last executing test programs: 12m16.021522433s ago: executing program 0 (id=73): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r3, 0x0, 0x0) 12m14.829208779s ago: executing program 0 (id=75): capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000080)={0x7, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x800, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) setresgid(0xee00, 0xee01, 0x0) setuid(0x0) setgid(0x0) socket(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x40050) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 12m6.858911282s ago: executing program 0 (id=86): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x202c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') pread64(r5, &(0x7f0000002640)=""/4103, 0x1007, 0x8001) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 12m5.555373032s ago: executing program 0 (id=87): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x202c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') pread64(r5, &(0x7f0000002640)=""/4103, 0x1007, 0x8001) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) setpgid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 12m4.131913667s ago: executing program 0 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000201000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m3.765789472s ago: executing program 0 (id=92): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000500)=0x4) readv(r1, &(0x7f0000003a00)=[{0x0}], 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000340)={r7, 0x2}, &(0x7f0000000400)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x620c, 0x2000, 0x0, 0x1a0, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d7e, 0x8000, 0x2, 0x2bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad9, 0x0, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17ea, 0x400, 0x2, 0x35f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x897a, 0x100, 0x3, 0x3a3, 0x0, r4}, 0xffffffffffffffff}], 0x4, &(0x7f0000001840)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x8e1, 0xc1d, 0x0, &(0x7f0000000840)=@buf_4k="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"}}, &(0x7f00000018c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000001900)={0xfffffffffffffff8, r3, 0x1, {0x19, 0x2e}, 0xb7}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r0, @ANYBLOB="010a29bd7000fbdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000b0004000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 11m51.485170177s ago: executing program 2 (id=101): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 11m50.757219555s ago: executing program 2 (id=103): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) memfd_create(0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x19, &(0x7f00000003c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "acff3a528001727d85e098fbad002835"}]}, 0x1, [{0x4a, &(0x7f0000000400)=@string={0x4a, 0x3, "7fd0972090946c6c69da103bc17ed59e92e50e5e1f7486f98b8b8dd71ebba6f8e78e333f7b0c56ee94eff23a1a5b140ccb4e50caa2bcb3cb3ad38ec93c610d265ea469f1fc68f706"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000001c0)={0x1ff, 0xb, 0x1, 0x0, 0x9}) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 11m42.594708235s ago: executing program 32 (id=92): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000500)=0x4) readv(r1, &(0x7f0000003a00)=[{0x0}], 0x1) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000340)={r7, 0x2}, &(0x7f0000000400)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x620c, 0x2000, 0x0, 0x1a0, 0x0, r3}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d7e, 0x8000, 0x2, 0x2bf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xad9, 0x0, 0x0, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x17ea, 0x400, 0x2, 0x35f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x897a, 0x100, 0x3, 0x3a3, 0x0, r4}, 0xffffffffffffffff}], 0x4, &(0x7f0000001840)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7}, 0x0, 0x0, '\x00', {0x8e1, 0xc1d, 0x0, &(0x7f0000000840)=@buf_4k="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"}}, &(0x7f00000018c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r9, 0x18, &(0x7f0000001900)={0xfffffffffffffff8, r3, 0x1, {0x19, 0x2e}, 0xb7}, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00', @ANYRES16=r0, @ANYBLOB="010a29bd7000fbdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000b0004000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) 11m39.489651326s ago: executing program 2 (id=114): r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r5, 0xb) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x44, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r6, 0x4140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @remote, 0x6}}, 0x5, 0x40}, &(0x7f0000000480)=0x90) 11m34.190006129s ago: executing program 2 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000840)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) 11m32.249464107s ago: executing program 2 (id=121): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 11m30.43948269s ago: executing program 2 (id=123): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe4) 11m13.743040679s ago: executing program 33 (id=123): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe4) 10.094453001s ago: executing program 4 (id=1204): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.78057583s ago: executing program 3 (id=1205): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.05564444s ago: executing program 4 (id=1207): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) 7.684989641s ago: executing program 3 (id=1208): socket(0x1d, 0x2, 0x6) syz_open_dev$sg(&(0x7f0000000340), 0xffffffffffffffff, 0x8102) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="000227bd7000ffdbdf2511000000140003800800030022d4000008000300090000001000068004000500080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000300)="644ee8", 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x9, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad00013100102030109022400010000"], 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.257376839s ago: executing program 1 (id=1210): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) shutdown(0xffffffffffffffff, 0x2) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) mprotect(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r5, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, &(0x7f0000000140)=0xfff) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.633540221s ago: executing program 4 (id=1211): ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f00000002c0)={0x2, @capture={0x1000, 0x0, {0x7, 0x6}, 0x5, 0xcb}}) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_open_dev$evdev(0x0, 0x3, 0x822b01) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.470061947s ago: executing program 4 (id=1212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf74ba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r5, &(0x7f0000000180)={0x11, 0x2, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r10, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000100)={&(0x7f0000000080)=0x7fffffff, 0x8, &(0x7f0000000a40)=[{}, {}, {}, {}], &(0x7f0000000f80)}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0xc1205531, &(0x7f0000002680)=""/4078) 4.101119284s ago: executing program 1 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {}, 0x1}, 0x18) sendfile(r4, r3, 0x0, 0x1000000000000a) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 3.899905269s ago: executing program 3 (id=1214): sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x4014080) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x4, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1d00000002000000410000000000008012000000", @ANYRES32, @ANYBLOB="0752c63427788baaa47222734191b59b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000070000000000000000000000850000000f00000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x4, 0x257, 0x0, r6}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1e8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bd, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x2000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x6b}}], 0x1, &(0x7f0000000340)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x11b, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 3.664733465s ago: executing program 4 (id=1215): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.492404061s ago: executing program 1 (id=1216): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x7, r1, r1, 0xd06, 0x100, 0x3ffe}) 2.312269772s ago: executing program 3 (id=1217): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 2.253336404s ago: executing program 1 (id=1218): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b4000000000090001007379"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.952825334s ago: executing program 3 (id=1219): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, 0x0) pipe(&(0x7f0000000040)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x42, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r2}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLL', 0x15}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x800000000001000}) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f0000000000)={0x7, 0x9}) 1.794768031s ago: executing program 1 (id=1220): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.577843657s ago: executing program 3 (id=1221): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b'], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.492492431s ago: executing program 1 (id=1222): r0 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x52) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000040)={0x66, 0x7, 0x3b, 0x1b, "5fa1fda640479e153cae69970ee725be80296d8084b5ebec190e7e"}, 0x3b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x4000, 0x3, 0x846}) io_uring_register$IORING_REGISTER_FILES(r3, 0x25, &(0x7f0000000000)=[r3], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f071, 0x1}) 0s ago: executing program 4 (id=1223): sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x4014080) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x4, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1d00000002000000410000000000008012000000", @ANYRES32, @ANYBLOB="0752c63427788baaa47222734191b59b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000070000000000000000000000850000000f00000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x4, 0x257, 0x0, r10}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x1e8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bd, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x2000, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x6b}}], 0x1, &(0x7f0000000340)={0x2e, 0x3, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x11b, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r11 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 546.137269][ T5607] Bluetooth: hci1: command tx timeout [ 546.211399][ T1177] bridge_slave_0: left allmulticast mode [ 546.211438][ T1177] bridge_slave_0: left promiscuous mode [ 546.211705][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.286779][ T31] usb 4-1: USB disconnect, device number 23 [ 547.304207][ T8614] syz.4.628 (8614) used greatest stack depth: 19064 bytes left [ 548.096454][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.442020][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.530523][ T1177] bond0 (unregistering): Released all slaves [ 550.707892][ T1177] hsr_slave_0: left promiscuous mode [ 551.426021][ T1177] hsr_slave_1: left promiscuous mode [ 551.433861][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.458605][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.569992][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 553.498690][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 553.557057][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 554.317373][ T8323] hsr_slave_0: entered promiscuous mode [ 554.339582][ T8323] hsr_slave_1: entered promiscuous mode [ 554.353238][ T8323] debugfs: 'hsr0' already exists in 'hsr' [ 554.353302][ T8323] Cannot create hsr debugfs directory [ 557.367739][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.369452][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.369661][ T8507] bridge_slave_0: entered allmulticast mode [ 557.402806][ T8507] bridge_slave_0: entered promiscuous mode [ 557.479948][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.480088][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.480306][ T8507] bridge_slave_1: entered allmulticast mode [ 558.005229][ T8507] bridge_slave_1: entered promiscuous mode [ 558.098510][ T8712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.215760][ T8507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.384147][ T8507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.636423][ T8719] sctp: [Deprecated]: syz.1.650 (pid 8719) Use of int in max_burst socket option deprecated. [ 558.636423][ T8719] Use struct sctp_assoc_value instead [ 558.657943][ T1177] bridge_slave_1: left allmulticast mode [ 558.657979][ T1177] bridge_slave_1: left promiscuous mode [ 558.658244][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.905245][ T8724] netlink: 204 bytes leftover after parsing attributes in process `syz.1.650'. [ 558.912687][ T8724] netlink: 232 bytes leftover after parsing attributes in process `syz.1.650'. [ 560.441691][ T1177] bridge_slave_0: left allmulticast mode [ 560.441714][ T1177] bridge_slave_0: left promiscuous mode [ 560.441874][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.787597][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 560.908109][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.937607][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 560.943992][ T9] usb 5-1: config 251 has an invalid interface number: 94 but max is 0 [ 560.944011][ T9] usb 5-1: config 251 has no interface number 0 [ 560.944086][ T9] usb 5-1: config 251 interface 94 altsetting 2 bulk endpoint 0xA has invalid maxpacket 8 [ 560.944103][ T9] usb 5-1: config 251 interface 94 has no altsetting 0 [ 560.953182][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=fb.34 [ 560.953219][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.953240][ T9] usb 5-1: Product: syz [ 560.953285][ T9] usb 5-1: Manufacturer: syz [ 560.953329][ T9] usb 5-1: SerialNumber: syz [ 561.026666][ T8736] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.088298][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.160117][ T1177] bond0 (unregistering): Released all slaves [ 561.354918][ T9] ldusb 5-1:251.94: Interrupt in endpoint not found [ 561.435804][ T9] usb 5-1: USB disconnect, device number 29 [ 561.737069][ T8507] team0: Port device team_slave_0 added [ 561.911773][ T1177] hsr_slave_0: left promiscuous mode [ 561.953897][ T1177] hsr_slave_1: left promiscuous mode [ 561.954885][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.998362][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.408150][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.408217][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.545847][ T8752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.993042][ T8757] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.039343][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 564.100120][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 564.500648][ T8507] team0: Port device team_slave_1 added [ 564.980846][ T8323] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.091910][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.391278][ T8323] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.485104][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 565.504777][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.504789][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.504826][ T8507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.518348][ T8323] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 566.493649][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 566.495681][ T8507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.495705][ T8507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.495735][ T8507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.496923][ T8323] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 566.911904][ T8323] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 567.057621][ T198] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 567.217607][ T198] usb 4-1: Using ep0 maxpacket: 16 [ 567.219866][ T198] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.219883][ T198] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.225766][ T198] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.225795][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.225817][ T198] usb 4-1: Product: syz [ 567.225831][ T198] usb 4-1: Manufacturer: syz [ 567.225846][ T198] usb 4-1: SerialNumber: syz [ 567.277768][ T5586] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 567.371261][ T198] usb 4-1: 0:2 : does not exist [ 567.387979][ T8507] hsr_slave_0: entered promiscuous mode [ 567.389852][ T8507] hsr_slave_1: entered promiscuous mode [ 567.390973][ T8507] debugfs: 'hsr0' already exists in 'hsr' [ 567.391121][ T8507] Cannot create hsr debugfs directory [ 567.448769][ T5586] usb 2-1: Using ep0 maxpacket: 16 [ 567.451433][ T5586] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.451449][ T5586] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.454200][ T5586] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.454220][ T5586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.454290][ T5586] usb 2-1: Product: syz [ 567.454300][ T5586] usb 2-1: Manufacturer: syz [ 567.454310][ T5586] usb 2-1: SerialNumber: syz [ 567.556722][ T198] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 567.835938][ T5586] usb 2-1: 0:2 : does not exist [ 567.835997][ T5586] usb 2-1: unit 9 not found! [ 567.871618][ T198] usb 4-1: USB disconnect, device number 24 [ 567.981151][ T5586] usb 2-1: USB disconnect, device number 20 [ 568.152282][ T8385] udevd[8385]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 568.219999][ T8385] udevd[8385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 569.145732][ T8791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.917257][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 569.991652][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.049496][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.053253][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.054982][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.488999][ T198] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 570.592603][ T8507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.642601][ T198] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.642631][ T198] usb 4-1: config 0 has no interfaces? [ 570.645739][ T198] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 570.645771][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.645793][ T198] usb 4-1: Product: syz [ 570.645808][ T198] usb 4-1: Manufacturer: syz [ 570.645824][ T198] usb 4-1: SerialNumber: syz [ 570.687286][ T8507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 570.703889][ T8507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.720208][ T198] usb 4-1: config 0 descriptor?? [ 570.820961][ T8507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 570.833315][ T8507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.984535][ T8507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.061317][ T8507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 571.122263][ T8507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.037656][ T198] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 572.087253][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.107649][ T5795] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 572.139071][ T4910] Bluetooth: hci5: command tx timeout [ 572.187587][ T198] usb 2-1: Using ep0 maxpacket: 32 [ 572.189795][ T198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.192089][ T198] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 572.192113][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.192133][ T198] usb 2-1: Product: syz [ 572.192146][ T198] usb 2-1: Manufacturer: syz [ 572.192160][ T198] usb 2-1: SerialNumber: syz [ 572.215975][ T198] usb 2-1: config 0 descriptor?? [ 572.254928][ T198] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 572.257570][ T5795] usb 5-1: Using ep0 maxpacket: 16 [ 572.283250][ T5795] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.283275][ T5795] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.329531][ T5795] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.329565][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.329586][ T5795] usb 5-1: Product: syz [ 572.329602][ T5795] usb 5-1: Manufacturer: syz [ 572.329617][ T5795] usb 5-1: SerialNumber: syz [ 572.426578][ T5795] usb 5-1: 0:2 : does not exist [ 572.451512][ T198] usb 2-1: qt2_attach - failed to power on unit: -71 [ 572.451670][ T198] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 572.465895][ T198] usb 2-1: USB disconnect, device number 21 [ 572.615035][ T5795] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 572.665652][ T8507] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.713342][ T5795] usb 5-1: USB disconnect, device number 30 [ 572.790258][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.790457][ T5878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.832791][ T8385] udevd[8385]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.917488][ T5717] usb 4-1: USB disconnect, device number 25 [ 573.600866][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.600956][ T5878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.946970][ T8846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.217752][ T4910] Bluetooth: hci5: command tx timeout [ 575.182476][ T8863] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 575.355549][ T8863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.479411][ T8870] sctp: [Deprecated]: syz.1.688 (pid 8870) Use of int in max_burst socket option deprecated. [ 575.479411][ T8870] Use struct sctp_assoc_value instead [ 575.512998][ T8865] veth0_virt_wifi: entered promiscuous mode [ 575.749506][ T8873] netlink: 204 bytes leftover after parsing attributes in process `syz.1.688'. [ 576.546459][ T4910] Bluetooth: hci5: command tx timeout [ 576.860288][ T8877] netlink: 'syz.1.689': attribute type 83 has an invalid length. [ 577.009905][ T8865] bond1: (slave veth0_virt_wifi): making interface the new active one [ 577.075506][ T8865] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 577.138582][ T8866] bond1: (slave veth0_virt_wifi): Releasing active interface [ 577.159935][ T36] audit: type=1326 audit(1783539093.977:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.162130][ T36] audit: type=1326 audit(1783539093.977:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.162190][ T36] audit: type=1326 audit(1783539093.977:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.163922][ T36] audit: type=1326 audit(1783539093.977:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.169097][ T36] audit: type=1326 audit(1783539093.977:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.169246][ T36] audit: type=1326 audit(1783539093.987:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.177654][ T36] audit: type=1326 audit(1783539093.987:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.180365][ T36] audit: type=1326 audit(1783539093.997:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.185013][ T36] audit: type=1326 audit(1783539093.997:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.185184][ T36] audit: type=1326 audit(1783539093.997:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8878 comm="syz.1.690" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 577.727770][ T5826] bridge_slave_1: left allmulticast mode [ 577.727795][ T5826] bridge_slave_1: left promiscuous mode [ 577.727977][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.889132][ T5826] bridge_slave_0: left allmulticast mode [ 577.889161][ T5826] bridge_slave_0: left promiscuous mode [ 577.891800][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.634702][ T4910] Bluetooth: hci5: command tx timeout [ 579.602875][ T8896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.208588][ T5826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.320233][ T5826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.359441][ T5826] bond0 (unregistering): Released all slaves [ 582.174065][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.174398][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.175388][ T8797] bridge_slave_0: entered allmulticast mode [ 582.279740][ T8797] bridge_slave_0: entered promiscuous mode [ 582.981318][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.984532][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.006245][ T8797] bridge_slave_1: entered allmulticast mode [ 583.045277][ T8797] bridge_slave_1: entered promiscuous mode [ 584.313823][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.365192][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.912472][ T8797] team0: Port device team_slave_0 added [ 586.067745][ T5826] hsr_slave_0: left promiscuous mode [ 586.107805][ T5826] hsr_slave_1: left promiscuous mode [ 586.112855][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.164663][ T5826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.038610][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060f2a800: rx timeout, send abort [ 587.052028][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060f2a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 587.056638][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e4f9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 587.240734][ T5826] team0 (unregistering): Port device team_slave_1 removed [ 587.359211][ T5826] team0 (unregistering): Port device team_slave_0 removed [ 587.862479][ T8797] team0: Port device team_slave_1 added [ 588.100869][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.100888][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.100917][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.179748][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.179765][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.179793][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.340519][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060791c00: rx timeout, send abort [ 588.340891][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060791c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.344211][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062e3c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 588.441251][ T8507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.728090][ T8797] hsr_slave_0: entered promiscuous mode [ 588.735837][ T8797] hsr_slave_1: entered promiscuous mode [ 588.783548][ T8797] debugfs: 'hsr0' already exists in 'hsr' [ 588.783572][ T8797] Cannot create hsr debugfs directory [ 589.541375][ T8952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.375236][ T8507] veth0_vlan: entered promiscuous mode [ 592.458933][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 593.661322][ T8507] veth1_vlan: entered promiscuous mode [ 594.092455][ T8507] veth0_macvtap: entered promiscuous mode [ 594.127159][ T8507] veth1_macvtap: entered promiscuous mode [ 594.253815][ T8995] sctp: [Deprecated]: syz.4.713 (pid 8995) Use of int in max_burst socket option deprecated. [ 594.253815][ T8995] Use struct sctp_assoc_value instead [ 594.530017][ T8998] netlink: 204 bytes leftover after parsing attributes in process `syz.4.713'. [ 596.465906][ T8507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.101150][ T9028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.150179][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 599.209501][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 599.247618][ T5607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 599.339924][ T5607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 599.340733][ T5607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.577863][ T4910] Bluetooth: hci2: command tx timeout [ 603.542439][ T8797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 603.662487][ T4910] Bluetooth: hci2: command tx timeout [ 603.756572][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.772420][ T8797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 603.932601][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 603.975752][ T8797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 604.046178][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 604.071475][ T8797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.219129][ T8797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 604.787575][ T5709] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 604.937899][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 604.940891][ T5709] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.940917][ T5709] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 604.974577][ T5709] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 604.974599][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.974614][ T5709] usb 5-1: Product: syz [ 604.974624][ T5709] usb 5-1: Manufacturer: syz [ 604.974635][ T5709] usb 5-1: SerialNumber: syz [ 605.049986][ T5709] usb 5-1: config 0 descriptor?? [ 605.723125][ T9105] netlink: 288 bytes leftover after parsing attributes in process `syz.1.728'. [ 605.742047][ T4910] Bluetooth: hci2: command tx timeout [ 606.064172][ T9111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.159382][ T9122] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 607.247639][ T9122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.252556][ T9124] veth0_virt_wifi: entered promiscuous mode [ 607.363320][ T9124] bond3: (slave veth0_virt_wifi): making interface the new active one [ 607.399363][ T9124] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 607.570621][ T9122] bond3: (slave veth0_virt_wifi): Releasing active interface [ 607.781961][ T9134] fuse: Unknown parameter 'group_i00000000000000000000' [ 607.842274][ T4910] Bluetooth: hci2: command tx timeout [ 608.850340][ T36] kauditd_printk_skb: 234 callbacks suppressed [ 608.850358][ T36] audit: type=1326 audit(1783539125.667:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.850407][ T36] audit: type=1326 audit(1783539125.667:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.852066][ T36] audit: type=1326 audit(1783539125.667:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.852116][ T36] audit: type=1326 audit(1783539125.667:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.852607][ T36] audit: type=1326 audit(1783539125.667:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.854465][ T36] audit: type=1326 audit(1783539125.667:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.854522][ T36] audit: type=1326 audit(1783539125.667:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.854579][ T36] audit: type=1326 audit(1783539125.667:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.855185][ T36] audit: type=1326 audit(1783539125.667:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.855323][ T36] audit: type=1326 audit(1783539125.667:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9140 comm="syz.1.734" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb740c8de59 code=0x7ffc0000 [ 608.996823][ T198] usb 5-1: USB disconnect, device number 31 [ 612.590979][ T9156] netlink: 288 bytes leftover after parsing attributes in process `syz.1.737'. [ 612.675982][ T9159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.142482][ T9168] random: crng reseeded on system resumption [ 614.170986][ T36] kauditd_printk_skb: 306 callbacks suppressed [ 614.171131][ T36] audit: type=1326 audit(1783539130.987:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9167 comm="syz.1.741" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb740c8de59 code=0x0 [ 619.602682][ T9200] sctp: [Deprecated]: syz.4.748 (pid 9200) Use of int in max_burst socket option deprecated. [ 619.602682][ T9200] Use struct sctp_assoc_value instead [ 621.917643][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.212162][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.458055][ T1380] bridge_slave_1: left allmulticast mode [ 622.458079][ T1380] bridge_slave_1: left promiscuous mode [ 622.458278][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.639860][ T1380] bridge_slave_0: left allmulticast mode [ 622.639887][ T1380] bridge_slave_0: left promiscuous mode [ 622.640179][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.597102][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.598171][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.029446][ T1380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.108867][ T1380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.130604][ T1380] bond0 (unregistering): Released all slaves [ 625.321296][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.321423][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.325264][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 627.055971][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.070288][ T6217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.162085][ T9276] sctp: [Deprecated]: syz.1.763 (pid 9276) Use of int in max_burst socket option deprecated. [ 627.162085][ T9276] Use struct sctp_assoc_value instead [ 627.425825][ T9279] netlink: 204 bytes leftover after parsing attributes in process `syz.1.763'. [ 627.430093][ T9279] netlink: 232 bytes leftover after parsing attributes in process `syz.1.763'. [ 628.631568][ T1380] hsr_slave_0: left promiscuous mode [ 628.868647][ T1380] hsr_slave_1: left promiscuous mode [ 628.869573][ T1380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.869597][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.918330][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.923295][ T1380] veth1_macvtap: left promiscuous mode [ 629.923406][ T1380] veth0_macvtap: left promiscuous mode [ 629.923673][ T1380] veth1_vlan: left promiscuous mode [ 629.923862][ T1380] veth0_vlan: left promiscuous mode [ 630.539636][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 630.566605][ T1380] team0 (unregistering): Port device team_slave_0 removed [ 630.759955][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.760092][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.760278][ T9032] bridge_slave_0: entered allmulticast mode [ 630.790988][ T9032] bridge_slave_0: entered promiscuous mode [ 630.823333][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.823531][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.823729][ T9032] bridge_slave_1: entered allmulticast mode [ 630.863513][ T9032] bridge_slave_1: entered promiscuous mode [ 631.070227][ T36] audit: type=1326 audit(1783539147.877:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085336][ T36] audit: type=1326 audit(1783539147.887:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085391][ T36] audit: type=1326 audit(1783539147.897:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085439][ T36] audit: type=1326 audit(1783539147.897:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085485][ T36] audit: type=1326 audit(1783539147.897:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085531][ T36] audit: type=1326 audit(1783539147.887:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.085578][ T36] audit: type=1326 audit(1783539147.897:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.087633][ T36] audit: type=1326 audit(1783539147.907:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.090926][ T36] audit: type=1326 audit(1783539147.907:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.090974][ T36] audit: type=1326 audit(1783539147.907:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9292 comm="syz.3.766" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d988ade59 code=0x7ffc0000 [ 631.945001][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.975988][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.982891][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.000842][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.001447][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.002519][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.364942][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.440894][ T9312] sctp: [Deprecated]: syz.4.771 (pid 9312) Use of int in max_burst socket option deprecated. [ 632.440894][ T9312] Use struct sctp_assoc_value instead [ 633.267119][ T9316] netlink: 204 bytes leftover after parsing attributes in process `syz.4.771'. [ 634.333410][ T4910] Bluetooth: hci1: command tx timeout [ 635.923503][ T9032] team0: Port device team_slave_0 added [ 635.947539][ T9032] team0: Port device team_slave_1 added [ 636.377626][ T5607] Bluetooth: hci1: command tx timeout [ 637.766720][ T9354] random: crng reseeded on system resumption [ 637.804151][ T36] kauditd_printk_skb: 108 callbacks suppressed [ 637.804168][ T36] audit: type=1326 audit(1783539154.617:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9351 comm="syz.3.778" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d988ade59 code=0x0 [ 638.290330][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.290348][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.290368][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.293751][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.293762][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.293781][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.457583][ T4910] Bluetooth: hci1: command tx timeout [ 638.979684][ T9032] hsr_slave_0: entered promiscuous mode [ 638.981361][ T9032] hsr_slave_1: entered promiscuous mode [ 639.009392][ T9032] debugfs: 'hsr0' already exists in 'hsr' [ 639.009416][ T9032] Cannot create hsr debugfs directory [ 639.052735][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 640.544786][ T5607] Bluetooth: hci1: command tx timeout [ 643.157522][ T9154] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 643.320643][ T9154] usb 2-1: unable to get BOS descriptor or descriptor too short [ 643.322108][ T9154] usb 2-1: not running at top speed; connect to a high speed hub [ 643.330881][ T9154] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 104, changing to 4 [ 643.364328][ T9154] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 643.364368][ T9154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.364389][ T9154] usb 2-1: Product: syz [ 643.364405][ T9154] usb 2-1: Manufacturer: syz [ 643.364421][ T9154] usb 2-1: SerialNumber: syz [ 643.705340][ T9154] usb 2-1: 1:1 : invalid channels 0 [ 643.712209][ T9154] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 643.875757][ T9408] sctp: [Deprecated]: syz.4.790 (pid 9408) Use of int in max_burst socket option deprecated. [ 643.875757][ T9408] Use struct sctp_assoc_value instead [ 645.250033][ T9154] usb 2-1: USB disconnect, device number 22 [ 646.105197][ T5256] 8021q: adding VLAN 0 to HW filter on device eth11 [ 648.319556][ T9449] random: crng reseeded on system resumption [ 648.399300][ T36] audit: type=1326 audit(1783539165.217:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.4.800" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498879de59 code=0x0 [ 651.131073][ T9479] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 651.131099][ T9479] netlink: 220 bytes leftover after parsing attributes in process `syz.3.805'. [ 653.773935][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.732682][ T9509] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 655.164055][ T9513] netlink: 232 bytes leftover after parsing attributes in process `syz.4.810'. [ 656.367521][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.367723][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.367895][ T9302] bridge_slave_0: entered allmulticast mode [ 656.370267][ T9302] bridge_slave_0: entered promiscuous mode [ 656.373128][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.373307][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.373479][ T9302] bridge_slave_1: entered allmulticast mode [ 656.376035][ T9302] bridge_slave_1: entered promiscuous mode [ 656.642430][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.683471][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.802988][ T9541] sctp: [Deprecated]: syz.3.817 (pid 9541) Use of int in max_burst socket option deprecated. [ 656.802988][ T9541] Use struct sctp_assoc_value instead [ 659.413427][ T9302] team0: Port device team_slave_0 added [ 659.460067][ T9302] team0: Port device team_slave_1 added [ 659.715923][ T9558] netlink: 232 bytes leftover after parsing attributes in process `syz.3.819'. [ 659.792998][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.793013][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.793037][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.914232][ T9565] sctp: [Deprecated]: syz.3.821 (pid 9565) Use of int in max_burst socket option deprecated. [ 659.914232][ T9565] Use struct sctp_assoc_value instead [ 661.971759][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.971778][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.971811][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.163422][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 662.189558][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 662.197923][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 662.217843][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 662.220866][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.354946][ T9584] sctp: [Deprecated]: syz.1.824 (pid 9584) Use of int in max_burst socket option deprecated. [ 662.354946][ T9584] Use struct sctp_assoc_value instead [ 662.629773][ T9587] netlink: 204 bytes leftover after parsing attributes in process `syz.1.824'. [ 664.322475][ T5607] Bluetooth: hci5: command tx timeout [ 664.341225][ T9598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.527578][ T9591] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 666.377477][ T5607] Bluetooth: hci5: command tx timeout [ 666.457277][ T9621] netlink: 232 bytes leftover after parsing attributes in process `syz.1.829'. [ 666.587731][ T1380] bridge_slave_1: left allmulticast mode [ 666.587766][ T1380] bridge_slave_1: left promiscuous mode [ 666.588030][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.799126][ T1380] bridge_slave_0: left allmulticast mode [ 666.799163][ T1380] bridge_slave_0: left promiscuous mode [ 666.799433][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.168085][ T9] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 667.241814][ T9634] fuse: Unknown parameter 'user_id00000000000000000000' [ 667.880866][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.880896][ T9] usb 4-1: config 0 has no interfaces? [ 667.885263][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 667.885312][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.885334][ T9] usb 4-1: Product: syz [ 667.885349][ T9] usb 4-1: Manufacturer: syz [ 667.885365][ T9] usb 4-1: SerialNumber: syz [ 668.098559][ T9] usb 4-1: config 0 descriptor?? [ 668.457561][ T5607] Bluetooth: hci5: command tx timeout [ 669.412016][ T1380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.488203][ T1380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.569298][ T1380] bond0 (unregistering): Released all slaves [ 669.697591][ T821] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 669.733324][ T9664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.824932][ T9] usb 4-1: USB disconnect, device number 26 [ 669.884433][ T821] usb 5-1: config 0 has too many interfaces: 90, using maximum allowed: 32 [ 669.884471][ T821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.884492][ T821] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 90 [ 669.884574][ T821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 669.884619][ T821] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 669.884644][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.634681][ T5607] Bluetooth: hci5: command tx timeout [ 671.177549][ T821] usb 5-1: config 0 descriptor?? [ 671.185180][ T821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 671.501112][ T9678] sctp: [Deprecated]: syz.3.839 (pid 9678) Use of int in max_burst socket option deprecated. [ 671.501112][ T9678] Use struct sctp_assoc_value instead [ 671.534848][ T9302] hsr_slave_0: entered promiscuous mode [ 671.541760][ T9302] hsr_slave_1: entered promiscuous mode [ 671.545562][ T9302] debugfs: 'hsr0' already exists in 'hsr' [ 671.545586][ T9302] Cannot create hsr debugfs directory [ 672.738819][ T821] usb 5-1: USB disconnect, device number 32 [ 672.756219][ T1380] hsr_slave_0: left promiscuous mode [ 672.787593][ T1380] hsr_slave_1: left promiscuous mode [ 672.788613][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.833243][ T1380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.217748][ T9698] fuse: Unknown parameter 'user_id00000000000000000000' [ 674.852097][ T9705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.906815][ T9709] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 676.078304][ T1380] team0 (unregistering): Port device team_slave_1 removed [ 676.139879][ T1380] team0 (unregistering): Port device team_slave_0 removed [ 676.375114][ T9703] vlan2: entered promiscuous mode [ 676.375131][ T9703] bond0: entered promiscuous mode [ 676.375141][ T9703] bond_slave_0: entered promiscuous mode [ 676.375294][ T9703] bond_slave_1: entered promiscuous mode [ 676.453531][ T9709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 676.534388][ T9715] process 'syz.3.848' launched '/dev/fd/5' with NULL argv: empty string added [ 676.569582][ T9717] sctp: [Deprecated]: syz.1.849 (pid 9717) Use of int in max_burst socket option deprecated. [ 676.569582][ T9717] Use struct sctp_assoc_value instead [ 678.383822][ T9722] sctp: [Deprecated]: syz.3.850 (pid 9722) Use of int in max_burst socket option deprecated. [ 678.383822][ T9722] Use struct sctp_assoc_value instead [ 679.325510][ T9725] netlink: 204 bytes leftover after parsing attributes in process `syz.3.850'. [ 680.612153][ T9731] fuse: Unknown parameter 'group_i00000000000000000000' [ 681.543120][ T9733] fuse: Unknown parameter 'user_id00000000000000000000' [ 683.473921][ T9765] random: crng reseeded on system resumption [ 683.737683][ T36] audit: type=1326 audit(1783539200.547:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9762 comm="syz.3.859" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d988ade59 code=0x0 [ 685.033307][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 685.838212][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.838282][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.786627][ T9801] fuse: Bad value for 'fd' [ 688.460309][ T9816] sctp: [Deprecated]: syz.1.868 (pid 9816) Use of int in max_burst socket option deprecated. [ 688.460309][ T9816] Use struct sctp_assoc_value instead [ 688.587553][ T9818] netlink: 204 bytes leftover after parsing attributes in process `syz.1.868'. [ 688.593231][ T9818] netlink: 232 bytes leftover after parsing attributes in process `syz.1.868'. [ 690.860971][ T9841] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 691.516879][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.517023][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.517163][ T9573] bridge_slave_0: entered allmulticast mode [ 691.523933][ T9573] bridge_slave_0: entered promiscuous mode [ 691.541114][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.542416][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.542965][ T9573] bridge_slave_1: entered allmulticast mode [ 691.559277][ T9573] bridge_slave_1: entered promiscuous mode [ 691.720847][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.802030][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.971465][ T9573] team0: Port device team_slave_0 added [ 691.998346][ T9573] team0: Port device team_slave_1 added [ 692.051657][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.051675][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.051705][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.053930][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.053943][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.053973][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.205420][ T9855] sctp: [Deprecated]: syz.1.876 (pid 9855) Use of int in max_burst socket option deprecated. [ 692.205420][ T9855] Use struct sctp_assoc_value instead [ 694.239913][ T9573] hsr_slave_0: entered promiscuous mode [ 694.264088][ T9573] hsr_slave_1: entered promiscuous mode [ 694.274539][ T9573] debugfs: 'hsr0' already exists in 'hsr' [ 694.274568][ T9573] Cannot create hsr debugfs directory [ 694.412830][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.478352][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.482307][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.484533][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.519550][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.714498][ T4910] Bluetooth: hci2: command tx timeout [ 698.018424][ T9909] comedi comedi2: comedi_test: 320 microvolt, 9 microsecond waveform attached [ 698.804491][ T4910] Bluetooth: hci2: command tx timeout [ 700.910848][ T9934] FAT-fs (nbd1): unable to read boot sector [ 700.959950][ T821] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 701.168617][ T821] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 701.168666][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.168741][ T821] usb 4-1: config 0 has no interface number 0 [ 701.168882][ T821] usb 4-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.707929][ T821] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 701.707975][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.708042][ T821] usb 4-1: Product: syz [ 701.708059][ T821] usb 4-1: Manufacturer: syz [ 701.708145][ T821] usb 4-1: SerialNumber: syz [ 701.876838][ T4910] Bluetooth: hci2: command tx timeout [ 701.905701][ T821] usb 4-1: config 0 descriptor?? [ 701.927795][ T821] asix 4-1:0.251: probe with driver asix failed with error -22 [ 702.164792][ T5913] usb 4-1: USB disconnect, device number 27 [ 702.758166][ T1373] bridge_slave_1: left allmulticast mode [ 702.758204][ T1373] bridge_slave_1: left promiscuous mode [ 702.758475][ T1373] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.786338][ T5913] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 702.950876][ T5913] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 702.950907][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.950929][ T5913] usb 5-1: config 0 has no interface number 0 [ 702.950978][ T5913] usb 5-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.957129][ T5913] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 702.957161][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.957183][ T5913] usb 5-1: Product: syz [ 702.957198][ T5913] usb 5-1: Manufacturer: syz [ 702.957215][ T5913] usb 5-1: SerialNumber: syz [ 703.060541][ T1373] bridge_slave_0: left allmulticast mode [ 703.060580][ T1373] bridge_slave_0: left promiscuous mode [ 703.060918][ T1373] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.446468][ T5913] usb 5-1: config 0 descriptor?? [ 703.834911][ T5913] asix 5-1:0.251: probe with driver asix failed with error -22 [ 703.907643][ T4910] Bluetooth: hci2: command tx timeout [ 704.054371][ T5717] usb 5-1: USB disconnect, device number 33 [ 704.438446][ T1373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.518140][ T1373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.579222][ T1373] bond0 (unregistering): Released all slaves [ 705.584917][ T1373] hsr_slave_0: left promiscuous mode [ 705.650925][ T1373] hsr_slave_1: left promiscuous mode [ 705.651702][ T1373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.709542][ T1373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.867531][ T198] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 706.047564][ T198] usb 5-1: Using ep0 maxpacket: 32 [ 706.050246][ T198] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 706.050301][ T198] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 706.050332][ T198] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.050363][ T198] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 706.055572][ T198] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 706.055603][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.055626][ T198] usb 5-1: Product: syz [ 706.055641][ T198] usb 5-1: Manufacturer: syz [ 706.055657][ T198] usb 5-1: SerialNumber: syz [ 706.200324][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 706.283547][ T198] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input10 [ 706.427492][ T198] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 706.427507][ T198] (id 0x00) [ 707.967455][ T198] rc_core: IR keymap rc-imon-pad not found [ 707.967478][ T198] Registered IR keymap rc-empty [ 707.967575][ T198] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 707.967596][ T198] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 708.040212][ T198] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 708.058896][ T198] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input11 [ 708.158314][ T198] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:34> initialized [ 708.207080][ T1373] team0 (unregistering): Port device team_slave_1 removed [ 708.262591][ T1373] team0 (unregistering): Port device team_slave_0 removed [ 708.424377][T10013] fuse: Unknown parameter '0x0000000000000007' [ 708.906736][ T5709] usb 5-1: USB disconnect, device number 34 [ 709.266642][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 709.676368][T10025] sctp: [Deprecated]: syz.4.914 (pid 10025) Use of int in max_burst socket option deprecated. [ 709.676368][T10025] Use struct sctp_assoc_value instead [ 715.283316][T10068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.920'. [ 715.767489][ T5709] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 715.917549][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 715.920946][ T5709] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 715.921008][ T5709] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 715.921037][ T5709] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.921066][ T5709] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 715.926076][ T5709] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 715.926106][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.926129][ T5709] usb 2-1: Product: syz [ 715.926145][ T5709] usb 2-1: Manufacturer: syz [ 715.926161][ T5709] usb 2-1: SerialNumber: syz [ 716.177742][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 716.182714][ T5709] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input12 [ 716.369492][ T5709] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 716.369513][ T5709] (id 0x00) [ 716.449254][ T1373] bridge_slave_1: left allmulticast mode [ 716.449293][ T1373] bridge_slave_1: left promiscuous mode [ 716.449581][ T1373] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.547424][ T5709] rc_core: IR keymap rc-imon-pad not found [ 716.547445][ T5709] Registered IR keymap rc-empty [ 716.547532][ T5709] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 716.547550][ T5709] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 716.595304][ T5709] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 716.616886][ T5709] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input13 [ 716.646940][ T5709] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:23> initialized [ 716.686690][ T1373] bridge_slave_0: left allmulticast mode [ 716.686726][ T1373] bridge_slave_0: left promiscuous mode [ 716.687017][ T1373] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.778244][ T5709] usb 2-1: USB disconnect, device number 23 [ 717.890906][T10105] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 717.890929][T10105] netlink: 220 bytes leftover after parsing attributes in process `syz.1.925'. [ 720.219278][ T1373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.318367][ T1373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.399281][ T1373] bond0 (unregistering): Released all slaves [ 720.748348][ T9872] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.748475][ T9872] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.748670][ T9872] bridge_slave_0: entered allmulticast mode [ 720.750908][ T9872] bridge_slave_0: entered promiscuous mode [ 720.756915][ T9872] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.757114][ T9872] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.757316][ T9872] bridge_slave_1: entered allmulticast mode [ 720.786904][ T9872] bridge_slave_1: entered promiscuous mode [ 720.972562][T10134] sctp: [Deprecated]: syz.4.929 (pid 10134) Use of int in max_burst socket option deprecated. [ 720.972562][T10134] Use struct sctp_assoc_value instead [ 721.007552][ T1373] hsr_slave_0: left promiscuous mode [ 721.235014][T10137] netlink: 204 bytes leftover after parsing attributes in process `syz.4.929'. [ 722.034268][ T1373] hsr_slave_1: left promiscuous mode [ 722.035274][ T1373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.250179][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 722.314035][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 722.327647][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 722.329430][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 722.330204][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 722.398597][ T1373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.781032][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 722.927584][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 722.932315][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 722.932341][ T9] usb 5-1: config 0 has no interface number 0 [ 722.936118][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 722.936145][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.936165][ T9] usb 5-1: Product: syz [ 722.936179][ T9] usb 5-1: Manufacturer: syz [ 722.936193][ T9] usb 5-1: SerialNumber: syz [ 723.008161][ T9] usb 5-1: config 0 descriptor?? [ 723.109618][ T1373] team0 (unregistering): Port device team_slave_1 removed [ 723.178405][ T1373] team0 (unregistering): Port device team_slave_0 removed [ 723.257589][ T821] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 723.423429][ T821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 723.423462][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.423484][ T821] usb 4-1: Product: syz [ 723.423508][ T821] usb 4-1: Manufacturer: syz [ 723.423524][ T821] usb 4-1: SerialNumber: syz [ 723.436206][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 723.436279][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 723.497669][ T821] usb 4-1: config 0 descriptor?? [ 723.650865][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 723.651192][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 723.716399][ T821] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 723.900717][ T9872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.952977][ T9872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.284740][ T9872] team0: Port device team_slave_0 added [ 724.307071][ T9872] team0: Port device team_slave_1 added [ 724.391691][ T821] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 724.440458][ T821] usb 4-1: USB disconnect, device number 28 [ 724.458229][ T4910] Bluetooth: hci1: command tx timeout [ 724.588335][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.588354][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.588384][ T9872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.593157][ T9872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.593174][ T9872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.593205][ T9872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.919653][ T9872] hsr_slave_0: entered promiscuous mode [ 724.920799][ T9872] hsr_slave_1: entered promiscuous mode [ 724.921481][ T9872] debugfs: 'hsr0' already exists in 'hsr' [ 724.921499][ T9872] Cannot create hsr debugfs directory [ 726.544594][ T4910] Bluetooth: hci1: command tx timeout [ 726.691677][ T821] usb 5-1: USB disconnect, device number 35 [ 727.141580][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.936'. [ 728.628006][ T4910] Bluetooth: hci1: command tx timeout [ 730.698008][ T4910] Bluetooth: hci1: command tx timeout [ 730.907860][ T5913] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 731.079443][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 731.081838][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 731.081870][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.202421][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 731.202461][ T5913] pvrusb2: ********** [ 731.202467][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 731.202478][ T5913] pvrusb2: Important functionality might not be entirely working. [ 731.202488][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 731.202500][ T5913] pvrusb2: ********** [ 731.413649][ T2391] pvrusb2: Invalid write control endpoint [ 731.579537][ T5586] usb 4-1: USB disconnect, device number 29 [ 733.249172][ T2391] pvrusb2: Invalid write control endpoint [ 733.249189][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 733.249201][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 733.249210][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 733.249222][ T2391] pvrusb2: Device being rendered inoperable [ 733.342179][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 733.342304][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 733.562570][ T2391] pvrusb2: Attached sub-driver cx25840 [ 733.562616][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 733.562629][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 736.592089][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.598879][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.599132][T10140] bridge_slave_0: entered allmulticast mode [ 736.639828][T10140] bridge_slave_0: entered promiscuous mode [ 736.672592][ T9872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 736.754099][ T9872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.754614][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.755292][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.755505][T10140] bridge_slave_1: entered allmulticast mode [ 736.801659][T10140] bridge_slave_1: entered promiscuous mode [ 736.833428][ T9872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 736.937616][ T9872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 737.074347][ T9872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 737.138373][ T9872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 737.251097][ T9872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 737.298185][ T9872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.383146][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.675539][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.228044][T10140] team0: Port device team_slave_0 added [ 739.385009][T10140] team0: Port device team_slave_1 added [ 740.748230][T10259] sctp: [Deprecated]: syz.1.956 (pid 10259) Use of int in max_burst socket option deprecated. [ 740.748230][T10259] Use struct sctp_assoc_value instead [ 741.012761][T10261] netlink: 204 bytes leftover after parsing attributes in process `syz.1.956'. [ 743.600167][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.600182][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.600204][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.657684][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.657746][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.657825][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.038680][ T5586] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 745.397472][ T5586] usb 4-1: Using ep0 maxpacket: 32 [ 745.400325][ T5586] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.400350][ T5586] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 745.403996][ T5586] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 745.404026][ T5586] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.404048][ T5586] usb 4-1: Product: syz [ 745.404063][ T5586] usb 4-1: Manufacturer: syz [ 745.404078][ T5586] usb 4-1: SerialNumber: syz [ 745.483418][ T5586] usb 4-1: config 0 descriptor?? [ 745.568748][T10140] hsr_slave_0: entered promiscuous mode [ 745.575623][T10140] hsr_slave_1: entered promiscuous mode [ 745.576779][T10140] debugfs: 'hsr0' already exists in 'hsr' [ 745.576805][T10140] Cannot create hsr debugfs directory [ 745.868933][ T198] usb 4-1: USB disconnect, device number 30 [ 746.267599][ T5878] bridge_slave_1: left allmulticast mode [ 746.267635][ T5878] bridge_slave_1: left promiscuous mode [ 746.267863][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.593608][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.593678][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.598543][ T5878] bridge_slave_0: left allmulticast mode [ 747.598579][ T5878] bridge_slave_0: left promiscuous mode [ 747.598910][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.479051][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.538345][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.602749][ T5878] bond0 (unregistering): Released all slaves [ 752.907547][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 753.282469][T10335] sctp: [Deprecated]: syz.3.971 (pid 10335) Use of int in max_burst socket option deprecated. [ 753.282469][T10335] Use struct sctp_assoc_value instead [ 755.792861][ T8508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.824945][ T8508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.846455][ T8508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.851913][ T8508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.854301][ T8508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 756.057862][T10350] sctp: [Deprecated]: syz.4.975 (pid 10350) Use of int in max_burst socket option deprecated. [ 756.057862][T10350] Use struct sctp_assoc_value instead [ 756.062697][ T5878] hsr_slave_0: left promiscuous mode [ 756.095111][ T5878] hsr_slave_1: left promiscuous mode [ 756.096140][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.327906][T10360] netlink: 204 bytes leftover after parsing attributes in process `syz.4.975'. [ 757.313172][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.994198][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 758.050301][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 758.068453][ T8508] Bluetooth: hci5: command tx timeout [ 758.204476][ T198] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 758.460182][ T198] usb 5-1: Using ep0 maxpacket: 32 [ 758.472156][ T198] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 758.472237][ T198] usb 5-1: config 0 has no interface number 0 [ 758.472406][ T198] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.472471][ T198] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 758.482238][ T198] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 758.482317][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.482377][ T198] usb 5-1: Product: syz [ 758.482422][ T198] usb 5-1: Manufacturer: syz [ 758.482450][ T198] usb 5-1: SerialNumber: syz [ 758.533465][ T198] usb 5-1: config 0 descriptor?? [ 758.571798][ T198] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 758.572071][ T198] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 760.151008][ T8508] Bluetooth: hci5: command tx timeout [ 761.634012][ T5913] usb 5-1: USB disconnect, device number 36 [ 763.145396][ T8508] Bluetooth: hci5: command tx timeout [ 764.719024][ T198] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 764.873052][ T198] usb 4-1: unable to get BOS descriptor or descriptor too short [ 764.873723][ T198] usb 4-1: not running at top speed; connect to a high speed hub [ 764.875065][ T198] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 104, changing to 4 [ 764.882882][ T198] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 764.882904][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.882919][ T198] usb 4-1: Product: syz [ 764.882930][ T198] usb 4-1: Manufacturer: syz [ 764.882941][ T198] usb 4-1: SerialNumber: syz [ 765.211893][ T8508] Bluetooth: hci5: command tx timeout [ 765.216513][ T198] usb 4-1: 1:1 : invalid channels 0 [ 765.233644][ T198] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 765.404970][ T198] usb 4-1: USB disconnect, device number 31 [ 765.601774][T10427] udevd[10427]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 770.135867][T10470] sctp: [Deprecated]: syz.1.994 (pid 10470) Use of int in max_burst socket option deprecated. [ 770.135867][T10470] Use struct sctp_assoc_value instead [ 770.396799][T10473] netlink: 204 bytes leftover after parsing attributes in process `syz.1.994'. [ 772.557474][ T5717] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 772.727869][ T5717] usb 4-1: Using ep0 maxpacket: 8 [ 772.730378][ T5717] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 772.730409][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.842261][ T5717] pvrusb2: Hardware description: Terratec Grabster AV400 [ 772.842280][ T5717] pvrusb2: ********** [ 772.842288][ T5717] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 772.842301][ T5717] pvrusb2: Important functionality might not be entirely working. [ 772.842311][ T5717] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 772.842325][ T5717] pvrusb2: ********** [ 773.150479][ T2391] pvrusb2: Invalid write control endpoint [ 773.236237][ T5717] usb 4-1: USB disconnect, device number 32 [ 773.469338][ T2391] pvrusb2: Invalid write control endpoint [ 773.469356][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 773.469367][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 773.469377][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 773.469388][ T2391] pvrusb2: Device being rendered inoperable [ 773.469426][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 773.469488][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 773.574082][ T2391] pvrusb2: Attached sub-driver cx25840 [ 773.574100][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 773.574112][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 777.377504][ T5795] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 779.412384][ T5795] usb 2-1: device descriptor read/all, error -71 [ 780.020652][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802586fc00: rx timeout, send abort [ 780.023860][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802586fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 780.024114][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802586f000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 780.152785][T10538] random: crng reseeded on system resumption [ 780.174763][ T36] audit: type=1326 audit(1783539296.987:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10537 comm="syz.1.1007" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb740c8de59 code=0x0 [ 780.826566][T10353] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.826762][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.826942][T10353] bridge_slave_0: entered allmulticast mode [ 780.832591][T10353] bridge_slave_0: entered promiscuous mode [ 780.918587][T10140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 780.977477][ T5795] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 780.996684][T10140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 780.997268][T10353] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.012277][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.012538][T10353] bridge_slave_1: entered allmulticast mode [ 781.015572][T10353] bridge_slave_1: entered promiscuous mode [ 781.117956][ T5795] usb 2-1: device descriptor read/64, error -71 [ 781.367491][ T5795] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 781.497528][ T5795] usb 2-1: device descriptor read/64, error -71 [ 781.508423][T10353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.519164][T10353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.585353][T10353] team0: Port device team_slave_0 added [ 781.595159][T10353] team0: Port device team_slave_1 added [ 781.608502][ T5795] usb usb2-port1: attempt power cycle [ 781.649575][T10353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.649588][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.649609][T10353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.651347][T10353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.651358][T10353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.651379][T10353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.140297][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.179226][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.183361][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.185268][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.186075][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.254617][ T5795] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 782.394787][ T5795] usb 2-1: device descriptor read/8, error -71 [ 783.197481][ T5795] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 783.224199][ T5795] usb 2-1: device descriptor read/8, error -71 [ 783.370089][ T5795] usb usb2-port1: unable to enumerate USB device [ 785.261755][ T8508] Bluetooth: hci1: command tx timeout [ 787.770352][ T8508] Bluetooth: hci1: command tx timeout [ 788.109779][T10353] hsr_slave_0: entered promiscuous mode [ 788.114394][T10353] hsr_slave_1: entered promiscuous mode [ 788.115562][T10353] debugfs: 'hsr0' already exists in 'hsr' [ 788.115590][T10353] Cannot create hsr debugfs directory [ 788.251692][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060345000: rx timeout, send abort [ 788.256662][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060345000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 788.257065][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880286b6000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 789.520673][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806184f800: rx timeout, send abort [ 789.521100][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806184f800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 789.521362][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806184d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 790.014664][ T8508] Bluetooth: hci1: command tx timeout [ 790.870550][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ff55000: rx timeout, send abort [ 790.871425][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ff55000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 790.871677][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060f39800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 792.138109][ T8508] Bluetooth: hci1: command tx timeout [ 793.117463][ T9154] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 793.148649][T10621] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 793.228557][ T5878] bridge_slave_1: left allmulticast mode [ 793.228599][ T5878] bridge_slave_1: left promiscuous mode [ 793.230455][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.256443][ T9154] usb 5-1: device descriptor read/64, error -71 [ 793.412551][ T5878] bridge_slave_0: left allmulticast mode [ 793.412682][ T5878] bridge_slave_0: left promiscuous mode [ 793.412956][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.487593][ T9154] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 793.637748][ T9154] usb 5-1: device descriptor read/64, error -71 [ 793.796018][ T9154] usb usb5-port1: attempt power cycle [ 794.477883][ T9154] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 794.550960][ T9154] usb 5-1: device descriptor read/8, error -71 [ 794.828687][ T9154] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 794.857881][ T9154] usb 5-1: device descriptor read/8, error -71 [ 794.969893][ T9154] usb usb5-port1: unable to enumerate USB device [ 801.002269][T10652] sctp: [Deprecated]: syz.3.1033 (pid 10652) Use of int in max_burst socket option deprecated. [ 801.002269][T10652] Use struct sctp_assoc_value instead [ 804.007437][ C0] sched: DL replenish lagged too much [ 805.118657][T10662] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1034'. [ 805.123925][T10662] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1034'. [ 805.160506][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 805.291754][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 805.331364][ T5878] bond0 (unregistering): Released all slaves [ 805.464293][T10621] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 805.490151][T10623] veth0_virt_wifi: entered promiscuous mode [ 805.645920][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 806.943815][T10683] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 807.043806][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 807.197588][ T31] usb 4-1: device descriptor read/64, error -71 [ 807.366032][T10683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 807.457491][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 807.590182][ T31] usb 4-1: device descriptor read/64, error -71 [ 807.634055][T10687] bond3: (slave veth5): Enslaving as an active interface with a down link [ 807.653724][T10689] bond3: (slave veth0_virt_wifi): making interface the new active one [ 807.655938][T10689] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 807.708235][ T31] usb usb4-port1: attempt power cycle [ 807.730212][T10691] bond3: (slave veth0_virt_wifi): Releasing active interface [ 808.047681][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 808.047887][ T5878] hsr_slave_0: left promiscuous mode [ 808.072658][ T5878] hsr_slave_1: left promiscuous mode [ 808.073456][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.092984][ T31] usb 4-1: device descriptor read/8, error -71 [ 808.118571][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.337471][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 808.557897][T10706] sctp: [Deprecated]: syz.4.1044 (pid 10706) Use of int in max_burst socket option deprecated. [ 808.557897][T10706] Use struct sctp_assoc_value instead [ 810.058880][ T31] usb 4-1: device descriptor read/8, error -71 [ 810.088429][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.088503][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.174866][ T31] usb usb4-port1: unable to enumerate USB device [ 810.505897][T10720] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 811.541592][ T5878] team0 (unregistering): Port device team_slave_1 removed [ 811.640821][ T5878] team0 (unregistering): Port device team_slave_0 removed [ 811.997505][ T5913] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 812.159159][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 812.161206][ T5913] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 812.161243][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.211514][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 812.211530][ T5913] pvrusb2: ********** [ 812.211534][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 812.211543][ T5913] pvrusb2: Important functionality might not be entirely working. [ 812.211550][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 812.211558][ T5913] pvrusb2: ********** [ 812.265727][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 812.369975][T10720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 812.401038][ T2391] pvrusb2: Invalid write control endpoint [ 812.417516][ T5913] usb 4-1: USB disconnect, device number 37 [ 812.421092][T10722] bond4: (slave veth0_virt_wifi): making interface the new active one [ 812.446570][T10722] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 812.491800][T10724] bond4: (slave veth0_virt_wifi): Releasing active interface [ 812.568142][ T2391] pvrusb2: Invalid write control endpoint [ 812.568156][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 812.568163][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 812.568169][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 812.568177][ T2391] pvrusb2: Device being rendered inoperable [ 812.568207][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 812.568244][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 812.571960][ T2391] pvrusb2: Attached sub-driver cx25840 [ 812.571973][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 812.571981][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 812.867600][T10739] sctp: [Deprecated]: syz.1.1053 (pid 10739) Use of int in max_burst socket option deprecated. [ 812.867600][T10739] Use struct sctp_assoc_value instead [ 813.145363][T10742] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1053'. [ 815.271178][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.271384][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.271647][T10556] bridge_slave_0: entered allmulticast mode [ 815.274551][T10556] bridge_slave_0: entered promiscuous mode [ 815.314352][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.314577][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.314817][T10556] bridge_slave_1: entered allmulticast mode [ 815.338171][T10556] bridge_slave_1: entered promiscuous mode [ 815.589089][T10556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.716565][T10556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.997595][ T821] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 816.005176][ T4910] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 816.052471][ T4910] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 816.689173][ T821] usb 2-1: device descriptor read/64, error -71 [ 816.751082][ T4910] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 816.952195][ T4910] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 816.953074][ T4910] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 817.121446][ T821] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 817.236697][T10556] team0: Port device team_slave_0 added [ 817.249344][ T821] usb 2-1: device descriptor read/64, error -71 [ 817.278566][T10556] team0: Port device team_slave_1 added [ 817.367669][ T821] usb usb2-port1: attempt power cycle [ 817.409507][T10556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.409525][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.409558][T10556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.411995][T10556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.412011][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.412041][T10556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.677758][ T5795] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 817.780747][ T821] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 817.810584][ T821] usb 2-1: device descriptor read/8, error -71 [ 817.943347][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 817.973078][ T5795] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 817.973110][ T5795] usb 5-1: config 0 has no interface number 0 [ 818.025058][ T5795] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 818.025092][ T5795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.025115][ T5795] usb 5-1: Product: syz [ 818.025130][ T5795] usb 5-1: Manufacturer: syz [ 818.025146][ T5795] usb 5-1: SerialNumber: syz [ 818.050388][ T5795] usb 5-1: config 0 descriptor?? [ 818.158324][ T821] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 818.181424][ T821] usb 2-1: device descriptor read/8, error -71 [ 818.288166][ T821] usb usb2-port1: unable to enumerate USB device [ 818.536159][ T5795] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 818.536739][ T5795] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 818.986755][ T5795] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 819.071664][ T5795] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 819.097451][ T8508] Bluetooth: hci2: command tx timeout [ 819.879620][T10556] hsr_slave_0: entered promiscuous mode [ 819.882039][T10556] hsr_slave_1: entered promiscuous mode [ 819.883230][T10556] debugfs: 'hsr0' already exists in 'hsr' [ 819.883259][T10556] Cannot create hsr debugfs directory [ 820.072798][T10823] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 820.286613][T10823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 820.351779][T10824] bond4: (slave veth0_virt_wifi): making interface the new active one [ 820.415049][T10824] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 820.473605][ T9] usb 5-1: USB disconnect, device number 41 [ 820.535062][T10826] bond4: (slave veth0_virt_wifi): Releasing active interface [ 821.252586][ T8508] Bluetooth: hci2: command tx timeout [ 823.578309][ T8508] Bluetooth: hci2: command tx timeout [ 824.147456][ T5586] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 824.627442][ T5586] usb 2-1: device descriptor read/64, error -71 [ 824.887666][ T5586] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 825.017666][ T5586] usb 2-1: device descriptor read/64, error -71 [ 825.132267][ T5586] usb usb2-port1: attempt power cycle [ 825.237439][ T5795] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 825.400160][ T5795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.400190][ T5795] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 825.403620][ T5795] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 825.403652][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.403673][ T5795] usb 4-1: Product: syz [ 825.403687][ T5795] usb 4-1: Manufacturer: syz [ 825.403701][ T5795] usb 4-1: SerialNumber: syz [ 825.477486][ T5586] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 825.479252][ T5795] usb 4-1: config 0 descriptor?? [ 825.505501][ T5586] usb 2-1: device descriptor read/8, error -71 [ 825.561133][T10876] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 825.610329][T10876] 8021q: adding VLAN 0 to HW filter on device bond5 [ 825.651200][T10876] bond5: (slave veth0_virt_wifi): making interface the new active one [ 825.656772][T10876] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 825.657862][ T8508] Bluetooth: hci2: command tx timeout [ 825.737606][ T5586] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 825.757846][ T5586] usb 2-1: device descriptor read/8, error -71 [ 826.066350][ T5586] usb usb2-port1: unable to enumerate USB device [ 826.108436][T10876] bond5: (slave veth0_virt_wifi): Releasing active interface [ 828.116521][ T31] usb 4-1: USB disconnect, device number 38 [ 828.423196][T10897] loop8: detected capacity change from 0 to 8 [ 828.441975][ T5902] bridge_slave_1: left allmulticast mode [ 828.442027][ T5902] bridge_slave_1: left promiscuous mode [ 828.442279][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.590113][T10897] Dev loop8: unable to read RDB block 8 [ 828.590170][T10897] loop8: unable to read partition table [ 828.590415][T10897] loop8: partition table beyond EOD, truncated [ 828.594202][T10897] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 828.706443][ T5902] bridge_slave_0: left allmulticast mode [ 828.706500][ T5902] bridge_slave_0: left promiscuous mode [ 828.706753][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.469079][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.569241][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 829.636681][ T5902] bond0 (unregistering): Released all slaves [ 829.964896][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 830.267465][ T198] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 830.400197][ T198] usb 5-1: device descriptor read/64, error -71 [ 830.637710][ T198] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 830.639129][ T5902] hsr_slave_0: left promiscuous mode [ 830.700419][ T5902] hsr_slave_1: left promiscuous mode [ 830.701471][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.748932][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.777483][ T198] usb 5-1: device descriptor read/64, error -71 [ 830.887868][ T198] usb usb5-port1: attempt power cycle [ 831.918996][T10934] random: crng reseeded on system resumption [ 832.057465][ T198] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 832.083884][ T198] usb 5-1: device descriptor read/8, error -71 [ 832.621692][ T36] audit: type=1326 audit(1783539349.437:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10929 comm="syz.1.1087" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb740c8de59 code=0x0 [ 832.684433][ T36] audit: type=1326 audit(1783539349.497:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10935 comm="syz.3.1088" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d988ade59 code=0x0 [ 832.707755][ T198] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 832.728194][ T198] usb 5-1: device descriptor read/8, error -71 [ 832.840334][ T198] usb usb5-port1: unable to enumerate USB device [ 833.389086][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 833.574546][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 834.369223][T10770] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.370910][T10770] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.371132][T10770] bridge_slave_0: entered allmulticast mode [ 834.374709][T10770] bridge_slave_0: entered promiscuous mode [ 834.405303][T10770] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.407770][T10770] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.408494][T10770] bridge_slave_1: entered allmulticast mode [ 834.440334][T10770] bridge_slave_1: entered promiscuous mode [ 834.656069][T10770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.689725][T10770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.631409][T10964] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 835.631436][T10964] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1097'. [ 835.916055][ T5586] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 836.085598][T10770] team0: Port device team_slave_0 added [ 836.098176][T10770] team0: Port device team_slave_1 added [ 836.159977][T10770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.159997][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.160028][T10770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.165243][T10770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.165262][T10770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.166540][T10770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.307493][ T198] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 836.531578][ T5586] usb 4-1: unable to get BOS descriptor or descriptor too short [ 836.532688][ T5586] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 836.532724][ T5586] usb 4-1: can't read configurations, error -71 [ 836.609596][ T198] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.609623][ T198] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.613273][ T198] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 836.613305][ T198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.613327][ T198] usb 2-1: Product: syz [ 836.613343][ T198] usb 2-1: Manufacturer: syz [ 836.613357][ T198] usb 2-1: SerialNumber: syz [ 836.674290][ T198] usb 2-1: config 0 descriptor?? [ 836.756181][T10977] netlink: 996 bytes leftover after parsing attributes in process `syz.4.1102'. [ 836.886020][ T198] usb 2-1: USB disconnect, device number 38 [ 837.519395][T10770] hsr_slave_0: entered promiscuous mode [ 837.523202][T10770] hsr_slave_1: entered promiscuous mode [ 837.526831][T10770] debugfs: 'hsr0' already exists in 'hsr' [ 837.526863][T10770] Cannot create hsr debugfs directory [ 837.814276][T10999] sctp: [Deprecated]: syz.4.1106 (pid 10999) Use of int in max_burst socket option deprecated. [ 837.814276][T10999] Use struct sctp_assoc_value instead [ 839.087570][T11006] sctp: [Deprecated]: syz.4.1108 (pid 11006) Use of int in max_burst socket option deprecated. [ 839.087570][T11006] Use struct sctp_assoc_value instead [ 841.856620][T11007] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1108'. [ 842.331225][T11014] zonefs (nullb0) ERROR: Not a zoned block device [ 842.377712][ T5902] bridge_slave_1: left allmulticast mode [ 842.377751][ T5902] bridge_slave_1: left promiscuous mode [ 842.378032][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.549729][ T5902] bridge_slave_0: left allmulticast mode [ 842.549766][ T5902] bridge_slave_0: left promiscuous mode [ 842.550059][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.020042][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.098353][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.159483][ T5902] bond0 (unregistering): Released all slaves [ 843.469960][T11030] netlink: 996 bytes leftover after parsing attributes in process `syz.4.1112'. [ 843.783003][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.203623][T11042] netlink: 'syz.1.1114': attribute type 83 has an invalid length. [ 844.445807][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.499554][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.524034][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.526456][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.811620][T11049] sctp: [Deprecated]: syz.3.1116 (pid 11049) Use of int in max_burst socket option deprecated. [ 844.811620][T11049] Use struct sctp_assoc_value instead [ 844.829199][ T5902] hsr_slave_0: left promiscuous mode [ 845.521693][ T5902] hsr_slave_1: left promiscuous mode [ 845.533249][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.580829][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.645918][ T4910] Bluetooth: hci5: command tx timeout [ 849.282613][ T4910] Bluetooth: hci5: command tx timeout [ 851.733825][ T4910] Bluetooth: hci5: command tx timeout [ 852.910295][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 852.985645][T11089] sctp: [Deprecated]: syz.3.1128 (pid 11089) Use of int in max_burst socket option deprecated. [ 852.985645][T11089] Use struct sctp_assoc_value instead [ 852.999501][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 853.820997][ T4910] Bluetooth: hci5: command tx timeout [ 854.010440][T11096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.490744][T11111] sctp: [Deprecated]: syz.1.1133 (pid 11111) Use of int in max_burst socket option deprecated. [ 856.490744][T11111] Use struct sctp_assoc_value instead [ 858.431501][T11119] sctp: [Deprecated]: syz.1.1136 (pid 11119) Use of int in max_burst socket option deprecated. [ 858.431501][T11119] Use struct sctp_assoc_value instead [ 858.707898][T11123] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1136'. [ 859.488663][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 859.615396][T10770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 859.649993][ T31] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 859.650028][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 859.653603][ T31] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 859.653635][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.653657][ T31] usb 4-1: Product: syz [ 859.653673][ T31] usb 4-1: Manufacturer: syz [ 859.653698][ T31] usb 4-1: SerialNumber: syz [ 859.738004][ T31] usb 4-1: config 0 descriptor?? [ 859.755165][ T31] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 859.839147][ T5586] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 859.963530][T10770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.992284][ T5586] usb 5-1: unable to get BOS descriptor or descriptor too short [ 859.993145][ T5586] usb 5-1: not running at top speed; connect to a high speed hub [ 859.998815][ T5586] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 859.998843][ T5586] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 859.998865][ T5586] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 859.998887][ T5586] usb 5-1: config 14 has no interface number 0 [ 859.998904][ T5586] usb 5-1: config 14 has no interface number 1 [ 859.998977][ T5586] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 859.999005][ T5586] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 859.999033][ T5586] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 859.999062][ T5586] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 859.999155][ T5586] usb 5-1: config 14 interface 57 has no altsetting 0 [ 859.999176][ T5586] usb 5-1: config 14 interface 228 has no altsetting 0 [ 860.140400][T10770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 860.174699][ T5586] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 860.174734][ T5586] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.174757][ T5586] usb 5-1: Product: syz [ 860.174773][ T5586] usb 5-1: Manufacturer: syz [ 860.174787][ T5586] usb 5-1: SerialNumber: syz [ 860.558172][T10770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.001724][ T31] gspca_sunplus: reg_r err -110 [ 861.001848][ T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 861.228997][T10770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 861.353535][T10770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.355600][T10770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 861.413953][ T5586] legousbtower 5-1:14.57: interrupt endpoints not found [ 862.203256][ T5586] legousbtower 5-1:14.228: get version request failed: -121 [ 862.203462][ T5586] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 862.280496][T10770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.362374][ T5709] usb 4-1: USB disconnect, device number 41 [ 862.403582][ T31] usb 5-1: USB disconnect, device number 46 [ 863.826518][ T5709] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 864.048890][T10770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.107423][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 864.109428][ T5709] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 864.109459][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.162177][ T5709] pvrusb2: Hardware description: Terratec Grabster AV400 [ 864.162210][ T5709] pvrusb2: ********** [ 864.162240][ T5709] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 864.162254][ T5709] pvrusb2: Important functionality might not be entirely working. [ 864.162264][ T5709] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 864.162276][ T5709] pvrusb2: ********** [ 864.506939][ T2391] pvrusb2: Invalid write control endpoint [ 865.230955][T10770] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.343351][ T9] usb 4-1: USB disconnect, device number 42 [ 865.622290][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.624035][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.694541][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.694761][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.797515][ T11] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 866.257992][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 866.442747][ T2391] pvrusb2: Invalid write control endpoint [ 866.442765][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 866.442777][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 866.442787][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 866.442799][ T2391] pvrusb2: Device being rendered inoperable [ 866.442845][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 866.442897][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 866.444141][ T2391] pvrusb2: Attached sub-driver cx25840 [ 866.444153][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 866.444165][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 866.591852][ T11] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 866.591916][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.746658][ T11] pvrusb2: Hardware description: Terratec Grabster AV400 [ 866.746679][ T11] pvrusb2: ********** [ 866.746687][ T11] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 866.746700][ T11] pvrusb2: Important functionality might not be entirely working. [ 866.746710][ T11] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 866.746722][ T11] pvrusb2: ********** [ 866.993906][ T2391] pvrusb2: Invalid write control endpoint [ 867.247754][ T11] usb 2-1: USB disconnect, device number 39 [ 867.378941][ T2391] pvrusb2: Invalid write control endpoint [ 867.378960][ T2391] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 867.378971][ T2391] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 867.378980][ T2391] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 867.378992][ T2391] pvrusb2: Device being rendered inoperable [ 867.379920][ T2391] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 867.379983][ T2391] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 867.381150][ T2391] pvrusb2: Attached sub-driver cx25840 [ 867.381162][ T2391] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 867.381174][ T2391] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 868.078729][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.078953][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.079155][T11037] bridge_slave_0: entered allmulticast mode [ 868.082167][T11037] bridge_slave_0: entered promiscuous mode [ 868.096429][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 868.163729][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.163856][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.164057][T11037] bridge_slave_1: entered allmulticast mode [ 868.166083][T11037] bridge_slave_1: entered promiscuous mode [ 868.197447][ T31] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 868.263802][T11200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 868.269786][T11200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 868.447777][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 868.749197][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 868.750833][ T9] usb 4-1: config 251 has an invalid interface number: 139 but max is 0 [ 868.750863][ T9] usb 4-1: config 251 has no interface number 0 [ 868.750912][ T9] usb 4-1: config 251 interface 139 altsetting 64 endpoint 0x9 has an invalid bInterval 255, changing to 11 [ 868.750944][ T9] usb 4-1: config 251 interface 139 has no altsetting 0 [ 868.754012][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1033, bcdDevice=fb.34 [ 868.754044][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.754068][ T9] usb 4-1: Product: syz [ 868.754083][ T9] usb 4-1: Manufacturer: syz [ 868.754098][ T9] usb 4-1: SerialNumber: syz [ 868.990696][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 868.991527][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 868.993118][ T31] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 868.993144][ T31] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 868.993174][ T31] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 868.993195][ T31] usb 5-1: config 14 has no interface number 0 [ 868.993213][ T31] usb 5-1: config 14 has no interface number 1 [ 868.993285][ T31] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 868.993312][ T31] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 868.993341][ T31] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.993370][ T31] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 868.993400][ T31] usb 5-1: config 14 interface 57 has no altsetting 0 [ 868.993420][ T31] usb 5-1: config 14 interface 228 has no altsetting 0 [ 868.996691][ T31] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 868.996723][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.996745][ T31] usb 5-1: Product: syz [ 868.996760][ T31] usb 5-1: Manufacturer: syz [ 868.996775][ T31] usb 5-1: SerialNumber: syz [ 869.204553][ T9] ldusb 4-1:251.139: Interrupt in endpoint not found [ 869.237358][ T9] usb 4-1: USB disconnect, device number 43 [ 869.601017][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.603583][ T31] legousbtower 5-1:14.57: interrupt endpoints not found [ 869.644804][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.927835][T11037] team0: Port device team_slave_0 added [ 869.940875][T11213] netlink: 'syz.1.1157': attribute type 1 has an invalid length. [ 869.998205][ T31] legousbtower 5-1:14.228: get version request failed: -121 [ 869.998407][ T31] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -121 [ 870.142120][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.142199][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.188207][T11213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.213767][T11037] team0: Port device team_slave_1 added [ 870.221216][ T31] usb 5-1: USB disconnect, device number 47 [ 870.432297][T11216] bond1: (slave veth3): Enslaving as an active interface with a down link [ 870.455857][T11217] bond1: (slave veth0_virt_wifi): making interface the new active one [ 870.460122][T11217] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 870.559324][T11220] bond1: (slave veth0_virt_wifi): Releasing active interface [ 870.873181][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.873201][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.873234][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.946292][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.946312][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.946343][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.223509][T11037] hsr_slave_0: entered promiscuous mode [ 872.236529][T11037] hsr_slave_1: entered promiscuous mode [ 872.254952][T11037] debugfs: 'hsr0' already exists in 'hsr' [ 872.254975][T11037] Cannot create hsr debugfs directory [ 872.315108][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 873.068521][T11232] random: crng reseeded on system resumption [ 873.104870][ T36] audit: type=1326 audit(1783539389.907:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11229 comm="syz.4.1160" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498879de59 code=0x0 [ 873.894337][T11244] loop8: detected capacity change from 0 to 7 [ 874.200238][T11244] Dev loop8: unable to read RDB block 7 [ 874.200295][T11244] loop8: unable to read partition table [ 874.200511][T11244] loop8: partition table beyond EOD, truncated [ 874.202096][T11244] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 877.432751][ T8508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 877.486521][ T8508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 877.510641][ T8508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 877.512103][ T8508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 877.512884][ T8508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 878.017007][T11282] sctp: [Deprecated]: syz.4.1172 (pid 11282) Use of int in max_burst socket option deprecated. [ 878.017007][T11282] Use struct sctp_assoc_value instead [ 878.195757][T11287] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1173'. [ 878.310463][ T5902] bridge_slave_1: left allmulticast mode [ 878.310501][ T5902] bridge_slave_1: left promiscuous mode [ 878.310788][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.419313][ T5902] bridge_slave_0: left allmulticast mode [ 878.419351][ T5902] bridge_slave_0: left promiscuous mode [ 878.419626][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.664157][T11307] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.817540][ T4910] Bluetooth: hci1: command tx timeout [ 880.070762][T11313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 881.923702][ T4910] Bluetooth: hci1: command tx timeout [ 882.272502][ T5915] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 882.590753][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 882.593255][ T5915] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.593292][ T5915] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.593318][ T5915] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 882.593349][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 882.593395][ T5915] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 882.593421][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.689652][ T5915] usb 2-1: config 0 descriptor?? [ 882.726129][ T5902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.798186][ T5902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.840214][ T5902] bond0 (unregistering): Released all slaves [ 883.741834][ T5915] usbhid 2-1:0.0: can't add hid device: -71 [ 884.004353][ T5915] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 884.009282][ T4910] Bluetooth: hci1: command tx timeout [ 884.030979][ T5915] usb 2-1: USB disconnect, device number 40 [ 884.392088][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 884.654941][ T5902] hsr_slave_0: left promiscuous mode [ 884.687688][ T5902] hsr_slave_1: left promiscuous mode [ 884.688878][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 884.738401][ T5902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.580989][ T5902] team0 (unregistering): Port device team_slave_1 removed [ 885.662152][ T5902] team0 (unregistering): Port device team_slave_0 removed [ 886.060517][ T4910] Bluetooth: hci1: command tx timeout [ 886.465841][T11362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.437530][ T9154] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 890.410739][ T9154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.410768][ T9154] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 890.414761][ T9154] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 890.414783][ T9154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.414797][ T9154] usb 4-1: Product: syz [ 890.414807][ T9154] usb 4-1: Manufacturer: syz [ 890.414818][ T9154] usb 4-1: SerialNumber: syz [ 890.481046][ T9154] usb 4-1: config 0 descriptor?? [ 890.733541][ T31] usb 4-1: USB disconnect, device number 44 [ 891.017445][T11388] zonefs (nullb0) ERROR: Not a zoned block device [ 891.927508][ T5709] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 892.491325][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.491355][ T5709] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.529328][ T5709] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 892.529360][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.529383][ T5709] usb 4-1: Product: syz [ 892.529398][ T5709] usb 4-1: Manufacturer: syz [ 892.529421][ T5709] usb 4-1: SerialNumber: syz [ 892.538391][ T5709] usb 4-1: config 0 descriptor?? [ 892.921908][ T5709] usb 4-1: USB disconnect, device number 45 [ 896.897227][T11441] zonefs (nullb0) ERROR: Not a zoned block device [ 898.226630][ T5913] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 898.385636][ T9154] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 898.457591][ T5913] usb 2-1: device descriptor read/64, error -71 [ 898.707398][ T5913] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 898.839102][ T5913] usb 2-1: device descriptor read/64, error -71 [ 898.859981][ T9154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.860012][ T9154] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 898.862713][ T9154] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 898.862745][ T9154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.862767][ T9154] usb 4-1: Product: syz [ 898.862781][ T9154] usb 4-1: Manufacturer: syz [ 898.862795][ T9154] usb 4-1: SerialNumber: syz [ 898.878857][ T9154] usb 4-1: config 0 descriptor?? [ 898.958084][ T5913] usb usb2-port1: attempt power cycle [ 899.243258][T11273] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.243401][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.243642][T11273] bridge_slave_0: entered allmulticast mode [ 899.252299][T11273] bridge_slave_0: entered promiscuous mode [ 899.447599][T11273] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.447741][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.447988][T11273] bridge_slave_1: entered allmulticast mode [ 899.451264][T11273] bridge_slave_1: entered promiscuous mode [ 899.537828][ T5913] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 899.558257][ T5913] usb 2-1: device descriptor read/8, error -71 [ 900.559562][ T9] usb 4-1: USB disconnect, device number 46 [ 902.190833][T11273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.216182][T11273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.450362][T11504] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1218'. [ 902.890118][T11273] team0: Port device team_slave_0 added [ 902.938786][T11511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.341614][T11273] team0: Port device team_slave_1 added [ 903.457492][ T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 903.612264][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 903.613063][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 903.614690][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 903.614718][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 903.614749][ T9] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 903.614769][ T9] usb 4-1: config 14 has no interface number 0 [ 903.614786][ T9] usb 4-1: config 14 has no interface number 1 [ 903.614858][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 903.614884][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 903.614909][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.614934][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 903.614960][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 903.614979][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 903.650056][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 903.650088][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.650110][ T9] usb 4-1: Product: syz [ 903.650124][ T9] usb 4-1: Manufacturer: syz [ 903.650138][ T9] usb 4-1: SerialNumber: syz [ 904.201959][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 904.616247][ T9] legousbtower 4-1:14.228: get version request failed: -121 [ 904.616427][ T9] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 904.661504][ T9] ================================================================== [ 904.661599][ T9] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 904.661768][ T9] Read of size 8 at addr ff[ 904.661768][ T9] Read of size 8 at addr ffffc90006b11008 by task kworker/0:0/9 [ 904.661781][ T9] [ 904.661839][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.661871][ T9] Tainted: [L]=SOFTLOCKUP [ 904.661877][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.661888][ T9] Workqueue: usb_hub_wq hub_event [ 904.661976][ T9] Call Trace: [ 904.661983][ T9] [ 904.662035][ T9] dump_stack_lvl+0xe8/0x150 [ 904.662134][ T9] print_address_description+0x55/0x1e0 [ 904.662172][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.662205][ T9] print_report+0x58/0x70 [ 904.662229][ T9] kasan_report+0x117/0x150 [ 904.662296][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.662326][ T9] __list_add_valid_or_report+0x4e/0x130 [ 904.662352][ T9] kcov_remote_stop+0x457/0x680 [ 904.662444][ T9] hub_event+0x4789/0x4cf0 [ 904.662489][ T9] ? __pfx_hub_event+0x10/0x10 [ 904.662513][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 904.662584][ T9] ? rcu_is_watching+0x15/0xb0 [ 904.662638][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 904.662657][ T9] process_scheduled_works+0xa8e/0x14e0 [ 904.662686][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 904.662708][ T9] ? assign_work+0x3cf/0x5d0 [ 904.662727][ T9] worker_thread+0xa47/0xfb0 [ 904.662756][ T9] kthread+0x388/0x470 [ 904.662813][ T9] ? __pfx_worker_thread+0x10/0x10 [ 904.662831][ T9] ? __pfx_kthread+0x10/0x10 [ 904.662853][ T9] ret_from_fork+0x514/0xb70 [ 904.662934][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 904.662958][ T9] ? __switch_to+0xc89/0x1420 [ 904.663018][ T9] ? __pfx_kthread+0x10/0x10 [ 904.663041][ T9] ret_from_fork_asm+0x1a/0x30 [ 904.663066][ T9] [ 904.663095][ T9] [ 904.663100][ T9] The buggy address belongs to a vmalloc virtual mapping [ 904.663156][ T9] Memory state around the buggy address: [ 904.663167][ T9] ffffc90006b10f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 904.663180][ T9] ffffc90006b10f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 904.663192][ T9] >ffffc90006b11000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 904.663200][ T9] ^ [ 904.663231][ T9] ffffc90006b11080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 904.663241][ T9] ffffc90006b11100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 904.663249][ T9] ================================================================== [ 904.685615][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 904.685675][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.685756][ T9] Tainted: [L]=SOFTLOCKUP [ 904.685776][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.685810][ T9] Workqueue: usb_hub_wq hub_event [ 904.685906][ T9] Call Trace: [ 904.685927][ T9] [ 904.685948][ T9] vpanic+0x56c/0xa60 [ 904.686009][ T9] ? __pfx_vpanic+0x10/0x10 [ 904.686060][ T9] ? __pfx___schedule+0x10/0x10 [ 904.686301][ T9] panic+0xc5/0xd0 [ 904.686351][ T9] ? __pfx_panic+0x10/0x10 [ 904.686402][ T9] ? preempt_schedule_thunk+0x16/0x40 [ 904.686479][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.686578][ T9] check_panic_on_warn+0x89/0xb0 [ 904.686678][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.686709][ T9] end_report+0x73/0x170 [ 904.686780][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.686887][ T9] kasan_report+0x128/0x150 [ 904.686949][ T9] ? __list_add_valid_or_report+0x4e/0x130 [ 904.687039][ T9] __list_add_valid_or_report+0x4e/0x130 [ 904.687102][ T9] kcov_remote_stop+0x457/0x680 [ 904.687201][ T9] hub_event+0x4789/0x4cf0 [ 904.687281][ T9] ? __pfx_hub_event+0x10/0x10 [ 904.687312][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 904.687372][ T9] ? rcu_is_watching+0x15/0xb0 [ 904.687434][ T9] ? process_scheduled_works+0xa20/0x14e0 [ 904.687495][ T9] process_scheduled_works+0xa8e/0x14e0 [ 904.687596][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 904.687665][ T9] ? assign_work+0x3cf/0x5d0 [ 904.687730][ T9] worker_thread+0xa47/0xfb0 [ 904.687824][ T9] kthread+0x388/0x470 [ 904.687891][ T9] ? __pfx_worker_thread+0x10/0x10 [ 904.687952][ T9] ? __pfx_kthread+0x10/0x10 [ 904.688031][ T9] ret_from_fork+0x514/0xb70 [ 904.688156][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 904.688208][ T9] ? __switch_to+0xc89/0x1420 [ 904.688297][ T9] ? __pfx_kthread+0x10/0x10 [ 904.688368][ T9] ret_from_fork_asm+0x1a/0x30 [ 904.688445][ T9] [ 904.689061][ T9] Kernel Offset: disabled