last executing test programs: 7m30.147081897s ago: executing program 4 (id=285): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt(r0, 0x7, 0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$netlink(0x10, 0x3, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000015c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001b00)=ANY=[@ANYBLOB="d4100000", @ANYRES16=r3, @ANYBLOB="08000000040000100000014b44d126775dbf6d7e0000001408000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x10d4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, 0xffffffffffffffff, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r5, 0x12574000) 7m26.470116841s ago: executing program 4 (id=306): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 7m24.952552469s ago: executing program 4 (id=317): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 7m21.092174146s ago: executing program 4 (id=326): socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000007a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYRES16], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRES8, @ANYRESHEX], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x24008001) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() gettid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x84, 0x3, 0x4038a0d, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x20, 0x0, 0x0, 0x4}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0) 7m19.417505852s ago: executing program 4 (id=334): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x0, 0x0, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='configfs\x00', 0xa0c802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000002d80), 0x0, 0x40000004) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 7m16.710172677s ago: executing program 4 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7m0.078881835s ago: executing program 32 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 13.816105952s ago: executing program 6 (id=1677): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0xe9) r0 = syz_open_dev$video4linux(&(0x7f0000000280), 0x401, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f000000b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0017"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) close(r0) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) 12.014745518s ago: executing program 6 (id=1679): syz_open_dev$usbfs(0x0, 0x76, 0x4040) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1) 11.387402161s ago: executing program 2 (id=1682): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 11.244120695s ago: executing program 2 (id=1683): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x86fa, 0x3}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) wait4(r3, 0x0, 0x8, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4f22, 0xffff7ffe, @local, 0xb}, 0x1c) listen(r2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x9, &(0x7f00000002c0)={0x77359400}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x1, 0x0, 0x3ff}}}}}}}, 0x0) 10.92410181s ago: executing program 6 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) 10.860078864s ago: executing program 3 (id=1685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x4, &(0x7f0000000600)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xaf}, @map_fd={0x18, 0x7}], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 10.148731245s ago: executing program 5 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000440), 0x4) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x88, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @generic="d210c1611bac3fd74756fc9f1be5b79addaab82c231592d7677af07c80b75fc59e340a13363d8bc361107bc9c1ba77b085f6374e5f23770b8f9a58bc8c6db4823d56b9df661d7b83259f6624ac91c7a5eea152c3abf7cff86520cd8543327ba4bec70fdb6bbb6eb2e1d8f2"]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 8.806152066s ago: executing program 1 (id=1688): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0x12) pipe(&(0x7f00000005c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.481926872s ago: executing program 5 (id=1689): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b1b, &(0x7f0000000040)) 8.478828898s ago: executing program 1 (id=1690): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 8.154798582s ago: executing program 0 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000001000"/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x40001, 0x0) write(r4, &(0x7f0000000600)='1(', 0x2) 8.142616789s ago: executing program 5 (id=1693): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8.076759443s ago: executing program 6 (id=1694): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54) 6.072723112s ago: executing program 1 (id=1695): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) recvfrom$l2tp(r0, &(0x7f0000000100)=""/147, 0x93, 0x40002000, 0x0, 0x0) 6.018931736s ago: executing program 6 (id=1696): syz_open_dev$usbfs(0x0, 0x76, 0x4040) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1) 5.437237138s ago: executing program 0 (id=1697): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 5.048007071s ago: executing program 3 (id=1698): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000006c0)="3b000000010006", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x4040000) socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESDEC], 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x6, 0x1, &(0x7f0000000340)) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x24004080}, 0x4000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 5.033799398s ago: executing program 3 (id=1699): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) socket(0x40000000015, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 4.68647292s ago: executing program 5 (id=1700): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) r1 = fsopen(0x0, 0xbd3d92d421aeb6fd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(r0, 0x23, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8004}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = fsmount(r1, 0x0, 0x9) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00010000000000000000000700000088d9b338b39b490c4549914f6b3b0d4a70f1f3a9f8469dd0892658dd968c949164fef46b735a6e994002014b7cb201ebd891f92f4e97a2045553d895bf5c5f8121721cc85ec838e8e24e73f14709e08eac032e6d293635eba883346c762375551b8a263272b254", @ANYRES32=r8, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) r10 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_crypto(r10, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0xf2901ca589b3d74b}, 0x4) poll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, 0x400) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) 4.408087946s ago: executing program 1 (id=1701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x37}, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000000)) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbee6, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) socket$pppoe(0x18, 0x1, 0x0) 4.39611316s ago: executing program 6 (id=1702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) open(0x0, 0x40, 0x389) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, 0x0) 4.373088484s ago: executing program 2 (id=1703): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e1fe4e5c38c458170e7e5d38a2fa77262a334b70da13159214b59e99043f2d45738cfe619d4e54d9d9d52faad4185dc1461e3de1d4a8e2bac117f496b9198352ed12b367de480013f50733fcce28686f100f105d037fe1d3c387164fd3bb6d9f758e8c35de274cc824e0ef8a4ec4d740cb37a646300158bd9f137d0712242f3ff01641eedbf6207cc3e7b9314e8cd44581f210ae9980710a38a426305d71a732645e48a5faf121177bb16c0253dbba4b6495b2fdf147bf3557edbf1134ad8135eddb75535613f0c13e995f458d7117b7b4484be02dda974d1f894074f5258bc3416e61b41949c2bca7746dd9edc6fc1d0b9305c7ee799be795a7df68f76872046beb4e1ff6d5a62a7177902fdb74cb5d1e104b8852fd4db5ced74b73b68eb138695110452ddf5def0a6961d7010d1b170391e5897f32102ebade663ec2804708f63becf2b7595461d10062df096794e1cb4232cda841f3a86a6d5e50fe8db194bfb3721c9bc3e29b176f3554f1010776afe8fe89b5869bb25e5ffe24ad26f382b7176fd85e3d19a2d8e58031e1939ed39c96c4f2f967f75049ee7e36469b8c010992623f8248cff1c362bbb12e8ed5fd05b72fb1f391b4c13d06a453f2169bea0cc67768e06311494a3dc736c80ef644fc0d09dae7dfc09de2b7f6d0b21734486503b74bd3387ffa9a5da1b39a2ec9c410a4b2d4ec1f8ef1d3a7ced2637878b038da8d69b32a3e402580e5b746f8e7f930ff478e6b15f475b6b96a25cd8f55bdd73bc483ee5625b56b81f8d9183bc36a5c4c0974db6ad499bf1fcccb994c3defccf1324543260fb1a790ef60d50da4f955783af41066d51abdf7a566c2b2c876e0199e7b920068f226c7a5f14b65b3dbd7fb244c3fb1660740b5f849942e468af39e5a9bc80a6075878dfac23d0ae839a0e509448130e7dabadd7c494b64e67be6400ea34b097bfc578deb3c5ebefa9c1019ef65bf641c9388d9b29f6c9c2e5b8b81fcfdd94059d9a21c80f318d9675721a31ca77a4920b06cb744e96ae74ef66b4dfbe5d1085c9485abf9356d966cb63a75a250dc4432b89ec09dff3531613e12694abdd61d270ab34fba12ae1db3ed45fbc87eb1725f962de4922a64c82ed5d4b652ad926be7330f15fee7a6d53719f6231be26e7593454eabf6fdfe940f04c8cdf022ce9e278c0e2ce9aa9285594972d2b910cedf1d956976f9e6d9571210e4939821c9b68146925e2780db8e1fe6872ba1e178dfb627d9623b5c700cae1d3ce830422b9d906060b28d0956af355a2ce927c9cde8391b43fdbccd428403ee758de7c09de5a2c8eb2dac85a0e056b1ce291da6e54ea1e669b5eee9ca1043aa4f92368b39920f23f2ce3ea3906412de447a0ba28474f2b839a0413e1a0c5c1e7e818b6ae483fbf9a5fcf9367cf9badb8d2040e54dd868a672f3d24fc0e9a77648acb524999c46061b5a71cc8e0b3e66e5421b4e4f8ade64015793ac3949f7c0a3bd64b8e1d2bb99d3e51b5a295b1d2ae2de914a8d6309d9faf5f6b10edb2d9c1dad7eef2ade703d92f06f811cc8682fb98ba2ec324d9ffb23ccff4d231b459214004c7c3afd1f43265f3e40dfc15053103c220347ce2c480ffc73e500314bf7125baf8047ae9521a9c23b53983366fa69466d0bbd00374f703d8e1645849f024b5f2e6affcd99d0ac335e91daf78d5966b081f82762f050b090847f48696736db6ca4afa74e40c8be0fa72a4f8dfc1ba573ee763c9f995fe9fb17c2d1e6ef167c9f15d3bce4ea8a4634628e38f2460d0387c60cabdc6eb6c7223644ab5375a12b8bc39beec9d", 0x5f6}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.296706584s ago: executing program 0 (id=1704): openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 3.853324444s ago: executing program 1 (id=1705): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') 3.838607789s ago: executing program 2 (id=1706): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'wlan1\x00', {}, 0x26}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 3.759468148s ago: executing program 0 (id=1707): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) 3.412274689s ago: executing program 3 (id=1708): openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) readv(0xffffffffffffffff, &(0x7f0000000680), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r2, 0x0, 0xfffffffffffffda0, 0x80000) 2.639471424s ago: executing program 2 (id=1709): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000019300)={0x0, @in6={{0xa, 0x4e23, 0x7, @private2}}, 0x0, 0xef, 0x7, 0x5, 0x8, 0x9, 0x41}, 0x9c) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x141) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) semop(0x0, &(0x7f0000000000), 0x1) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 1.949709493s ago: executing program 0 (id=1710): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x0, 0xb1, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0xffffef01, 0x0}) 1.879247265s ago: executing program 5 (id=1711): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200)='0x1234\n', 0x7) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='0x56', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='0\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r4, 0x0, 0x0) close(r4) write(0xffffffffffffffff, &(0x7f0000000f00)='0\n', 0x2) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) nanosleep(&(0x7f0000001700)={0x0, 0x5f5e100}, 0x0) 1.193599899s ago: executing program 3 (id=1712): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(0x0, 0x7) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.148646926s ago: executing program 0 (id=1713): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) listen(r2, 0x0) accept$nfc_llcp(r2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DVR_DMX_QBUF(0xffffffffffffffff, 0xc0186f3f, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) 1.045624419s ago: executing program 1 (id=1714): syz_open_dev$usbfs(0x0, 0x76, 0x4040) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1) 986.235163ms ago: executing program 5 (id=1715): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x7, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x1, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0xd12, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x2, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 892.609581ms ago: executing program 2 (id=1716): mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000001500)='dummy_udc.0', 0xb) close(r0) setns(0xc9, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', 0x41}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001900)={'syzkaller0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000001b00)='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTU', 0x2f, 0x0, &(0x7f0000001c00)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 0s ago: executing program 3 (id=1717): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x37}, &(0x7f0000000180), &(0x7f0000000100), &(0x7f0000000000)) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbee6, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) socket$pppoe(0x18, 0x1, 0x0) kernel console output (not intermixed with test programs): type 2 family 0 port 6081 - 0 [ 97.030792][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.045096][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.058488][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.082531][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.137759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 98.547903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.880181][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.896202][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.643428][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.954838][ T5894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.023200][ T5894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.734155][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.786117][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.825494][ T5911] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 100.881182][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.913975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.001592][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.034016][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.185183][ T50] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 102.414436][ T5932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 103.372159][ T5937] gretap1: entered promiscuous mode [ 103.468651][ T5907] udevd[5907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 103.555360][ T5907] udevd[5907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.458156][ T5780] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.470997][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 104.625017][ T5780] usb 5-1: Using ep0 maxpacket: 8 [ 104.658779][ T5780] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 104.693093][ T5780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.734615][ T5780] usb 5-1: config 0 has no interface number 0 [ 104.748678][ T5780] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 104.764386][ T5780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.005509][ T5780] usb 5-1: config 0 descriptor?? [ 105.030371][ T5780] ldusb 5-1:0.55: Interrupt in endpoint not found [ 105.239598][ T50] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 105.255261][ T50] Bluetooth: hci4: Injecting HCI hardware error event [ 105.263648][ T5638] Bluetooth: hci4: hardware error 0x00 [ 105.425321][ T5780] usb 5-1: USB disconnect, device number 2 [ 106.064783][ T6018] gretap1: entered promiscuous mode [ 106.383839][ T6035] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 106.462710][ T6037] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 106.472289][ T6037] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 106.481951][ T6037] netlink: 'syz.4.63': attribute type 29 has an invalid length. [ 107.319808][ T5638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.433972][ T5980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.739967][ T6052] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.69'. [ 109.094631][ T6070] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 110.165393][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 110.401271][ T989] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.548136][ T989] usb 5-1: device descriptor read/64, error -71 [ 111.038635][ T989] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.199403][ T989] usb 5-1: device descriptor read/64, error -71 [ 111.221624][ T6119] input: syz1 as /devices/virtual/input/input5 [ 111.368162][ T989] usb usb5-port1: attempt power cycle [ 111.435000][ T5765] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 111.576326][ T6129] Bluetooth: MGMT ver 1.23 [ 111.614602][ T5765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.644804][ T6132] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 111.652025][ T5765] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 111.689412][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.739360][ T5765] usb 6-1: config 0 descriptor?? [ 111.747795][ T989] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.811444][ T989] usb 5-1: device descriptor read/8, error -71 [ 111.883756][ T132] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.907288][ T6149] warning: `syz.1.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.960116][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.969260][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.189415][ T5765] ath6kl: Failed to read usb control message: -71 [ 112.227394][ T989] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.698415][ T989] usb 5-1: device descriptor read/8, error -71 [ 112.811348][ T5765] ath6kl: Unable to read the bmi data from the device: -71 [ 112.820161][ T5765] ath6kl: Unable to recv target info: -71 [ 112.828970][ T5765] ath6kl: Failed to init ath6kl core: -71 [ 112.837349][ T5765] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 113.022312][ T989] usb usb5-port1: unable to enumerate USB device [ 113.167920][ T5765] usb 6-1: USB disconnect, device number 2 [ 113.518439][ T6177] 9p: Bad value for 'wfdno' [ 114.192153][ T6180] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 114.723561][ T6137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.187739][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.378014][ T9] usb 5-1: device descriptor read/64, error -71 [ 116.513408][ T5638] Bluetooth: hci5: command tx timeout [ 117.078899][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.087982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.158493][ T1235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.403537][ T6218] evm: overlay not supported [ 117.429623][ T9] usb 5-1: device descriptor read/64, error -71 [ 117.531797][ T1235] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.551657][ T9] usb usb5-port1: attempt power cycle [ 117.607749][ T1235] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 117.661594][ T1235] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 117.720734][ T1235] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 117.775878][ T1235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.821459][ T3333] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 117.882160][ T1235] sisusb 3-1:1.0: Invalid USB2VGA device [ 117.888981][ T1235] sisusb 3-1:1.0: probe with driver sisusb failed with error -22 [ 118.083579][ T1235] usb 3-1: USB disconnect, device number 2 [ 120.919963][ T6223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.681928][ T30] audit: type=1326 audit(1784987993.467:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 121.869715][ T30] audit: type=1326 audit(1784987993.477:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 122.577848][ T30] audit: type=1326 audit(1784987993.637:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 122.616912][ T30] audit: type=1326 audit(1784987993.637:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 122.759921][ T30] audit: type=1326 audit(1784987993.637:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 122.983820][ T30] audit: type=1326 audit(1784987993.637:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 123.351891][ T30] audit: type=1326 audit(1784987993.637:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 123.972124][ T30] audit: type=1326 audit(1784987993.637:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.2.147" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2199de99 code=0x7ffc0000 [ 124.180118][ T94] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 125.888150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.297735][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 126.306741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.359225][ T6318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.578776][ T989] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 128.029765][ T989] usb 3-1: no configurations [ 128.044402][ T989] usb 3-1: can't read configurations, error -22 [ 128.148094][ T6351] x_tables: duplicate underflow at hook 2 [ 128.256480][ T6347] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 128.277400][ T6347] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 128.307726][ T6366] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 128.319321][ T6347] netlink: 1 bytes leftover after parsing attributes in process `syz.4.168'. [ 128.383059][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.173'. [ 129.595689][ T6389] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 129.617185][ T6386] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 130.558039][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.693540][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.718994][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 130.740408][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.775877][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.080066][ T9] usb 4-1: config 0 has no interface number 0 [ 131.131240][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.287710][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.307727][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.422293][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.664437][ T9] usb 4-1: config 0 descriptor?? [ 131.716682][ T6422] team0: Port device syz_tun added [ 131.769035][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 131.777018][ T6426] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 131.885757][ T6426] bond1: (slave veth0_to_bond): making interface the new active one [ 131.963374][ T5780] usb 4-1: USB disconnect, device number 2 [ 131.983401][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 132.041021][ T6426] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 132.201492][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.257770][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.384648][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 133.977875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.473626][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 136.710026][ T6472] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 136.724726][ T6472] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 136.742761][ T6472] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 136.782818][ T6472] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.885319][ T6472] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 137.187837][ T6468] gretap1: entered promiscuous mode [ 137.800148][ T6483] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 138.822663][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 138.952316][ T6484] bond1: (slave veth0_to_bond): making interface the new active one [ 139.009894][ T6484] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.751649][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'. [ 141.614620][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.622716][ T6538] bridge0: port 2(bridge_slave_1) entered listening state [ 141.631487][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.638766][ T6538] bridge0: port 1(bridge_slave_0) entered listening state [ 142.250018][ T6553] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.220'. [ 142.315837][ T5743] udevd[5743]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.370020][ T5743] udevd[5743]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 142.386911][ T6557] netlink: 'syz.2.221': attribute type 1 has an invalid length. [ 142.605864][ T6560] bond1: (slave veth0_to_bond): Releasing active interface [ 142.632782][ T6557] netlink: 28 bytes leftover after parsing attributes in process `syz.2.221'. [ 142.668144][ T6560] bond2: (slave veth0_to_bond): making interface the new active one [ 142.749950][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.223'. [ 142.782368][ T6560] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 143.918470][ T989] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 144.164862][ T989] usb 6-1: no configurations [ 144.187216][ T989] usb 6-1: can't read configurations, error -22 [ 144.440452][ T5792] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 144.490328][ T5772] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 145.222153][ T5772] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.237754][ T5792] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 145.290434][ T5792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.355222][ T5792] usb 1-1: Product: syz [ 145.387437][ T5792] usb 1-1: Manufacturer: syz [ 145.494395][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.232'. [ 145.827351][ T5792] usb 1-1: SerialNumber: syz [ 146.589971][ T1235] IPVS: starting estimator thread 0... [ 146.662594][ T5792] usb 1-1: config 0 descriptor?? [ 146.692372][ T5792] usb 1-1: selecting invalid altsetting 3 [ 146.699136][ T5792] comedi comedi5: could not set alternate setting 3 in high speed [ 146.706959][ T5792] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 146.722595][ T5792] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 146.727757][ T6602] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.979357][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.034278][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.099596][ T5772] usb 1-1: USB disconnect, device number 2 [ 147.117262][ T6608] netlink: 'syz.5.237': attribute type 1 has an invalid length. [ 147.280005][ T6615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.237'. [ 147.406386][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 147.465774][ T6620] siw: device registration error -23 [ 147.646556][ T6613] bond1: (slave veth0_to_bond): making interface the new active one [ 147.732303][ T6613] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.078356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.431439][ T6648] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 151.502799][ T6648] batman_adv: batadv0: Adding interface: gretap1 [ 151.519744][ T6648] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.571961][ T6648] batman_adv: batadv0: Interface activated: gretap1 [ 152.159492][ T6672] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 152.259130][ T6672] bond1: (slave veth0_to_bond): Releasing active interface [ 152.285494][ T6672] bond2: (slave veth0_to_bond): making interface the new active one [ 152.297247][ T6672] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.322288][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'. [ 153.078329][ T6681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.259'. [ 153.472130][ T6683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.259'. [ 153.490254][ T6686] netlink: 'syz.3.261': attribute type 1 has an invalid length. [ 153.679703][ T6686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.843751][ T6689] bond1: (slave geneve2): making interface the new active one [ 153.864843][ T6689] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 154.051658][ T6694] netlink: 200 bytes leftover after parsing attributes in process `syz.4.263'. [ 155.627394][ T6708] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 156.607934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 158.156035][ T6736] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 159.087804][ T5868] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 159.264698][ T5868] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.287789][ T5868] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 159.930689][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.937982][ T5868] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 159.947256][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.009474][ T5868] usb 3-1: config 0 descriptor?? [ 160.055062][ T6734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.087565][ T6734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.244590][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 160.276760][ T6751] netlink: 200 bytes leftover after parsing attributes in process `syz.4.281'. [ 160.290764][ T6749] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 160.307728][ T6749] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 160.361941][ T6752] gretap1: entered promiscuous mode [ 160.624809][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.654939][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.678365][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.695913][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.716787][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.731918][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.747282][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.763477][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.783206][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.802936][ T5868] chicony 0003:04F2:1421.0002: unknown main item tag 0x0 [ 160.830235][ T6744] loop1: detected capacity change from 0 to 32768 [ 160.861856][ T5868] chicony 0003:04F2:1421.0002: hidraw0: USB HID v0.04 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0 [ 160.934106][ T5868] usb 3-1: USB disconnect, device number 5 [ 160.991327][ T6763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.286'. [ 161.266072][ T6766] fido_id[6766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 162.908176][ T6795] netlink: 200 bytes leftover after parsing attributes in process `syz.2.297'. [ 163.437236][ T6761] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 163.461050][ T6761] netlink: 1 bytes leftover after parsing attributes in process `syz.4.285'. [ 163.500240][ T6765] x_tables: duplicate underflow at hook 2 [ 163.910646][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053a1b400: rx timeout, send abort [ 164.312528][ T6808] gretap1: entered promiscuous mode [ 164.421060][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053a1b400: abort rx timeout. Force session deactivation [ 164.764348][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 166.523666][ T6842] netlink: 200 bytes leftover after parsing attributes in process `syz.5.315'. [ 167.799645][ T6853] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 168.409976][ T6861] netlink: 'syz.5.321': attribute type 12 has an invalid length. [ 169.407930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 169.903752][ T6869] netlink: 240 bytes leftover after parsing attributes in process `syz.2.324'. [ 171.888413][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 171.896900][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 174.579742][ T6908] 9pnet_virtio: no channels available for device syz [ 176.660900][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 179.855060][ T6952] 9pnet_virtio: no channels available for device syz [ 181.338855][ T6970] random: crng reseeded on system resumption [ 184.768046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 185.812945][ T6999] 9pnet_virtio: no channels available for device syz [ 187.779910][ T7021] dvmrp0: entered allmulticast mode [ 187.810406][ T7017] dvmrp0: left allmulticast mode [ 191.463043][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.478538][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.491550][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.512203][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.523976][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 191.755574][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 193.449723][ T7060] syzkaller0: entered promiscuous mode [ 193.486671][ T7060] syzkaller0: entered allmulticast mode [ 193.541232][ T7062] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 193.638923][ T50] Bluetooth: hci6: command tx timeout [ 193.648285][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.660981][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.591455][ T7068] 9pnet_virtio: no channels available for device syz [ 194.686835][ T7062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.174323][ T7069] block nbd2: shutting down sockets [ 195.717754][ T50] Bluetooth: hci6: command tx timeout [ 196.610421][ T7084] netlink: 'syz.2.391': attribute type 12 has an invalid length. [ 197.880422][ T50] Bluetooth: hci6: command tx timeout [ 197.954096][ T7082] dvmrp0: entered allmulticast mode [ 199.885463][ T5949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.954158][ T7080] dvmrp0: left allmulticast mode [ 199.957931][ T50] Bluetooth: hci6: command tx timeout [ 200.271180][ T5949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.769691][ T7103] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 201.005172][ T7103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.119968][ T5949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.410282][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 201.645894][ T5949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.958801][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.966149][ C1] bridge0: topology change detected, propagating [ 201.973015][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.980289][ C1] bridge0: topology change detected, propagating [ 202.580827][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.613718][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.640928][ T7040] bridge_slave_0: entered allmulticast mode [ 202.673490][ T7040] bridge_slave_0: entered promiscuous mode [ 202.752702][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.816673][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.847404][ T7040] bridge_slave_1: entered allmulticast mode [ 202.881174][ T7040] bridge_slave_1: entered promiscuous mode [ 204.007082][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.073524][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.385540][ T7040] team0: Port device team_slave_0 added [ 204.420169][ T7040] team0: Port device team_slave_1 added [ 205.084972][ T7154] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 205.585389][ T7154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.638067][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.668685][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.733835][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.840173][ T5949] bridge_slave_1: left allmulticast mode [ 205.858558][ T5752] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 205.871994][ T5949] bridge_slave_1: left promiscuous mode [ 205.901085][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.948138][ T5751] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.982686][ T5949] bridge_slave_0: left allmulticast mode [ 205.997258][ T5949] bridge_slave_0: left promiscuous mode [ 206.009944][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.031912][ T5752] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 206.046979][ T5752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.066031][ T5752] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.084097][ T5752] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.107374][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.111303][ T5949] batman_adv: batadv0: Interface deactivated: gretap1 [ 206.122674][ T5751] usb 2-1: Using ep0 maxpacket: 8 [ 206.133984][ T5752] usb 4-1: config 0 descriptor?? [ 206.135370][ T5751] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.155250][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.175357][ T5751] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 206.204001][ T5751] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.241216][ T5751] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.276589][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.541389][ T5751] usb 2-1: GET_CAPABILITIES returned 0 [ 206.558662][ T5751] usbtmc 2-1:16.0: can't read capabilities [ 206.567407][ T5752] usb 4-1: string descriptor 0 read error: -71 [ 206.600031][ T5752] usb 4-1: USB disconnect, device number 3 [ 206.709448][ T5949] batman_adv: batadv0: Removing interface: gretap1 [ 206.765519][ T5949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.778877][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.792369][ T5949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.794766][ T5894] smbdirect: ib_dev[syz1] removed [ 206.815444][ T5949] bond0 (unregistering): Released all slaves [ 206.818078][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.845669][ T5949] bond1 (unregistering): Released all slaves [ 206.853827][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 206.867463][ T5765] usb 2-1: USB disconnect, device number 2 [ 206.903036][ T5949] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 206.915291][ T5949] bond2 (unregistering): Released all slaves [ 206.935846][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.942990][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.971178][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.996959][ T7176] syzkaller0: entered promiscuous mode [ 207.009576][ T7176] syzkaller0: entered allmulticast mode [ 207.043539][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.084845][ T5752] infiniband syz1: ib_query_port failed (-19) [ 207.367359][ T7040] hsr_slave_0: entered promiscuous mode [ 207.383125][ T7040] hsr_slave_1: entered promiscuous mode [ 207.402250][ T5752] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 207.424861][ T7040] debugfs: 'hsr0' already exists in 'hsr' [ 209.051306][ T7040] Cannot create hsr debugfs directory [ 209.241727][ T5752] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 209.297872][ T5752] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 209.349040][ T5752] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.377418][ T5752] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 209.404893][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.467535][ T5752] usb 3-1: config 0 descriptor?? [ 209.495449][ T7201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.524823][ T7201] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.437116][ T5752] usbhid 3-1:0.0: can't add hid device: -71 [ 210.630471][ T5752] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.735082][ T5752] usb 3-1: USB disconnect, device number 6 [ 211.016706][ T5949] hsr_slave_0: left promiscuous mode [ 211.077528][ T5949] hsr_slave_1: left promiscuous mode [ 211.087042][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 211.087070][ T5639] Bluetooth: hci0: command 0x0406 tx timeout [ 211.093286][ T5629] Bluetooth: hci2: command 0x0406 tx timeout [ 211.101113][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 211.105448][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 211.142948][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.196678][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.305582][ T5949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.326719][ T5949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.385770][ T5949] veth1_macvtap: left promiscuous mode [ 211.393134][ T5949] veth0_macvtap: left promiscuous mode [ 211.403521][ T5949] veth1_vlan: left promiscuous mode [ 211.409304][ T5949] veth0_vlan: left promiscuous mode [ 211.482189][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'. [ 211.569304][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.437'. [ 212.544119][ T5949] team0 (unregistering): Port device team_slave_1 removed [ 212.572919][ T5949] team0 (unregistering): Port device team_slave_0 removed [ 212.850572][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.900235][ T7254] geneve2: entered promiscuous mode [ 212.906794][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.009530][ T5751] usb 1-1: config 0 has no interfaces? [ 213.034927][ T5751] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 213.055272][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.083012][ T5751] usb 1-1: Product: syz [ 213.096129][ T5751] usb 1-1: Manufacturer: syz [ 213.109903][ T5751] usb 1-1: SerialNumber: syz [ 213.160279][ T5751] usb 1-1: config 0 descriptor?? [ 213.328693][ T5752] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 213.589476][ T5752] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 213.679971][ T5752] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 213.710961][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 213.733781][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.755365][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.768190][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 213.781392][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 213.798420][ T5752] usb 2-1: config 168 interface 0 has no altsetting 0 [ 213.815907][ T5752] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 213.832405][ T5752] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 213.854343][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 213.885422][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.920897][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 213.976756][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 214.005962][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.045911][ T5752] usb 2-1: config 168 interface 0 has no altsetting 0 [ 214.047460][ T5752] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 214.047507][ T5752] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 214.047544][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 214.047570][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.048031][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 214.048063][ T5752] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 214.048093][ T5752] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 214.049283][ T5752] usb 2-1: config 168 interface 0 has no altsetting 0 [ 214.062743][ T5752] usb 2-1: string descriptor 0 read error: -22 [ 214.062853][ T5752] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 214.062873][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.114716][ T5752] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 214.124546][ T7040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.173696][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.184662][ T7040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.220140][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.221434][ T7040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.247361][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.253816][ T7040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 214.281677][ T7040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.318596][ T7300] 9pnet_virtio: no channels available for device syz [ 214.754481][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.800580][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.825213][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.825338][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.829740][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.829849][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.765287][ T10] usb 1-1: USB disconnect, device number 3 [ 218.951229][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 218.976381][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.468'. [ 218.986934][ T5792] usb 2-1: USB disconnect, device number 3 [ 219.083853][ T7351] geneve3: entered promiscuous mode [ 219.218565][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 221.570675][ T7396] process 'syz.5.477' launched './file2' with NULL argv: empty string added [ 222.334037][ T7376] 9pnet_virtio: no channels available for device syz [ 222.484552][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.096271][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 226.173524][ T7439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.355600][ T7040] veth0_vlan: entered promiscuous mode [ 226.384597][ T7446] syzkaller0: entered promiscuous mode [ 226.394916][ T7446] syzkaller0: entered allmulticast mode [ 226.426411][ T7040] veth1_vlan: entered promiscuous mode [ 226.599032][ T7040] veth0_macvtap: entered promiscuous mode [ 226.653251][ T7040] veth1_macvtap: entered promiscuous mode [ 226.755951][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.965830][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.990236][ T132] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.019033][ T132] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.496065][ T132] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.811641][ T132] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.903291][ T5638] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 227.910777][ T5638] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 228.091512][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.146671][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.295719][ T7467] netlink: 200 bytes leftover after parsing attributes in process `syz.2.496'. [ 228.355088][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.399465][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.547720][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 228.555958][ T5638] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 228.639591][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 228.721965][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 228.765912][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.811331][ T10] usb 2-1: Product: syz [ 228.828447][ T10] usb 2-1: Manufacturer: syz [ 228.847544][ T10] usb 2-1: SerialNumber: syz [ 228.880382][ T10] usb 2-1: config 0 descriptor?? [ 228.924210][ T7485] syzkaller0: entered promiscuous mode [ 228.942145][ T7485] syzkaller0: entered allmulticast mode [ 228.993358][ T7490] random: crng reseeded on system resumption [ 229.813868][ T10] usb 2-1: USB disconnect, device number 4 [ 229.985128][ T24] IPVS: starting estimator thread 0... [ 230.097776][ T7500] IPVS: using max 27 ests per chain, 64800 per kthread [ 230.341697][ T5638] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 230.466738][ T7513] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.512'. [ 233.094951][ T7539] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 233.117879][ T7539] netlink: 1 bytes leftover after parsing attributes in process `syz.2.521'. [ 233.145064][ T7539] x_tables: duplicate underflow at hook 2 [ 233.190571][ T7561] syzkaller0: entered promiscuous mode [ 233.208012][ T7561] syzkaller0: entered allmulticast mode [ 233.578014][ T7523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.963076][ T7574] netlink: 'syz.0.531': attribute type 1 has an invalid length. [ 233.963122][ T7574] netlink: 756 bytes leftover after parsing attributes in process `syz.0.531'. [ 234.223296][ T30] audit: type=1326 audit(1784988106.017:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 234.377776][ T30] audit: type=1326 audit(1784988106.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 235.013922][ T30] audit: type=1326 audit(1784988106.057:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 235.193273][ T7575] gretap1: left promiscuous mode [ 235.226255][ T30] audit: type=1326 audit(1784988106.057:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 235.287433][ T30] audit: type=1326 audit(1784988106.057:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 235.358137][ T30] audit: type=1326 audit(1784988106.057:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 235.402161][ T30] audit: type=1326 audit(1784988106.057:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 236.257298][ T30] audit: type=1326 audit(1784988106.057:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 238.142196][ T30] audit: type=1326 audit(1784988106.057:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.534" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bafd9de99 code=0x7ffc0000 [ 238.350130][ T7617] syzkaller0: entered promiscuous mode [ 238.378056][ T7617] syzkaller0: entered allmulticast mode [ 238.816138][ T7634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.929760][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 240.964187][ T7659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 241.281357][ T7671] netlink: 72 bytes leftover after parsing attributes in process `syz.3.546'. [ 247.626381][ T7770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.581'. [ 249.493087][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068222000: rx timeout, send abort [ 250.001443][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068222000: abort rx timeout. Force session deactivation [ 252.998179][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.060831][ T7832] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.600'. [ 253.141221][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 253.786768][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068d74c00: rx timeout, send abort [ 254.287036][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068d74800: rx timeout, send abort [ 254.295601][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068d74c00: abort rx timeout. Force session deactivation [ 254.795508][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888068d74800: abort rx timeout. Force session deactivation [ 254.878536][ T5780] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 254.887218][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.622'. [ 254.920627][ T5751] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 255.084140][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.086752][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 255.092596][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.118278][ T5751] usb 3-1: Using ep0 maxpacket: 32 [ 255.130233][ T5780] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 255.178142][ T5780] usb 2-1: config 0 has no interface number 0 [ 255.188778][ T5751] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 255.211410][ T5780] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 255.255649][ T5751] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.278210][ T5780] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 255.300704][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.318693][ T5780] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.331889][ T5751] usb 3-1: Product: syz [ 255.340205][ T5751] usb 3-1: Manufacturer: syz [ 255.344921][ T5751] usb 3-1: SerialNumber: syz [ 255.350676][ T5780] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 255.368282][ T5780] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 255.383963][ T5751] usb 3-1: config 0 descriptor?? [ 255.396637][ T7897] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 255.436250][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.451680][ T5751] hub 3-1:0.0: bad descriptor, ignoring hub [ 255.469099][ T5751] hub 3-1:0.0: probe with driver hub failed with error -5 [ 255.491349][ T5780] usb 2-1: config 0 descriptor?? [ 257.288158][ T5780] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 257.317881][ T5751] usb 3-1: USB disconnect, device number 7 [ 257.383989][ T5780] usb 2-1: USB disconnect, device number 5 [ 257.502341][ T5780] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 257.548744][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036268400: rx timeout, send abort [ 258.048994][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807fdf7000: rx timeout, send abort [ 258.058458][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888036268400: abort rx timeout. Force session deactivation [ 258.338792][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.638'. [ 258.558549][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807fdf7000: abort rx timeout. Force session deactivation [ 261.049812][ T7976] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 261.059959][ T7976] netlink: 1 bytes leftover after parsing attributes in process `syz.2.646'. [ 261.072647][ T7976] x_tables: duplicate underflow at hook 2 [ 261.130641][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802135a400: rx timeout, send abort [ 261.630778][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031ed8800: rx timeout, send abort [ 261.640595][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802135a400: abort rx timeout. Force session deactivation [ 262.139169][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031ed8800: abort rx timeout. Force session deactivation [ 265.475161][ T8043] random: crng reseeded on system resumption [ 266.142210][ T8044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.435230][ T8050] input: syz1 as /devices/virtual/input/input8 [ 267.786802][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 267.826532][ T8060] team0: entered allmulticast mode [ 267.847902][ T8060] team_slave_0: entered allmulticast mode [ 267.926813][ T8060] team_slave_1: entered allmulticast mode [ 267.954710][ T8060] syz_tun: entered allmulticast mode [ 268.431690][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.677'. [ 268.550968][ T8057] Config c/1 of g1 needs at least one function. [ 268.595484][ T8057] udc usbip-vudc.0: failed to start g1: -22 [ 268.602074][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 268.656818][ T8057] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 268.775124][ T8057] UDC core: g1: couldn't find an available UDC or it's busy [ 268.983902][ T8075] random: crng reseeded on system resumption [ 270.325417][ T10] IPVS: starting estimator thread 0... [ 271.277304][ T8089] IPVS: using max 25 ests per chain, 60000 per kthread [ 271.357473][ T8094] netlink: 72 bytes leftover after parsing attributes in process `syz.5.690'. [ 272.847026][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.697'. [ 273.216403][ T8123] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[8123] [ 277.627694][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 277.840136][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 277.894480][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 277.929030][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 277.966380][ T9] usb 2-1: string descriptor 0 read error: -22 [ 277.988161][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 278.013336][ T5638] Bluetooth: hci6: link tx timeout [ 278.020886][ T5638] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.027649][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.121481][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 279.151115][ T5765] usb 2-1: USB disconnect, device number 6 [ 280.043632][ T8180] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5621] was attempted by ""[8180] [ 280.255778][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 286.563242][ T8241] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 286.596150][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ab7b800: rx timeout, send abort [ 286.706020][ T8242] netlink: 28 bytes leftover after parsing attributes in process `syz.1.739'. [ 287.096383][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806897c800: rx timeout, send abort [ 287.105239][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807ab7b800: abort rx timeout. Force session deactivation [ 287.605176][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806897c800: abort rx timeout. Force session deactivation [ 289.058910][ T8237] bond1: (slave veth0_to_bond): making interface the new active one [ 289.094672][ T8237] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 289.311759][ T8257] netlink: 200 bytes leftover after parsing attributes in process `syz.3.745'. [ 290.352411][ T30] audit: type=1326 audit(3932471810.151:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.1.755" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6419de99 code=0x7ffc0000 [ 290.387050][ T30] audit: type=1326 audit(3932471810.181:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.1.755" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6419de99 code=0x7ffc0000 [ 290.435824][ T30] audit: type=1326 audit(3932471810.181:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.1.755" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1a6419de99 code=0x7ffc0000 [ 290.479240][ T5792] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 290.556526][ T30] audit: type=1326 audit(3932471810.211:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8286 comm="syz.1.755" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a6419de99 code=0x7ffc0000 [ 290.878904][ T5792] usb 6-1: not running at top speed; connect to a high speed hub [ 290.904917][ T5792] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 290.926564][ T5792] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 290.935888][ T5792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.951692][ T5792] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 292.912281][ T5792] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 292.954078][ T5792] usb 6-1: USB disconnect, device number 5 [ 293.015718][ T5792] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 293.065016][ T5792] garmin_gps 6-1:1.0: device disconnected [ 295.973252][ T8338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.077940][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.127804][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.903747][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.913068][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.457821][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.481464][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.768157][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.802047][ T94] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 301.856897][ T8369] gretap1: left promiscuous mode [ 301.890602][ T8369] geneve3: left promiscuous mode [ 301.915963][ T5895] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.947184][ T5895] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.971398][ T5895] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.984081][ T5895] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.079570][ T8405] fuse: Bad value for 'fd' [ 302.660903][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.795'. [ 302.669826][ T8408] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.619103][ T8389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.532163][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 308.103212][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.817'. [ 308.253092][ T8462] geneve3: entered promiscuous mode [ 308.497794][ T5792] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 308.878424][ T5792] usb 6-1: Using ep0 maxpacket: 8 [ 308.915857][ T5792] usb 6-1: unable to get BOS descriptor or descriptor too short [ 308.952476][ T5792] usb 6-1: config 4 has an invalid interface number: 219 but max is 0 [ 308.971217][ T5792] usb 6-1: config 4 has no interface number 0 [ 308.992487][ T5792] usb 6-1: config 4 interface 219 has no altsetting 0 [ 309.031334][ T5792] usb 6-1: New USB device found, idVendor=19d2, idProduct=1432, bcdDevice=a2.f4 [ 309.070966][ T5792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.112850][ T5792] usb 6-1: Product: syz [ 309.127109][ T5792] usb 6-1: Manufacturer: syz [ 309.149193][ T5792] usb 6-1: SerialNumber: syz [ 309.962421][ T5792] hub 6-1:4.219: bad descriptor, ignoring hub [ 309.981448][ T5792] hub 6-1:4.219: probe with driver hub failed with error -5 [ 310.001297][ T5792] option 6-1:4.219: GSM modem (1-port) converter detected [ 310.129543][ T5792] usb 6-1: USB disconnect, device number 6 [ 310.161373][ T5792] option 6-1:4.219: device disconnected [ 311.869450][ T8526] syzkaller0: entered promiscuous mode [ 311.887756][ T8526] syzkaller0: entered allmulticast mode [ 312.085647][ T8526] tipc: Enabling of bearer rejected, failed to enable media [ 313.470044][ T5638] Bluetooth: hci5: unknown advertising packet type: 0xe3 [ 313.470104][ T5638] Bluetooth: hci5: unknown advertising packet type: 0x38 [ 313.479833][ T5638] Bluetooth: hci5: unknown advertising packet type: 0x38 [ 313.489958][ T5638] Bluetooth: hci5: unknown advertising packet type: 0x95 [ 313.497153][ T5638] Bluetooth: hci5: unknown advertising packet type: 0x30 [ 313.504549][ T5638] Bluetooth: hci5: unknown advertising packet type: 0x2f [ 314.370522][ T8566] ceph: No mds server is up or the cluster is laggy [ 314.398781][ T24] libceph: connect (1)[c::]:6789 error -101 [ 314.418118][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 314.470376][ T8579] netlink: 'syz.6.860': attribute type 26 has an invalid length. [ 314.480882][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.860'. [ 314.500359][ T8579] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 316.305275][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.870'. [ 316.489829][ T8606] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 317.278028][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284852][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666342][ T5907] udevd[5907]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 317.702250][ T7933] udevd[7933]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 317.789972][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.876'. [ 318.012910][ T8630] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 318.027401][ T8630] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 318.044613][ T8630] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 318.210761][ T8630] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 318.930864][ T8619] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.875'. [ 323.166197][ T8663] syzkaller0: entered promiscuous mode [ 323.183286][ T8663] syzkaller0: entered allmulticast mode [ 324.024482][ T8673] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 324.554455][ T8687] openvswitch: netlink: IP tunnel dst address not specified [ 324.824659][ T5792] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 325.537853][ T5792] usb 7-1: Using ep0 maxpacket: 32 [ 325.572937][ T5792] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 325.584967][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.630479][ T5792] usb 7-1: config 0 descriptor?? [ 325.673433][ T5792] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 325.732716][ T5638] Bluetooth: hci1: unexpected event for opcode 0x6304 [ 326.149473][ T8701] trusted_key: encrypted_key: insufficient parameters specified [ 326.657458][ T5792] gspca_nw80x: reg_w err -110 [ 326.676485][ T8666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.785469][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.895'. [ 326.875226][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 326.996741][ T5792] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 328.337677][ T5752] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.470936][ T5868] usb 7-1: USB disconnect, device number 2 [ 328.510550][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 328.520713][ T5752] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.548118][ T5752] usb 4-1: config 3 has an invalid interface number: 189 but max is 3 [ 328.579320][ T5752] usb 4-1: config 3 has an invalid interface number: 178 but max is 3 [ 328.585753][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.905'. [ 328.597000][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.905'. [ 328.605302][ T5752] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 328.615020][ T8726] geneve2: entered promiscuous mode [ 328.674922][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 329.207293][ T5638] Bluetooth: hci0: unexpected event for opcode 0x6304 [ 329.357611][ T5752] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 4 [ 329.366746][ T5752] usb 4-1: config 3 has no interface number 0 [ 329.380619][ T5752] usb 4-1: config 3 has no interface number 1 [ 329.397364][ T5752] usb 4-1: config 3 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 329.441354][ T5752] usb 4-1: config 3 interface 189 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 329.502405][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 329.517350][ T5752] usb 4-1: config 3 interface 178 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 329.557620][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 329.590489][ T5752] usb 4-1: config 3 interface 178 has no altsetting 0 [ 329.602828][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 329.657700][ T5895] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.678601][ T5895] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.690896][ T5638] Bluetooth: hci0: unexpected event for opcode 0x042c [ 329.710464][ T5895] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.739817][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 329.747381][ T5895] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.753365][ T5752] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=7e.0a [ 329.771153][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.779696][ T5752] usb 4-1: Product: syz [ 329.797709][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 329.807502][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 329.817355][ T5752] usb 4-1: Manufacturer: syz [ 329.826861][ T5752] usb 4-1: SerialNumber: syz [ 329.844781][ T10] usb 3-1: Product: syz [ 329.903317][ T10] usb 3-1: Manufacturer: syz [ 330.602909][ T5752] usb 4-1: can't set config #3, error -71 [ 330.625147][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 330.647651][ T5752] usb 4-1: USB disconnect, device number 4 [ 330.666872][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 330.738790][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 330.775614][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 332.371780][ T24] usb 3-1: USB disconnect, device number 8 [ 332.487301][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 332.526371][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.920'. [ 332.935706][ T5868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 333.193196][ T8769] geneve3: entered promiscuous mode [ 333.327801][ T5780] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 333.353131][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 333.435952][ T5868] usb 7-1: unable to get BOS descriptor or descriptor too short [ 333.448405][ T5638] Bluetooth: hci1: unexpected event for opcode 0x042c [ 333.461269][ T5868] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 333.495064][ T5868] usb 7-1: can't read configurations, error -71 [ 333.509308][ T5780] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.533671][ T5780] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.557923][ T5780] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.593696][ T5780] usb 6-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00 [ 333.615301][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.645223][ T5780] usb-storage 6-1:1.0: USB Mass Storage device detected [ 335.441777][ T5780] usb-storage 6-1:1.0: Quirks match for vid 0451 pid 5416: 2 [ 335.689494][ T5780] usb 6-1: USB disconnect, device number 7 [ 335.749345][ T5752] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 335.947875][ T5752] usb 3-1: Using ep0 maxpacket: 32 [ 335.960033][ T5752] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 335.997833][ T5752] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.034638][ T5752] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.066163][ T5752] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 336.104699][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.138781][ T5752] usb 3-1: Product: syz [ 336.158351][ T5752] usb 3-1: Manufacturer: syz [ 336.180702][ T5752] usb 3-1: SerialNumber: syz [ 336.221916][ T5752] usb 3-1: config 0 descriptor?? [ 336.670191][ T5752] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 336.762815][ T8802] sit0: entered promiscuous mode [ 336.794214][ T8802] netlink: 'syz.0.934': attribute type 1 has an invalid length. [ 336.813376][ T8802] netlink: 1 bytes leftover after parsing attributes in process `syz.0.934'. [ 337.972831][ T5752] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 338.734377][ T8828] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by ""[8828] [ 338.982622][ T5752] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 338.998393][ T8804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.763424][ T5752] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 340.397985][ T5752] usb 3-1: USB disconnect, device number 9 [ 343.611937][ T8849] netlink: 'syz.3.944': attribute type 12 has an invalid length. [ 345.874810][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 345.949490][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 345.985374][ T30] audit: type=1800 audit(3932471865.771:23): pid=8861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.951" name="file1" dev="tmpfs" ino=425 res=0 errno=0 [ 349.156687][ T8888] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 349.173498][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 349.182488][ T8888] IPv6: NLM_F_CREATE should be specified when creating new route [ 351.064266][ T8894] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 351.072318][ T8894] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 352.738258][ T5765] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 354.597658][ T5765] usb 6-1: Using ep0 maxpacket: 32 [ 354.614414][ T5765] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 354.632859][ T5765] usb 6-1: config 0 has no interface number 0 [ 354.652811][ T5765] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 354.663007][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.692327][ T5765] usb 6-1: Product: syz [ 354.723304][ T5765] usb 6-1: Manufacturer: syz [ 354.742331][ T5765] usb 6-1: SerialNumber: syz [ 354.783457][ T5765] usb 6-1: config 0 descriptor?? [ 355.450572][ T8925] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 357.318868][ T5765] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 357.369060][ T5765] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 357.448372][ T5765] usb 6-1: USB disconnect, device number 8 [ 357.999390][ T5765] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 358.289608][ T5765] usb 6-1: Using ep0 maxpacket: 8 [ 358.314127][ T5765] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.366947][ T5765] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.425143][ T5765] usb 6-1: config 0 interface 0 has no altsetting 0 [ 358.428780][ T5792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 358.463663][ T5765] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 358.485225][ T8942] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 358.502389][ T5765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.544884][ T5765] usb 6-1: config 0 descriptor?? [ 358.589167][ T5792] usb 4-1: Using ep0 maxpacket: 8 [ 358.617899][ T5792] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 358.649243][ T5792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.700093][ T5792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 358.727003][ T5792] pvrusb2: ********** [ 358.743455][ T5792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 358.760318][ T5792] pvrusb2: Important functionality might not be entirely working. [ 358.769999][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.775033][ T5792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 358.793320][ T5792] pvrusb2: ********** [ 358.899408][ T2361] pvrusb2: Invalid write control endpoint [ 359.031009][ T5765] hid_parser_main: 30 callbacks suppressed [ 359.031036][ T5765] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.070480][ T5765] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.085823][ T5765] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.095390][ T5765] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.114989][ T8929] pvrusb2: Invalid write control endpoint [ 359.126784][ T5765] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 359.139299][ T2361] pvrusb2: Invalid write control endpoint [ 359.140199][ T5752] usb 4-1: USB disconnect, device number 5 [ 359.153664][ T5765] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 359.164988][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 359.165055][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 359.165066][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 359.165079][ T2361] pvrusb2: Device being rendered inoperable [ 359.173301][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 359.274211][ T5765] usb 6-1: USB disconnect, device number 9 [ 359.289361][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 359.372238][ T2361] pvrusb2: Attached sub-driver cx25840 [ 359.403106][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 359.441344][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 360.922926][ T8980] fuse: Bad value for 'fd' [ 361.250122][ T5765] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 362.333132][ T5765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.381468][ T5765] usb 6-1: config 0 has no interfaces? [ 362.460124][ T5765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.612725][ T5765] usb 6-1: config 0 has no interfaces? [ 362.807229][ T5765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.058838][ T5765] usb 6-1: config 0 has no interfaces? [ 363.595084][ T5765] usb 6-1: string descriptor 0 read error: -22 [ 363.624342][ T5765] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 363.646064][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.689385][ T5765] usb 6-1: config 0 descriptor?? [ 363.849287][ T30] audit: type=1800 audit(3932471883.641:24): pid=9000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1000" name="serialnumber" dev="configfs" ino=19961 res=0 errno=0 [ 364.009581][ T5765] usb 6-1: USB disconnect, device number 10 [ 372.826922][ T9051] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 372.834562][ T9051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.938856][ T9051] vhci_hcd vhci_hcd.0: Device attached [ 373.289788][ T10] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 373.406023][ T9060] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 373.412731][ T9060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.784115][ T9060] vhci_hcd vhci_hcd.0: Device attached [ 373.795938][ T9063] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 373.802506][ T9063] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.811494][ T9066] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(5) [ 373.818034][ T9066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.825977][ T9063] vhci_hcd vhci_hcd.0: Device attached [ 373.832445][ T9066] vhci_hcd vhci_hcd.0: Device attached [ 373.933335][ T9070] vhci_hcd: connection closed [ 373.934437][ T35] vhci_hcd vhci_hcd.2: stop threads [ 373.934995][ T9069] vhci_hcd: connection closed [ 373.946428][ T9064] vhci_hcd: connection closed [ 373.947805][ T35] vhci_hcd vhci_hcd.2: release socket [ 373.951285][ T9053] vhci_hcd: connection reset by peer [ 373.990937][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 374.013557][ T35] vhci_hcd vhci_hcd.2: stop threads [ 374.029304][ T35] vhci_hcd vhci_hcd.2: release socket [ 374.037976][ T5772] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 374.049141][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 374.079762][ T35] vhci_hcd vhci_hcd.2: stop threads [ 374.088458][ T35] vhci_hcd vhci_hcd.2: release socket [ 374.100904][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 374.124961][ T35] vhci_hcd vhci_hcd.2: stop threads [ 374.137761][ T35] vhci_hcd vhci_hcd.2: release socket [ 374.150655][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 374.231044][ T5772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.252752][ T5772] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 374.267246][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.288574][ T5772] usb 4-1: Product: syz [ 374.301605][ T5772] usb 4-1: Manufacturer: syz [ 374.312682][ T5772] usb 4-1: SerialNumber: syz [ 374.332471][ T5772] usb 4-1: config 0 descriptor?? [ 374.561797][ T5772] usb 4-1: USB disconnect, device number 6 [ 375.815628][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1029'. [ 375.833189][ T9096] siw: device registration error -23 [ 377.981189][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.987922][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.337637][ T5868] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 378.557908][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 378.573193][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 378.587700][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 379.371078][ T5868] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 379.380425][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.413839][ T9145] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1047'. [ 379.454502][ T5868] usb 4-1: config 0 descriptor?? [ 379.523870][ T5868] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 380.317245][ T9142] 9pnet_virtio: no channels available for device syz [ 380.702197][ T5868] gspca_nw80x: reg_r err -71 [ 380.759805][ T5868] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 380.772214][ T5868] usb 4-1: USB disconnect, device number 7 [ 383.316885][ T9176] syzkaller0: entered promiscuous mode [ 383.347753][ T9176] syzkaller0: entered allmulticast mode [ 383.496249][ T9187] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1062'. [ 383.524562][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 385.414751][ T9204] 9pnet_virtio: no channels available for device syz [ 386.269259][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1069'. [ 387.648002][ T5772] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 387.849229][ T5772] usb 6-1: Using ep0 maxpacket: 8 [ 387.854616][ T9234] netlink: 'syz.6.1074': attribute type 2 has an invalid length. [ 387.923871][ T5772] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 387.985124][ T5772] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.019681][ T5772] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.152523][ T5772] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.191183][ T5772] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.235643][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.507021][ T5772] usb 6-1: usb_control_msg returned -71 [ 388.534851][ T5772] usbtmc 6-1:16.0: can't read capabilities [ 388.607182][ T5772] usb 6-1: USB disconnect, device number 11 [ 389.017970][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 389.324620][ T9260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.333372][ T9260] IPv6: NLM_F_CREATE should be set when creating new route [ 389.343456][ T9260] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.664263][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 390.340740][ T10] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 390.355099][ T10] usb 4-1: config 0 has no interface number 0 [ 390.361665][ T10] usb 4-1: config 0 interface 153 has no altsetting 0 [ 390.376361][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 391.136658][ T10] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 391.146952][ T10] usb 4-1: Product: syz [ 391.151732][ T10] usb 4-1: Manufacturer: syz [ 391.156390][ T10] usb 4-1: SerialNumber: syz [ 391.186141][ T10] usb 4-1: config 0 descriptor?? [ 391.251179][ T30] audit: type=1800 audit(3932471911.041:25): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1086" name="manufacturer" dev="configfs" ino=20438 res=0 errno=0 [ 391.508949][ T10] hub 4-1:0.153: bad descriptor, ignoring hub [ 391.550687][ T10] hub 4-1:0.153: probe with driver hub failed with error -5 [ 392.611863][ T10] sierra 4-1:0.153: Sierra USB modem converter detected [ 393.024737][ T10] usb 4-1: USB disconnect, device number 8 [ 393.089752][ T10] sierra 4-1:0.153: device disconnected [ 393.886287][ T5772] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 394.087658][ T5772] usb 4-1: Using ep0 maxpacket: 8 [ 394.105891][ T5772] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 394.154440][ T5772] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 394.189553][ T5772] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.216027][ T5772] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.261401][ T5772] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 394.294737][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.132167][ T5772] usb 4-1: usb_control_msg returned -71 [ 396.151651][ T5772] usbtmc 4-1:16.0: can't read capabilities [ 396.203925][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1100'. [ 396.594647][ T5772] usb 4-1: USB disconnect, device number 9 [ 399.145544][ T9343] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 399.446896][ T9347] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 401.000560][ T5638] Bluetooth: hci6: command 0x0406 tx timeout [ 401.351050][ T9345] 9pnet_virtio: no channels available for device syz [ 402.887669][ T5772] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 403.057703][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 403.065487][ T5772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 403.230386][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 403.260378][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.279524][ T5772] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.303569][ T5772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.438134][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.673086][ T5772] usb 3-1: usb_control_msg returned -71 [ 403.685070][ T5772] usbtmc 3-1:16.0: can't read capabilities [ 403.721495][ T5772] usb 3-1: USB disconnect, device number 10 [ 407.887957][ T9384] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1125'. [ 408.319543][ T7740] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 408.875175][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.886251][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.895669][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.911547][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.927027][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.897479][ T13] bridge_slave_1: left allmulticast mode [ 410.921399][ T13] bridge_slave_1: left promiscuous mode [ 410.943235][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.983233][ T13] bridge_slave_0: left allmulticast mode [ 411.002540][ T5638] Bluetooth: hci1: command tx timeout [ 411.020782][ T13] bridge_slave_0: left promiscuous mode [ 411.037867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.173300][ T9402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.259984][ T5780] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 411.440570][ T5780] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 411.458999][ T5780] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 411.480163][ T5780] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 411.682723][ T5780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.707723][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.717024][ T5780] usb 4-1: Product: syz [ 411.721868][ T5780] usb 4-1: Manufacturer: syz [ 411.726772][ T5780] usb 4-1: SerialNumber: syz [ 412.165748][ T5780] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 412.173582][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.239331][ T5780] cdc_ncm 4-1:1.0: bind() failure [ 412.399506][ T5780] usb 4-1: USB disconnect, device number 10 [ 412.447364][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.463320][ T13] bond0 (unregistering): Released all slaves [ 412.490705][ T13] bond1 (unregistering): Released all slaves [ 412.521933][ T13] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 412.565074][ T13] bond2 (unregistering): Released all slaves [ 412.646831][ T13] bond3 (unregistering): Released all slaves [ 412.725287][ T13] bond4 (unregistering): Released all slaves [ 413.079857][ T5638] Bluetooth: hci1: command tx timeout [ 413.106929][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.114389][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.210809][ T9453] 9pnet_virtio: no channels available for device syz [ 413.521953][ T9466] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1151'. [ 413.731560][ T9440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.788595][ T9440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.286172][ T9477] trusted_key: encrypted_key: insufficient parameters specified [ 414.301935][ T7743] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.338306][ T7743] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.359647][ T9477] siw: device registration error -23 [ 414.372533][ T7743] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.535724][ T7743] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.659989][ T5638] Bluetooth: hci1: command tx timeout [ 416.742150][ T13] hsr_slave_0: left promiscuous mode [ 416.778921][ T13] hsr_slave_1: left promiscuous mode [ 416.790048][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.865761][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.740899][ T5638] Bluetooth: hci1: command tx timeout [ 417.957960][ T5638] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 417.970676][ T5638] Bluetooth: hci2: Injecting HCI hardware error event [ 417.982910][ T50] Bluetooth: hci2: hardware error 0x00 [ 418.517760][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.636163][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 420.944100][ T13] team0 (unregistering): Port device team_slave_1 removed [ 421.448698][ T9540] 9pnet_virtio: no channels available for device syz [ 421.868909][ T13] team0 (unregistering): Port device team_slave_0 removed [ 422.145547][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 422.239186][ T5772] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 422.407784][ T5772] usb 6-1: Using ep0 maxpacket: 32 [ 422.414979][ T5772] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 422.425329][ T5772] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.444734][ T5772] usb 6-1: config 0 descriptor?? [ 422.455779][ T5772] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 422.865284][ T13] IPVS: stop unused estimator thread 0... [ 423.081841][ T5772] gspca_nw80x: reg_w err -71 [ 423.111470][ T5772] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 423.210954][ T5772] usb 6-1: USB disconnect, device number 12 [ 423.770072][ T9583] Bluetooth: MGMT ver 1.23 [ 424.741709][ T9589] Bluetooth: MGMT ver 1.23 [ 425.581878][ T9591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.995393][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.278955][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.301336][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.330350][ T9422] bridge_slave_0: entered allmulticast mode [ 426.352529][ T9422] bridge_slave_0: entered promiscuous mode [ 426.384549][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.404501][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.437134][ T9422] bridge_slave_1: entered allmulticast mode [ 426.457428][ T9610] io-wq is not configured for unbound workers [ 426.459070][ T9422] bridge_slave_1: entered promiscuous mode [ 426.745024][ T9614] 9pnet_virtio: no channels available for device syz [ 426.754501][ T9422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.502761][ T9422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.597233][ T9422] team0: Port device team_slave_0 added [ 427.615635][ T9422] team0: Port device team_slave_1 added [ 428.553175][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.576780][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.773163][ T9422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.788647][ T9422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.795796][ T9422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.840051][ T9422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.111085][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 429.183895][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 429.887920][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 429.985786][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 430.012450][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.037763][ T24] usb 2-1: Product: syz [ 430.048538][ T24] usb 2-1: Manufacturer: syz [ 430.063487][ T9422] hsr_slave_0: entered promiscuous mode [ 430.078188][ T24] usb 2-1: SerialNumber: syz [ 430.097116][ T24] usb 2-1: config 0 descriptor?? [ 430.115798][ T9422] hsr_slave_1: entered promiscuous mode [ 430.126273][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 430.327184][ T24] gspca_spca508: reg_read err -32 [ 431.376460][ T24] gspca_spca508: reg_read err -32 [ 431.788318][ T24] gspca_spca508: reg_read err -32 [ 431.818742][ T24] gspca_spca508: reg_read err -32 [ 431.829265][ T24] gspca_spca508: reg_read err -32 [ 432.349051][ T24] gspca_spca508: reg write: error -110 [ 432.360695][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -110 [ 433.460874][ T9673] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1205'. [ 433.577470][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1206'. [ 433.812747][ T1235] usb 2-1: USB disconnect, device number 7 [ 434.374993][ T9687] 9pnet_virtio: no channels available for device syz [ 434.482652][ T9690] fuse: Bad value for 'user_id' [ 434.510614][ T9690] fuse: Bad value for 'user_id' [ 438.690311][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1221'. [ 438.756430][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1223'. [ 438.833509][ T9740] fuse: Bad value for 'fd' [ 438.884476][ T9422] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.199130][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.403259][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.415481][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.013252][ T9422] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.186295][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'. [ 440.258157][ T9758] siw: device registration error -23 [ 440.515454][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.566996][ T9422] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.276873][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.318076][ T9422] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.363314][ T9422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.348904][ T9422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.464984][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1240'. [ 446.475947][ T9422] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.548613][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.555956][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.626188][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.633474][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.647854][ T5895] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 446.721207][ T9816] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7040] was attempted by ""[9816] [ 447.269408][ T9821] syzkaller0: entered promiscuous mode [ 447.293053][ T9821] syzkaller0: entered allmulticast mode [ 448.402582][ T9422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.642661][ T9422] veth0_vlan: entered promiscuous mode [ 449.609975][ T9806] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.663588][ T9422] veth1_vlan: entered promiscuous mode [ 451.164068][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 451.436139][ T9422] veth0_macvtap: entered promiscuous mode [ 451.464136][ T9422] veth1_macvtap: entered promiscuous mode [ 451.616325][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.655939][ T9422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.675844][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.689492][ T9897] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by ""[9897] [ 451.706000][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.727816][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.746021][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.185149][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 453.720640][ T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 453.838063][ T24] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 453.865962][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.894633][ T24] usb 2-1: Product: syz [ 453.924955][ T24] usb 2-1: Manufacturer: syz [ 453.962425][ T24] usb 2-1: SerialNumber: syz [ 454.042016][ T24] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 454.057181][ T7747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.084313][ T7747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.200698][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.241283][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.264589][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 454.329869][ T24] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 454.357971][ T24] usb 2-1: media controller created [ 454.562937][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 455.271264][ T24] usb 2-1: USB disconnect, device number 8 [ 457.092035][ T5895] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 459.909869][ T9948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.908373][ T9988] netlink: 'syz.3.1282': attribute type 23 has an invalid length. [ 461.248681][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 461.417383][ T9992] netlink: 'syz.2.1284': attribute type 2 has an invalid length. [ 461.481769][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 461.505303][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 461.547790][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 461.598681][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 461.640439][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 461.673354][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 461.710146][ T24] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 461.740323][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.762745][ T24] usb 7-1: Product: syz [ 461.777754][ T24] usb 7-1: Manufacturer: syz [ 461.781753][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1289'. [ 461.784168][ T24] usb 7-1: SerialNumber: syz [ 461.832105][ T24] usb 7-1: config 0 descriptor?? [ 462.721679][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 462.856591][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 462.926944][ T24] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 463.015934][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.719685][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.760869][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.780202][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.804088][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.841303][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.861751][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.892411][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.920526][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.942720][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 464.979692][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.020341][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.048471][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.076833][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.122228][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.146490][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.177678][ T24] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 465.206819][ T24] input input9: Timeout waiting for response from device. [ 465.619437][ T24] usb 7-1: USB disconnect, device number 5 [ 467.260631][ T7743] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 469.542855][T10063] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 470.175762][T10047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.958300][T10125] fuse: Invalid rootmode [ 476.120592][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 477.064829][T10141] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.097635][ T9] usb 3-1: device descriptor read/64, error -71 [ 478.184238][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 478.212724][T10146] netlink: 'syz.1.1334': attribute type 2 has an invalid length. [ 479.897820][ T9] usb 3-1: device descriptor read/64, error -71 [ 480.113547][ T9] usb usb3-port1: attempt power cycle [ 480.301176][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.560123][T10161] syzkaller0: entered promiscuous mode [ 480.579900][T10161] syzkaller0: entered allmulticast mode [ 480.637340][T10167] fuse: fd is not a fuse device [ 480.691105][T10166] syzkaller0: entered promiscuous mode [ 480.713447][T10166] syzkaller0: entered allmulticast mode [ 480.991193][T10166] tipc: Started in network mode [ 480.997162][T10166] tipc: Node identity 32efda397c6, cluster identity 4711 [ 481.005925][T10166] tipc: Enabled bearer , priority 0 [ 481.031425][T10173] tipc: Resetting bearer [ 481.063877][T10164] tipc: Resetting bearer [ 481.352300][T10164] tipc: Disabling bearer [ 485.410463][T10210] bridge_slave_0: left allmulticast mode [ 485.438829][T10210] bridge_slave_0: left promiscuous mode [ 485.466967][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.526099][T10210] bridge_slave_1: left allmulticast mode [ 485.547331][T10210] bridge_slave_1: left promiscuous mode [ 485.587975][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.725523][T10210] bond0: (slave bond_slave_0): Releasing backup interface [ 485.770557][T10178] udc dummy_udc.0: failed to start g1: -12 [ 485.776784][T10178] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 485.794396][T10178] UDC core: g1: couldn't find an available UDC or it's busy [ 485.814819][T10210] bond0: (slave bond_slave_1): Releasing backup interface [ 485.874716][T10210] team0: Port device team_slave_0 removed [ 485.932984][T10210] team0: Port device team_slave_1 removed [ 485.959664][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.990860][T10210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.011584][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.044660][T10210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.070902][T10210] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 486.381162][T10217] bond1: (slave ip6gretap1): making interface the new active one [ 486.410821][T10217] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 487.099593][ T50] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 488.650659][T10258] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5626] was attempted by ""[10258] [ 489.639125][T10234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.007358][T10274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.864663][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 490.993767][T10284] siw: device registration error -23 [ 491.149840][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 491.354864][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.391712][ T10] usb 2-1: config 0 has no interfaces? [ 491.419951][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.448985][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.479882][ T10] usb 2-1: Product: syz [ 491.497338][ T10] usb 2-1: Manufacturer: syz [ 491.517124][ T10] usb 2-1: SerialNumber: syz [ 491.542577][ T10] usb 2-1: config 0 descriptor?? [ 491.546533][T10292] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1380'. [ 493.300017][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 493.383535][ T1235] usb 2-1: USB disconnect, device number 9 [ 493.481978][T10298] netlink: 'syz.0.1383': attribute type 2 has an invalid length. [ 493.489939][ T24] usb 3-1: device descriptor read/64, error -71 [ 493.738015][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 493.887896][ T24] usb 3-1: device descriptor read/64, error -71 [ 494.028708][ T24] usb usb3-port1: attempt power cycle [ 494.428377][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 494.459801][ T24] usb 3-1: device descriptor read/8, error -71 [ 494.570339][T10312] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 498.148365][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 498.229669][T10334] siw: device registration error -23 [ 500.546836][T10344] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7040] was attempted by ""[10344] [ 500.841018][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.850162][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.511699][T10361] netlink: 'syz.3.1400': attribute type 9 has an invalid length. [ 502.477642][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 502.617900][ T24] usb 6-1: device descriptor read/64, error -71 [ 503.377694][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 503.645927][ T24] usb 6-1: device descriptor read/64, error -71 [ 505.067710][ T24] usb usb6-port1: attempt power cycle [ 507.718162][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 507.889117][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 507.916993][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 507.949802][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.973785][ T10] usb 6-1: Product: syz [ 507.989012][ T10] usb 6-1: Manufacturer: syz [ 508.004009][ T10] usb 6-1: SerialNumber: syz [ 508.077572][ T10] usb 6-1: config 0 descriptor?? [ 508.205666][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 508.225145][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 508.337897][T10435] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[9422] was attempted by ""[10435] [ 508.422534][ T10] gspca_spca508: reg_read err -32 [ 508.435548][ T10] gspca_spca508: reg_read err -32 [ 508.455812][ T10] gspca_spca508: reg_read err -32 [ 508.471405][ T10] gspca_spca508: reg_read err -32 [ 508.488493][ T10] gspca_spca508: reg_read err -32 [ 510.611943][ T10] gspca_spca508: reg write: error -71 [ 510.641916][ T10] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 510.665685][ T10] usb 6-1: USB disconnect, device number 16 [ 514.222898][ T1235] libceph: connect (1)[c::]:6789 error -101 [ 514.253719][ T1235] libceph: mon0 (1)[c::]:6789 connect error [ 514.338396][ T1235] libceph: connect (1)[c::]:6789 error -101 [ 514.354157][T10468] ceph: No mds server is up or the cluster is laggy [ 514.374098][ T1235] libceph: mon0 (1)[c::]:6789 connect error [ 514.437940][ T5765] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 514.607950][ T5765] usb 2-1: Using ep0 maxpacket: 16 [ 514.621908][ T5765] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 514.647626][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.674881][ T5765] usb 2-1: Product: syz [ 514.692362][ T5765] usb 2-1: Manufacturer: syz [ 514.699662][ T5765] usb 2-1: SerialNumber: syz [ 514.719597][ T5765] usb 2-1: config 0 descriptor?? [ 514.730699][ T5765] gspca_main: spca508-2.14.0 probing 041e:4018 [ 515.280875][T10496] xt_hashlimit: size too large, truncated to 1048576 [ 515.476853][ T5765] gspca_spca508: reg_read err -110 [ 515.549639][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 515.571618][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.961309][ T5765] gspca_spca508: reg_read err -32 [ 515.987774][ T5765] gspca_spca508: reg_read err -32 [ 516.013319][ T5765] gspca_spca508: reg_read err -32 [ 516.028084][ T5765] gspca_spca508: reg_read err -32 [ 516.050920][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1451'. [ 516.061907][T10503] netlink: 'syz.0.1451': attribute type 4 has an invalid length. [ 516.069940][T10503] netlink: 'syz.0.1451': attribute type 1 has an invalid length. [ 516.159997][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 516.169578][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 516.180105][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 516.195555][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 516.208981][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 516.220795][ T10] usb 4-1: Product: syz [ 516.225042][ T10] usb 4-1: Manufacturer: syz [ 516.230118][ T10] usb 4-1: SerialNumber: syz [ 517.971637][ T5765] gspca_spca508: reg write: error -110 [ 517.978236][ T5765] spca508 2-1:0.0: probe with driver spca508 failed with error -110 [ 517.991652][ T10] usb 4-1: config 0 descriptor?? [ 518.006861][ T5765] usb 2-1: USB disconnect, device number 10 [ 518.201163][ T10] usb 4-1: can't set config #0, error -71 [ 518.266230][ T10] usb 4-1: USB disconnect, device number 11 [ 519.240275][T10511] syz.5.1454 (10511): drop_caches: 2 [ 519.439645][T10519] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 520.597609][ T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 520.792974][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 520.817616][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1464'. [ 520.839788][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 520.867420][ T10] usb 6-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 520.895140][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.940733][ T10] usb 6-1: Product: syz [ 520.956138][ T10] usb 6-1: Manufacturer: syz [ 520.979201][ T10] usb 6-1: SerialNumber: syz [ 521.097068][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 521.251556][T10547] tipc: Enabling of bearer rejected, failed to enable media [ 522.426398][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 522.501944][ T10] snd-usb-hiface 6-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 522.666601][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.686435][ T10] usb 6-1: can't set first interface for hiFace device. [ 522.717095][ T10] snd-usb-hiface 6-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 522.766213][ T10] usb 6-1: can't set first interface for hiFace device. [ 522.795825][ T10] snd-usb-hiface 6-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 523.012635][ T10] usb 6-1: USB disconnect, device number 17 [ 523.440120][ T7933] udevd[7933]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.994475][T10569] syz.2.1472 (10569): drop_caches: 2 [ 524.473578][T10589] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1480'. [ 524.951124][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'. [ 526.785056][T10609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.749775][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 528.142367][ T50] Bluetooth: hci6: unexpected event for opcode 0x0c7c [ 528.727557][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 528.746829][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 528.771392][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.798980][ T10] usb 2-1: Product: syz [ 528.812349][ T10] usb 2-1: Manufacturer: syz [ 528.825529][ T10] usb 2-1: SerialNumber: syz [ 528.858193][ T10] usb 2-1: config 0 descriptor?? [ 528.880013][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 529.074526][ T10] gspca_spca508: reg_read err -32 [ 529.092403][ T10] gspca_spca508: reg_read err -32 [ 529.111576][ T10] gspca_spca508: reg_read err -32 [ 529.126341][ T10] gspca_spca508: reg_read err -32 [ 529.145407][ T10] gspca_spca508: reg_read err -32 [ 531.336703][ T10] gspca_spca508: reg write: error -71 [ 531.363096][ T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 531.377347][ T10] usb 2-1: USB disconnect, device number 11 [ 531.982149][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1499'. [ 532.267420][T10647] fuse: fd is not a fuse device [ 532.287898][T10635] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 532.295958][T10635] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1496'. [ 532.308475][T10635] x_tables: duplicate underflow at hook 2 [ 532.952591][T10663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.400943][T10662] sch_tbf: burst 0 is lower than device veth0_to_hsr mtu (1514) ! [ 534.698886][T10679] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1511'. [ 539.369205][T10723] netlink: 'syz.6.1523': attribute type 23 has an invalid length. [ 539.551091][T10707] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 539.581014][T10707] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1518'. [ 539.618866][T10707] x_tables: duplicate underflow at hook 2 [ 539.761242][T10735] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 540.759517][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 540.775687][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 544.267008][ T30] audit: type=1800 audit(3932472064.052:26): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1540" name="bColorPrimaries" dev="configfs" ino=26593 res=0 errno=0 [ 544.360670][ T30] audit: type=1800 audit(3932472064.122:27): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1540" name="bTransferCharacteristics" dev="configfs" ino=26954 res=0 errno=0 [ 546.441025][ T30] audit: type=1800 audit(3932472064.122:28): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1540" name="bMatrixCoefficients" dev="configfs" ino=26955 res=0 errno=0 [ 546.553452][ T30] audit: type=1800 audit(3932472064.132:29): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1540" name="bColorPrimaries" dev="configfs" ino=26960 res=0 errno=0 [ 548.131455][T10802] netlink: 'syz.1.1550': attribute type 23 has an invalid length. [ 555.055896][T10847] overlayfs: failed to clone upperpath [ 562.329010][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.410672][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.677786][T10908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.766683][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c1c [ 572.317646][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 572.677604][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 572.732815][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.750768][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.761582][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 572.771556][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.254203][ T10] usb 2-1: config 0 descriptor?? [ 573.277309][ T10] hub 2-1:0.0: USB hub found [ 573.480724][ T10] hub 2-1:0.0: 1 port detected [ 574.088799][T10997] bridge0: port 3(erspan0) entered blocking state [ 574.098595][T10997] bridge0: port 3(erspan0) entered disabled state [ 574.110546][T10997] erspan0: entered allmulticast mode [ 574.131827][T10997] erspan0: entered promiscuous mode [ 574.761415][ T10] hub 2-1:0.0: activate --> -90 [ 574.963730][ T5772] usb 2-1: USB disconnect, device number 12 [ 574.973039][ T10] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 575.121582][T11007] xfrm0: entered promiscuous mode [ 575.126691][T11007] xfrm0: entered allmulticast mode [ 575.152107][T11007] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 575.249841][T11007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.662635][T10987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.188996][T11019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.310057][T11027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.992246][T11047] xt_hashlimit: size too large, truncated to 1048576 [ 579.328538][ T5772] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 579.504156][T11057] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.537772][ T5772] usb 2-1: Using ep0 maxpacket: 32 [ 579.565144][T11057] bond2: (slave lo): Enslaving as an active interface with an up link [ 579.591133][ T5772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.632754][T11057] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 579.683527][ T5772] usb 2-1: config 0 has no interfaces? [ 579.705940][ T5772] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 579.751855][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.819569][ T5772] usb 2-1: config 0 descriptor?? [ 581.767005][T11077] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 581.828649][T11079] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7040] was attempted by ""[11079] [ 582.101727][ T24] usb 2-1: USB disconnect, device number 13 [ 584.717795][ T5772] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 584.894274][ T5772] usb 4-1: config 0 has no interfaces? [ 584.913157][ T5772] usb 4-1: config 0 has no interfaces? [ 584.925148][ T5772] usb 4-1: config 0 has no interfaces? [ 584.939045][ T5772] usb 4-1: string descriptor 0 read error: -22 [ 584.953518][ T5772] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 584.973962][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.003680][ T5772] usb 4-1: config 0 descriptor?? [ 586.097895][ T5868] usb 4-1: USB disconnect, device number 12 [ 587.987643][T11104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 589.460226][T11158] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7040] was attempted by ""[11158] [ 590.337271][T11169] netlink: 'syz.3.1661': attribute type 23 has an invalid length. [ 590.841095][ T9] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 590.858790][T11164] bridge_slave_0: left allmulticast mode [ 590.877761][T11164] bridge_slave_0: left promiscuous mode [ 590.893931][T11164] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.931732][T11164] bridge_slave_1: left allmulticast mode [ 590.951896][T11164] bridge_slave_1: left promiscuous mode [ 591.004673][T11164] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.063227][ T9] usb 2-1: config 0 has no interfaces? [ 591.082080][T11164] bond0: (slave bond_slave_0): Releasing backup interface [ 591.084508][ T9] usb 2-1: config 0 has no interfaces? [ 591.121240][ T9] usb 2-1: config 0 has no interfaces? [ 591.185049][T11164] bond0: (slave bond_slave_1): Releasing backup interface [ 591.265192][T11164] team0: Port device team_slave_0 removed [ 591.309230][T11164] team0: Port device team_slave_1 removed [ 591.342625][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.359642][T11164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.396089][T11164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.429343][T11164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.473135][T11164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.247631][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 592.427792][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 592.636587][ T10] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.755700][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.393142][ T10] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 593.409067][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.433636][ T10] usb 4-1: config 0 descriptor?? [ 593.610361][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.03 [ 593.668242][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.819388][ T9] usb 2-1: config 0 descriptor?? [ 593.994628][ T9] usb 2-1: can't set config #0, error -71 [ 594.054890][T11190] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 594.079346][T11190] qnx6: wrong signature (magic) in superblock #1. [ 594.086516][T11190] qnx6: unable to read the first superblock [ 594.234977][ T9] usb 2-1: USB disconnect, device number 14 [ 594.417256][T11189] ceph: No mds server is up or the cluster is laggy [ 594.753947][ T10] dragonrise 0003:0079:0011.0004: unknown main item tag 0x2 [ 594.816210][ T10] dragonrise 0003:0079:0011.0004: unknown main item tag 0x7 [ 594.894156][T11145] syz.0.1654 (11145): drop_caches: 2 [ 594.971848][ T10] dragonrise 0003:0079:0011.0004: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 595.207845][ T5765] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 595.377701][ T5765] usb 3-1: Using ep0 maxpacket: 32 [ 595.403736][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.462806][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.502890][ T5765] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 595.531061][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.564573][ T989] usb 4-1: USB disconnect, device number 13 [ 595.645026][ T5765] usb 3-1: config 0 descriptor?? [ 595.750534][ T5765] hub 3-1:0.0: USB hub found [ 597.095506][ T5765] hub 3-1:0.0: 1 port detected [ 597.896506][T11209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.191299][T11217] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5624] was attempted by ""[11217] [ 598.861442][T11216] netlink: 'syz.6.1677': attribute type 23 has an invalid length. [ 598.892694][ T10] hub 3-1:0.0: activate --> -90 [ 599.099961][ T5765] usb 3-1: USB disconnect, device number 18 [ 599.106621][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 599.340162][T11225] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 601.252846][T11257] netlink: 'syz.1.1687': attribute type 2 has an invalid length. [ 601.724269][T11264] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1686'. [ 602.266928][ T989] IPVS: starting estimator thread 0... [ 602.345639][T11276] IPVS: sh: FWM 3 0x00000003 - no destination available [ 602.370432][T11273] IPVS: using max 25 ests per chain, 60000 per kthread [ 602.401410][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 602.983024][T11291] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5623] was attempted by ""[11291] [ 605.534212][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.048067][T11316] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 606.354803][T11321] netlink: 'syz.5.1700': attribute type 2 has an invalid length. [ 608.609460][T11350] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5621] was attempted by ""[11350] [ 610.009902][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 610.112482][T11371] input: syz0 as /devices/virtual/input/input11 [ 611.085463][T11376] ------------[ cut here ]------------ [ 611.092049][T11376] kernel BUG at net/core/dev.c:11340! [ 611.157061][T11376] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 611.163534][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.2.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 611.174482][T11376] Tainted: [L]=SOFTLOCKUP [ 611.178802][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 611.188861][T11376] RIP: 0010:register_netdevice+0x1e8c/0x1eb0 [ 611.194872][T11376] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 e7 06 90 f8 e9 b1 fb ff ff e8 1d 75 22 f8 90 0f 0b e8 15 75 22 f8 90 <0f> 0b e8 0d 75 22 f8 90 0f 0b e8 05 75 22 f8 41 be 42 00 00 00 e9 [ 611.214489][T11376] RSP: 0018:ffffc90004f47580 EFLAGS: 00010287 [ 611.220605][T11376] RAX: ffffffff89a48c6b RBX: 1ffff920009e8ec4 RCX: 0000000000080000 [ 611.228585][T11376] RDX: ffffc9000433b000 RSI: 0000000000013f39 RDI: 0000000000013f3a [ 611.237002][T11376] RBP: ffffc90004f47700 R08: ffffffff9002d2e7 R09: 1ffffffff2005a5c [ 611.245155][T11376] R10: dffffc0000000000 R11: fffffbfff2005a5d R12: ffff888078528f10 [ 611.253230][T11376] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888078528000 [ 611.261213][T11376] FS: 00007f10affba6c0(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 611.270956][T11376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.277925][T11376] CR2: 00002000002dd030 CR3: 000000005e08c000 CR4: 0000000000350ef0 [ 611.285910][T11376] Call Trace: [ 611.289189][T11376] [ 611.292112][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.297759][T11376] ? trace_contention_end+0x3d/0x140 [ 611.303629][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.309287][T11376] ? __mutex_lock+0x30d/0x1550 [ 611.314171][T11376] ? register_netdev+0x18/0x60 [ 611.319035][T11376] ? __pfx___mutex_lock+0x10/0x10 [ 611.324079][T11376] ? __pfx_register_netdevice+0x10/0x10 [ 611.329639][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.335284][T11376] ? __hw_addr_insert+0x1f8/0x220 [ 611.340316][T11376] ? dev_addr_mod+0x174/0x350 [ 611.345009][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.350656][T11376] ? dev_addr_mod+0x1ba/0x350 [ 611.355423][T11376] register_netdev+0x40/0x60 [ 611.360016][T11376] gether_register_netdev+0x84/0x180 [ 611.365311][T11376] ecm_bind+0x201/0xa30 [ 611.369470][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.375246][T11376] ? usb_gstrings_attach+0xcba/0xde0 [ 611.380530][T11376] usb_add_function+0x2e1/0x9f0 [ 611.385376][T11376] configfs_composite_bind+0xde0/0x1410 [ 611.390921][T11376] ? __pfx_configfs_composite_bind+0x10/0x10 [ 611.396893][T11376] gadget_bind_driver+0x2ca/0x9e0 [ 611.401936][T11376] ? __pfx_gadget_bind_driver+0x10/0x10 [ 611.407486][T11376] really_probe+0x254/0xae0 [ 611.412011][T11376] __driver_probe_device+0x1e8/0x360 [ 611.417317][T11376] driver_probe_device+0x4f/0x240 [ 611.422340][T11376] __driver_attach+0x339/0x600 [ 611.427107][T11376] bus_for_each_dev+0x23b/0x2c0 [ 611.431969][T11376] ? __pfx___driver_attach+0x10/0x10 [ 611.437307][T11376] ? __pfx_bus_for_each_dev+0x10/0x10 [ 611.442790][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.448889][T11376] ? do_raw_spin_unlock+0xf5/0x210 [ 611.454136][T11376] bus_add_driver+0x345/0x670 [ 611.458859][T11376] driver_register+0x23a/0x320 [ 611.463646][T11376] usb_gadget_register_driver_owner+0xf9/0x270 [ 611.469808][T11376] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 611.475462][T11376] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 611.481637][T11376] configfs_write_iter+0x337/0x430 [ 611.486785][T11376] vfs_write+0x612/0xba0 [ 611.491031][T11376] ? __pfx_vfs_write+0x10/0x10 [ 611.495805][T11376] ? __fget_files+0x2a/0x420 [ 611.500406][T11376] ? srso_alias_return_thunk+0x5/0xfbef5 [ 611.506040][T11376] ksys_write+0x150/0x270 [ 611.510365][T11376] ? __pfx_ksys_write+0x10/0x10 [ 611.515210][T11376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.521272][T11376] do_syscall_64+0x174/0x580 [ 611.525966][T11376] ? trace_irq_disable+0x3b/0x140 [ 611.531001][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.536931][T11376] RIP: 0033:0x7f10af19de99 [ 611.541376][T11376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.560991][T11376] RSP: 002b:00007f10affba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.569431][T11376] RAX: ffffffffffffffda RBX: 00007f10af425fa0 RCX: 00007f10af19de99 [ 611.577410][T11376] RDX: 000000000000000b RSI: 0000200000001500 RDI: 0000000000000003 [ 611.585382][T11376] RBP: 00007f10af233eaf R08: 0000000000000000 R09: 0000000000000000 [ 611.593353][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.601325][T11376] R13: 00007f10af426038 R14: 00007f10af425fa0 R15: 00007ffff0d81fb8 [ 611.609351][T11376] [ 611.612358][T11376] Modules linked in: [ 611.617670][T11376] ---[ end trace 0000000000000000 ]--- [ 611.898000][T11376] RIP: 0010:register_netdevice+0x1e8c/0x1eb0 [ 611.956320][T11376] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 e7 06 90 f8 e9 b1 fb ff ff e8 1d 75 22 f8 90 0f 0b e8 15 75 22 f8 90 <0f> 0b e8 0d 75 22 f8 90 0f 0b e8 05 75 22 f8 41 be 42 00 00 00 e9 [ 611.977388][T11376] RSP: 0018:ffffc90004f47580 EFLAGS: 00010287 [ 611.993164][T11376] RAX: ffffffff89a48c6b RBX: 1ffff920009e8ec4 RCX: 0000000000080000 [ 612.004229][T11376] RDX: ffffc9000433b000 RSI: 0000000000013f39 RDI: 0000000000013f3a [ 612.014350][T11376] RBP: ffffc90004f47700 R08: ffffffff9002d2e7 R09: 1ffffffff2005a5c [ 612.022745][T11376] R10: dffffc0000000000 R11: fffffbfff2005a5d R12: ffff888078528f10 [ 612.031377][T11376] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888078528000 [ 612.039761][T11376] FS: 00007f10affba6c0(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 612.049326][T11376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.056062][T11376] CR2: 00007f2e45f12e9c CR3: 000000005e08c000 CR4: 0000000000350ef0 [ 612.065605][T11376] Kernel panic - not syncing: Fatal exception [ 612.072040][T11376] Kernel Offset: disabled [ 612.076361][T11376] Rebooting in 86400 seconds..