787397][T11040] __driver_attach+0x339/0x600 [ 501.787428][T11040] bus_for_each_dev+0x23e/0x2c0 [ 501.787450][T11040] ? __pfx___driver_attach+0x10/0x10 [ 501.787480][T11040] ? __pfx_bus_for_each_dev+0x10/0x10 [ 501.787502][T11040] ? rt_spin_unlock+0x157/0x200 [ 501.787594][T11040] ? rt_spin_unlock+0x163/0x200 [ 501.787615][T11040] bus_add_driver+0x348/0x670 [ 501.787640][T11040] driver_register+0x23a/0x320 [ 501.787659][T11040] usb_gadget_register_driver_owner+0xf9/0x270 [ 501.787691][T11040] dev_config+0xe4e/0x12c0 [ 501.787778][T11040] ? __pfx_dev_config+0x10/0x10 [ 501.787802][T11040] ? __pfx_dev_config+0x10/0x10 [ 501.787821][T11040] vfs_write+0x29f/0xbb0 [ 501.787919][T11040] ? __pfx_vfs_write+0x10/0x10 [ 501.787944][T11040] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 501.787971][T11040] ? lockdep_hardirqs_on+0x7a/0x110 [ 501.788018][T11040] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 501.788071][T11040] ? mutex_lock_nested+0x152/0x1d0 [ 501.788091][T11040] ? fdget_pos+0x252/0x320 [ 501.788140][T11040] ksys_write+0x156/0x270 [ 501.788168][T11040] ? __pfx_ksys_write+0x10/0x10 [ 501.788197][T11040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.788255][T11040] do_syscall_64+0x174/0x580 [ 501.788323][T11040] ? clear_bhb_loop+0x40/0x90 [ 501.788349][T11040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.788371][T11040] RIP: 0033:0x7f06b444e019 [ 501.788391][T11040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.788411][T11040] RSP: 002b:00007f06b26a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.788437][T11040] RAX: ffffffffffffffda RBX: 00007f06b46d5fa0 RCX: 00007f06b444e019 [ 501.788454][T11040] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000004 [ 501.788469][T11040] RBP: 00007f06b44e500c R08: 0000000000000000 R09: 0000000000000000 [ 501.788483][T11040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.788497][T11040] R13: 00007f06b46d6038 R14: 00007f06b46d5fa0 R15: 00007ffdd9e643d8 [ 501.788521][T11040] [ 501.788528][T11040] Modules linked in: [ 501.788563][T11040] ---[ end trace 0000000000000000 ]--- [ 501.788660][T11040] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 501.788692][T11040] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 95 12 98 fa eb 0c e8 8e 12 98 fa eb 05 e8 87 12 98 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 01 86 01 fb 4d 8b 36 4c 89 f7 e8 [ 501.788720][T11040] RSP: 0018:ffffc9000157f850 EFLAGS: 00010246 [ 501.788740][T11040] RAX: 0000000000000000 RBX: ffffffff8efd0100 RCX: 0000000000080000 [ 501.788756][T11040] RDX: ffffc90006761000 RSI: 0000000000001d5f RDI: 0000000000001d60 [ 501.788772][T11040] RBP: ffff88802aa76000 R08: ffff8880274e1f00 R09: 0000000000000004 [ 501.788788][T11040] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 501.788803][T11040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 501.788817][T11040] FS: 00007f06b26a66c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 501.788837][T11040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.788853][T11040] CR2: 00007f2a6ec85d58 CR3: 000000005a5e4000 CR4: 00000000003526f0 [ 501.788873][T11040] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 501.788888][T11040] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 501.788931][T11040] Kernel panic - not syncing: Fatal exception [ 501.789090][T11040] Kernel Offset: disabled