last executing test programs: 4m52.44629296s ago: executing program 4 (id=1893): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x5a2e, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0xe4}]}, 0x10) memfd_create(0x0, 0x2) r1 = mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 4m50.616079244s ago: executing program 4 (id=1924): syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000006b2af8ff00000000b509000000000000c38af8ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m46.884439834s ago: executing program 4 (id=1942): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000002680), 0x37, 0x10000) bind$inet(r2, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0xb4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x4, &(0x7f0000008400)=ANY=[]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) 4m31.780768645s ago: executing program 32 (id=1942): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000002680), 0x37, 0x10000) bind$inet(r2, &(0x7f0000019080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x40, 0xb4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x4, &(0x7f0000008400)=ANY=[]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) 29.324723483s ago: executing program 1 (id=3319): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r4 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$binfmt_misc(r4, &(0x7f0000000a00)="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", 0x603) r5 = openat$nullb(0xffffff9c, &(0x7f0000000540), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) setresuid(0x0, r3, r3) r6 = dup2(0xffffffffffffffff, r2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r6, 0x20, &(0x7f0000000400)={&(0x7f0000000280)=""/123, 0x7b, 0x0, &(0x7f0000000300)=""/231, 0xe7}}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)={0x5e, 0x7d, 0x1, {{0x0, 0x48, 0x81, 0x7, {0x4, 0x3, 0x4}, 0x42100000, 0x54, 0x8, 0x7, 0x4, 'syz\x00', 0xa, '#\x14-&//^&\xfb}', 0x3, '9p\x00', 0x4, '-+\'%'}, 0x1, '\xd7', r3, r7, 0xee01}}, 0x5e) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0x40045010, &(0x7f0000000300)=0x3) pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000500)="be", 0x20013}], 0x1, 0x5, 0xa, 0x14) 26.598349829s ago: executing program 1 (id=3322): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x4007, 0x20000400) 25.684213509s ago: executing program 1 (id=3324): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0xee01) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x800000000000000, 0xfffffffffffffffc, 0x243}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x0, 0x32}, 0x0, @in=@private=0xa090102, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe4) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.248403111s ago: executing program 1 (id=3332): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xbd, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0x87, 0xa, 0x6, 0x7, 0x6}, {0x1fd, 0x8, 0xd, 0x21, 0x25, 0x9, 0x1, 0x16, 0x3, 0x15, 0x0, 0x7, 0x4}], 0x20000002}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x5, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x2, 0xc5fb, @value=0x3}) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed23da02f7a291fcc59c4382ecb", 0x41, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe8b, 0x0) 6.786179485s ago: executing program 1 (id=3356): mkdir(&(0x7f0000000140)='./file0\x00', 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file2'}, 0xb) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x0) 6.061833107s ago: executing program 1 (id=3360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xc9f, &(0x7f0000002a00)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a3596c", 0xc61, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc1d, 0x2, [], "a9be2f37bfefb02bcd191af6cdfd68e595b59ba0bf52f9a5b0be1ab56830f85488cf284273ba0e6bb5407fad8194263f03f0ff02888a0f9cb153d707c7132e14e06787765e14e7a4c43308301f5adfb3f8e64c2f96df25fbc259cbd8afe6052c8c9f4e74bc58f84f1cdf1422ed72cc854c5fd08185d42ab9c7058dd9cc7f0602d66a2b30dd4403290371e5b4c04aeb1a71d7d479dd67e407df4b221d979ccd8bceb144b3ee5b6b47ab37396528ddaaaf5390b0bbb5d9f9c59a45fbf691f3cf5ceb96bae81205c6b7aee1c441f37d98b993c7611ffae9b1895f7820b44ff5e75dc371f176e47593c6d8481cd637fd1dcc9878f6bc69f9b762a4e352ed30de06caa48d8d2b21147aaa32ad135f7eff6f8d5ff40973997a13d114892b11134a8976734c0b707464ead75ce7f0221fecd452c1a554893a8baeae87a881772e04008bb3948fed882093e3569a1898dd3347f03f61e993ff4feec1cef30fb3c32ba6f6d92c6fdffca0cdb9f3997a6125f866f42a03fe09438c0c9450f00bbbf83188b088dfa0e6ee51b07c1136da830edde08c6cb20d894ddb4627f9658eb72705261466cfac54e55901130953e80b0a89da618f551fb23608e7ce190e69896870cbdd65b46a6a74ee5ad25eca77f30824d07d35ed8dafd668d6bc7157a5460a4dbbdb983eb865cfaeb7378532475cf9fa36679f9d7934ec3acf38082ff69d1dbda642a722c90510c992ecf5025cdef064ce453cfb7c824b12814e30a1680dd3aabaa380e28e7a2005066b2eb7aa22f4622dfedd33763cc84f57e1a7e91b0fa3455b6891ad448a31e8fd220b588f21a7aa866c94ba487535fdf1dff36eb473cba3c0f0ae6e99a883af7bbbdae8eaddb02b103bab74cd2e31f5467e780d4fe3921d4deec4524571c452f7c1d4d09e8c4f1f718ca087e22871fdee61cfe93da1973cf2c1f4f4296c9d357f0a5a0196ad1207b81ffbb2ff42330b55c36dd42c97f110b66600ddc9db0a2f5703ad2d3157fb35f6183c3636f03e9fa822d8eca443730e27a6e8601e6af4da91d92e570c6591f6682cb36cb795cdb3b59683a750dff8c7860418e450678f57817b7041951f7bc86dfad258dd7ede098e2d31f0f8edd2c0c0b9dcf6e48f8811c9302ff4e35b8b6c634e6ae1028863d28f66e44f6cf917dbbff070cfaa5bb25c163029c3c0520cc112f4e0886aae83e94ba2065e45bf00ad742afa21e56989b0a7238d07ce32723a311fe5b8e2322396818f4505f9fe2739a18387b7e541931bcda36568306ecf66700e9318dc7ffd72007e695547cc9150aa242130756a4805e144fce7811bd5de2d3123dd8729bb8bf64efe6ab459d9b8fd924c6a91fbe301c4485de836518f5705e169fee60c6816c3a8f4b9e92a8984e67ef8dd1d2441ef1bba58b270b221539b9459f5e96b463b018b3fbc0e336bb70acefc5fc09defcec7bfea6bb35b69d228155a3896866f76269b8adacafe9046a5d3ae3dc2526d39dcedf7a8e40011a23df5a769a6baf75ece3b87d53aeea94647fb8c2247d1371b0a14992cab66f44d435f8de903969582951e5f1f61dd10b303ba16a98e7a7716d541a4623d3524cef3b12676a4317c0afed7c5f515a2dc2cddb102733203382a02af47f028ee6055387fb7fef3ae91eafd748c8178d4b42bce02bcd8a30e68fb950cd7f977ef7617bd3edf69a5ab683ae4d4b3b05b4cbf95cedca0bc860bd83647d136e9476584e9f3a9061999c3f1297f3c56accbc96fdc46c933af70ab5f5fd8977993463949fa118606da068e222f51eba3965407ef13158f88826287a0c6455b8dd669213a23d70581fba2f4a8449234941602a46c1f3929f32314a0b6c77ad4c8bb32c633865fe209e52d01f2165bb5da9cec570f39492556c6d49a948938fc92933acbe41273fb6843b81485edb18dbcea0ca42d7b525b43de5093ed17fd0660f43fdca67dadd512f4286c84064307319c4f0ff5e488cfa80a062c43453b2ecba851a00e407b489305fc96d5c790e7feb3ea3fc92045a84e6159a60aa81a26384cd48495c61faf8b278626f7b39d9b6a1cb9779deb41b760c4d32f5c105e71db81e3cd86f0b5b49482efa9a159c68cd62fe76f9f266d7b60ec5b2cdfbfcce4a5861b9b2fe0ebdae2102e6e1d5fde41edc05fd78af31f32b67b454f9403744dd325b129e51c44386c10ab1d13971444c6422f42d938b5236f13f786f56d8cef1cca6892fc7101a327d9307cb77a706f8db2e6bc4b190557bf26096ff00dd0b3674a4f0daaaacda21b40311ad5951578b8a1c6a583eee16f5b29e1a7e34cac9bf96f4575775691ad94da65c00a14b287e02bf2cf234b505b13d54796a661f33baf169c61b133da30394ec5fe8b1181c2030697fae7563c076bdad734b1e0dc2a13aa1ade8d0c7fd39151f7ef28a0c77a469a2ae4379880365919a1fd3dcdf441fda752dd46919c682e04f64f3a5be82366f024c0fa64a1b828c78528d4a3090d7cfe1d47c4d7a5257a549aed17dc3359651d5acfc6fee2a8b2851e9769b26cb53b65b0d6ee4732fe9c5c26ae8978d728fe2e7270beb4f8e5f5f21b84545a684a2d0ea8b32ccde1bc3c08d6e8af74a9e29ce893d86f433b345298858fdb8f12e902d4ec2fb65da00b32c6b52b9e41f9744abb513e20c03a55257dc7d2e01bf1a34e22c201c95bf4626bfe1d89eb758140b2fc14b195b07f84d0a87b1b8884e87b4313f22655822e5a4041d639ad0216ced89c6dac9bfb5931f60de95a88c30d13553ed27b0d5a51a44b23ef5c21636d9914204f475ae068c3b2e2e5e50726a6276f8577d062e56e932b8286260381d426dd4db648c2ce614472343139957589b4ccb891320175ac34bd255d5bf0658a08c1663ee7680a7ff386d3faa59532036ca639a2f096e6ae6ecf38ac164a074ed6d1f5dc4ec230fe93c36f8c82bee7e9b2aae1fcf96073698d68e59cbcde1be63e7a157d47da9a4942a89835b6a77c594f69b783c3b85b1d1e458106a2efbad1ffaa62ab7623d69057877715492f138fcd99fbe5375b65f8a765d19bda69f460b7e57d659c397f7f6476628413f678659d0b1b8f11239653a75e01243295f8f4762e2acf3d405bd9ee804ab0c7477db67e1827a91857689d75712728bef09d3cc6b41be4566aeecaadcd2ccbd2a9cdfe67085a96c69dec8dfc9e17a3eff9baae875261549a1cb340816872192c88f7bc843c7aaf687b9dfe9b933832bc4b16378cba63b278893d7d180f95590f3bcc8f9eb3db45ccf4e7de11457ec323455cac4906d11eda88171c08877135eae43f494c7e24d322df5e982c97babec6dda60b50a3cea2f65d022c9154ee0d7060e829633d985c411f7fbfc39643854c93dbd6bf6dc4874ac29b03d0a3641870555c700d655a389abd56d52cb3ae269ec1063b8dfc0b6ba3ec534bee9a8156f035d13f8ec58e31916a1a3cbc6c4c4b3488a05b01869ff3fe555fcba63fe39100c2a8e1f74a1a59859be0670bb436764f0940f1003a6a65cad891bec3f239fa08dae1408be9761dadb15e5135abebb5b7482a0eb1631d0c2b771d705ea419322b74e236f19a4488aa1d4b0d81c23eabc62f9ec59420aa274a63d5cff4a87c92ba7f59298dcb8ddfc0d3dbe2c83cfff17a72a965a3bf0223a0ac5cab90f32a64ca49ec841bcf7da281bff7aa488a0e98396bb966279a356c96f141a30b61c9f3543c675ad8083400a36c0a36e9b6b249fdd5ebf0eaca7c7fc44c9e73469791e81a7e96477df810b41e307009d308507a6377a333410241a9facabce9999b4031e486abb9e56ff804cc1755e1b3d3363d350c1c10b9a343d50b2bb35ce554a103f3b1e1f0c5b90962ac59727d1027458681ba94a88b59f5917d5c2b37ee83c97fa562980e8bfb1fa2c130d03823958e1463fd3a9926094e13562d31c3c79730feac2fadc819cdf22f2fc2cac4cf60c94cc8236858641b6982c805f7398ecc7306f244e51dddbccac27eb3014a401cd03a8258bc1fdea9afe34aae9d88aff407d29b4871106efe55c8c18c395949a7961a5e84f773d77d2418bf34007813baa33b2030273da3a24a9de733f0dc364393853f6a74f4153cbbad8ae1e922467f0fc284ca6589a4c6104874ac2ab0b9c55bb52e772ae04e4e17ea3d364d7991453e3a5fa2c1f0b166d564895962e881535a070e8b92fc5cb311ef62ce44e635a1e0a79e1d357f4e510085f48beb77f328d9ee97ce88a05d89405425475d4320743fb6dcdd2aa10de691904ed43157eb9ca96841ac9d250a9767c38e147cbed2a4ec7f49353cc95fb43adf7d7069ed2f14e264864d8baf4eb8c0f1848e8e7103b3f1c90e70055fa27f75ef1da96c03eec443c20f3336e5574821959a10"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x2, 0x5, 0xa}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x81, 0x3, 0x1, 0x0, 0x2, 0xa}, 0x2, {0x9, 0x9, 0x3, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 6.061669138s ago: executing program 5 (id=3361): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 5.352168s ago: executing program 3 (id=3364): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24004004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000800), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x440}, 0xe) listen(r2, 0x90004) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x50, 0xffffffffffffffff, 0x0) socket(0x2c, 0x3, 0x1000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x4ad9, 0x0, 0x0, 0x0, &(0x7f0000000000)) accept4(r2, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="043e130100c900", @ANYRESOCT], 0x16) 4.697006957s ago: executing program 0 (id=3367): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x79801, 0x41243}}, 0x20}}, 0x4000000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000bd8000/0x4000)=nil) 4.085581908s ago: executing program 0 (id=3368): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 3.805839924s ago: executing program 0 (id=3369): r0 = fanotify_init(0x1, 0x0) fanotify_mark(r0, 0x451, 0x8001008, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x4, 0x1000) fanotify_mark(r2, 0x1, 0x800002b, r1, 0x0) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) 3.516256508s ago: executing program 3 (id=3370): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @void}, 0x10) r2 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) unshare(0x40400) write$cgroup_pid(r2, &(0x7f0000000400), 0x12) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, 0x0, 0x0) 3.515268119s ago: executing program 0 (id=3371): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x20004040) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n~', @ANYBLOB="020025"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.259550307s ago: executing program 3 (id=3372): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed7, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.055269505s ago: executing program 2 (id=3373): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.913900501s ago: executing program 3 (id=3374): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x1f, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb022000020205090505"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES64=0x0], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) write$char_usb(r2, 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r3, 0x0, 0x49) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8e2b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) 2.913638662s ago: executing program 0 (id=3375): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.827850259s ago: executing program 5 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) pread64$ublk_bdev(0xffffffffffffffff, &(0x7f00000001c0)=""/174, 0xae, 0x2de) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x29b, 0x1, 0x0, 0x1, [@generic="7d88a116a3bf647d6dfcc76cceac143493251ce847ff23b4ea4ec73d0f80beec67b4b715255c02e166dc915532bfd828ca94fd0ab7cd8a4cd08c0103df3d1d0ef9a86734ed6b19eaadd35a65c6f4aca4214d8b19e22a71cde632cb474572c3f75b54c69de2b172880f85428b136100aa616813ab88185dceda8df8f697dc00651baea42a762daf1d80b915e5a0cc899f44afeba5f0807ebbe9c7699a43e83889818c48b4b1768a90a031c7c1dd703bfebf3e6171d679dd888c365ad6713aff911a3a7c4b18718c0d5226034e839d3d0e2b7a1f2c46b2b7ae4a3ee2acbd9364951588241aa5c10e820ad8d34a34f323bdf72522312dd6ad9a80a3895ddea35ac0db1c6ffb834eec59b9ac4b2ce3013515cd6abbb409b324fa79bd7e6bd2d010ea623ce8ec8b917c984b7b7b09980174568402e704264802b2eb50c849dec0e65098cacedd2103ed5ffa0ca8fc2eb2089501101dcf7951dba816318407c63ad9e954db47a368770f9a006850b5b252fac6eeff3ddcecbf4f41018b5b750db04569a502c8405575714884795fde1c06ae7d72c94984ab8b4dbd063c9b17bf43a0a1b9e4c029bf4140c11050b47ee332eb4762539fc3504842948628691e62c86bd560c990a51586f732d22410f886c9fbc48b799c16b9a9a2f0af25ebbe14b7464ec784ec737956eb05f12bc2cff20088e4c5d8ca0360cf8590df5b20ae97bb8f4a8fc43f5a951be12f87908c47f5e0fb28b6f53147e6a6f7f97cb0db7fb332aecc4abf515939e136110afc99e00fc3b139d7812027e71b2ae15da023cbd51275544ba509c536f2dda1a3efc942ec222332a277ef2f5ae9f86766c617bd0c03d5851da326c08fdecf48a5dd9e53b3da6f6d0e71c48ea38b2cf9e8c8a55f35703e617ba5146238eea0b61e93e08d35e6d910fda20c800ddfc2"]}, @typed={0xb, 0x2, 0x0, 0x0, @binary="62095244a4b07e"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2.819637626s ago: executing program 2 (id=3377): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 2.551130739s ago: executing program 2 (id=3378): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xe860}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 2.512849329s ago: executing program 5 (id=3379): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x4}}}}}, 0x36) 2.446437605s ago: executing program 2 (id=3380): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xc9f, &(0x7f0000002a00)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a3596c", 0xc61, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc1d, 0x2, [], "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"}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x0, 0x3, 0x1, 0x2, 0x5, 0xa}, 0x1, {0x81}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x81, 0x3, 0x1, 0x0, 0x2, 0xa}, 0x2, {0x9, 0x9, 0x3, 0x2, 0x1, 0x1}}}}}}}}}, 0x0) 2.198376838s ago: executing program 2 (id=3381): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000200)={0x20, 0x23, 0x8b, {0x8b, 0x23, "28abcb00789d4eb13d1ae2f6b0baf9957db524989734704118c48a32dc187727006a71df74a8588fe219af659a418504e1a9a46037e9bb25192695a88eb4edd4b1a420293dc108858fb71e737efec28c4ec37b54ecf18b818268eda61d2a20cad552162b8cc385b13836494175980bee38f308b0a8603f3ae1a040300fad2bf5f4dcb39e6e79b6eaec"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000300)={0x0, 0x22, 0x14, {[@local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x1, 0x1, 0x6, 'w'}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x3, "58374c03"}, @local=@item_4={0x3, 0x2, 0x0, "eae92682"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "5a0d3bf3"}]}}, 0x0}, &(0x7f0000000600)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x16, "b9004bc844cd3d4db043c0a389bcf777beff98684b13"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x1, 0xbc, "68fe4207715c9b2bd986048b6fc8adbfcf31b02cca9d63a73595519d7b02115523bae873445ce866e9403a2a4ba017216837f834d319bbc7adf1a5ed0bee8cf82e2c4c37b289cae7f69a7850ad231cf6cce186b86d1a712618fa4e0f8101cee4e7625ca93107875a1eabf5e9ba80a9b34459e347256473ff9bcb8dff5f605fdf3b751afd4b28880fe1de05879435a4df2f1bdbb607a9b178d591c7ec7865ea1d4fdff2bc074e29975253809ec63d99e3f27fcd7b17ec16c6c7061637"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xd}}) write$hidraw(r1, 0x0, 0x100000) 1.903456808s ago: executing program 0 (id=3382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x20, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x66}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x52, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x80480911, 0x200000000005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r7, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x200000d0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) 1.133939317s ago: executing program 5 (id=3383): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x57e, 0xead2, 0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) 792.573626ms ago: executing program 3 (id=3384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 667.756378ms ago: executing program 3 (id=3385): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 500.828227ms ago: executing program 5 (id=3386): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 421.808319ms ago: executing program 5 (id=3387): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x804c0c0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 0s ago: executing program 2 (id=3388): pread64$ublk_bdev(0xffffffffffffffff, &(0x7f00000001c0)=""/174, 0xae, 0x2de) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c0, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x29b, 0x1, 0x0, 0x1, [@generic="7d88a116a3bf647d6dfcc76cceac143493251ce847ff23b4ea4ec73d0f80beec67b4b715255c02e166dc915532bfd828ca94fd0ab7cd8a4cd08c0103df3d1d0ef9a86734ed6b19eaadd35a65c6f4aca4214d8b19e22a71cde632cb474572c3f75b54c69de2b172880f85428b136100aa616813ab88185dceda8df8f697dc00651baea42a762daf1d80b915e5a0cc899f44afeba5f0807ebbe9c7699a43e83889818c48b4b1768a90a031c7c1dd703bfebf3e6171d679dd888c365ad6713aff911a3a7c4b18718c0d5226034e839d3d0e2b7a1f2c46b2b7ae4a3ee2acbd9364951588241aa5c10e820ad8d34a34f323bdf72522312dd6ad9a80a3895ddea35ac0db1c6ffb834eec59b9ac4b2ce3013515cd6abbb409b324fa79bd7e6bd2d010ea623ce8ec8b917c984b7b7b09980174568402e704264802b2eb50c849dec0e65098cacedd2103ed5ffa0ca8fc2eb2089501101dcf7951dba816318407c63ad9e954db47a368770f9a006850b5b252fac6eeff3ddcecbf4f41018b5b750db04569a502c8405575714884795fde1c06ae7d72c94984ab8b4dbd063c9b17bf43a0a1b9e4c029bf4140c11050b47ee332eb4762539fc3504842948628691e62c86bd560c990a51586f732d22410f886c9fbc48b799c16b9a9a2f0af25ebbe14b7464ec784ec737956eb05f12bc2cff20088e4c5d8ca0360cf8590df5b20ae97bb8f4a8fc43f5a951be12f87908c47f5e0fb28b6f53147e6a6f7f97cb0db7fb332aecc4abf515939e136110afc99e00fc3b139d7812027e71b2ae15da023cbd51275544ba509c536f2dda1a3efc942ec222332a277ef2f5ae9f86766c617bd0c03d5851da326c08fdecf48a5dd9e53b3da6f6d0e71c48ea38b2cf9e8c8a55f35703e617ba5146238eea0b61e93e08d35e6d910fda20c800ddfc2"]}, @typed={0xb, 0x2, 0x0, 0x0, @binary="62095244a4b07e"}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) kernel console output (not intermixed with test programs): dge0: port 1(bridge_slave_0) entered blocking state [ 747.605015][ T6786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.665820][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.666034][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.850469][ T36] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 748.935413][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.935451][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.935493][ T36] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 748.935519][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.164940][ T36] usb 2-1: config 0 descriptor?? [ 749.582091][ T36] usbhid 2-1:0.0: can't add hid device: -71 [ 749.582222][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 749.660240][ T36] usb 2-1: USB disconnect, device number 42 [ 750.142209][T12762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.230078][ T36] net_ratelimit: 3 callbacks suppressed [ 750.230098][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.423693][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.380142][T12762] veth0_vlan: entered promiscuous mode [ 751.524274][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.577999][T12762] veth1_vlan: entered promiscuous mode [ 751.780421][T12762] veth0_macvtap: entered promiscuous mode [ 751.841281][T12762] veth1_macvtap: entered promiscuous mode [ 751.929034][T12762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.958560][T12762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.013989][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.107191][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.107707][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.107756][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.150014][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.595559][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.782705][T12889] veth0_vlan: entered promiscuous mode [ 753.177346][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.177370][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.200608][T12889] veth1_vlan: entered promiscuous mode [ 753.381386][T12889] veth0_macvtap: entered promiscuous mode [ 753.384693][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.384716][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.448342][T12889] veth1_macvtap: entered promiscuous mode [ 753.541930][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.625934][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.670977][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.678402][ T6786] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.774064][ T6786] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.806024][ T6786] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.833731][ T6786] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.540016][T13749] overlayfs: overlapping lowerdir path [ 754.735890][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.143282][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.143306][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.191165][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.455875][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.562249][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.938812][ T1220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.938835][ T1220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.525927][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.691374][T13801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.698800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.136872][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.242452][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.260465][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.268539][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.270634][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.273497][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.299174][ T5606] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 758.509879][ T5606] usb 2-1: Using ep0 maxpacket: 32 [ 758.512171][ T5606] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 758.512200][ T5606] usb 2-1: config 0 has no interface number 0 [ 758.512248][ T5606] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 758.512276][ T5606] usb 2-1: config 0 interface 89 has no altsetting 0 [ 758.516662][ T5606] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 758.516693][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.516716][ T5606] usb 2-1: Product: syz [ 758.516732][ T5606] usb 2-1: Manufacturer: syz [ 758.516759][ T5606] usb 2-1: SerialNumber: syz [ 758.548779][ T5606] usb 2-1: config 0 descriptor?? [ 758.667307][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.749249][ T5606] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 758.749315][ T5606] em28xx 2-1:0.89: Video interface 89 found: [ 759.129905][ T5694] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 759.282860][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.282898][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.282940][ T5694] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 759.282965][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.361355][ T5606] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 759.377461][ T5694] usb 4-1: config 0 descriptor?? [ 759.682466][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.836022][ T5694] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 759.836062][ T5694] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 759.836177][ T5694] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 759.836207][ T5694] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 759.836236][ T5694] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 759.989975][ T5694] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 760.009462][ T5606] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 760.009692][ T5606] em28xx 2-1:0.89: board has no eeprom [ 760.091929][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.107543][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.141828][ T5694] playstation 0003:054C:0DF2.000B: Invalid reportID received, expected 9 got 104 [ 760.141922][ T5694] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 760.141980][ T5694] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 760.142024][ T5694] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 760.177922][ T5606] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 760.178154][ T5606] em28xx 2-1:0.89: analog set to bulk mode. [ 760.217545][ T5694] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 760.240063][ T9183] em28xx 2-1:0.89: Registering V4L2 extension [ 760.313588][ T5606] usb 2-1: USB disconnect, device number 43 [ 760.448090][ T5606] em28xx 2-1:0.89: Disconnecting em28xx [ 760.449419][ T5694] usb 4-1: USB disconnect, device number 32 [ 760.559932][T10473] Bluetooth: hci3: command tx timeout [ 760.606598][ T9183] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 760.606664][ T9183] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 760.606679][ T9183] em28xx 2-1:0.89: No AC97 audio processor [ 760.712367][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.018834][ T9183] usb 2-1: Decoder not found [ 761.018886][ T9183] em28xx 2-1:0.89: failed to create media graph [ 761.019031][ T9183] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 761.275294][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.043586][ T9183] em28xx 2-1:0.89: Registering snapshot button... [ 762.262038][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.475415][ T9183] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input8 [ 762.633145][T10473] Bluetooth: hci3: command tx timeout [ 763.024194][ T9183] em28xx 2-1:0.89: Remote control support is not available for this card. [ 763.024700][ T5606] em28xx 2-1:0.89: Closing input extension [ 763.028043][ T5606] em28xx 2-1:0.89: Deregistering snapshot button [ 763.273987][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.114745][T13813] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.114867][T13813] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.115096][T13813] bridge_slave_0: entered allmulticast mode [ 764.262066][T13813] bridge_slave_0: entered promiscuous mode [ 764.307417][T13813] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.307611][T13813] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.307836][T13813] bridge_slave_1: entered allmulticast mode [ 764.313680][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.314162][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.424998][ T5606] em28xx 2-1:0.89: Freeing device [ 764.496257][T13813] bridge_slave_1: entered promiscuous mode [ 764.509941][ T5693] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 764.712313][T10473] Bluetooth: hci3: command tx timeout [ 764.783517][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 764.787494][T13813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.820502][T13813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.827822][ T5693] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 764.827896][ T5693] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.827923][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.827952][ T5693] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 764.827980][ T5693] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.828026][ T5693] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 764.828052][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.309674][T13813] team0: Port device team_slave_0 added [ 765.313707][T13813] team0: Port device team_slave_1 added [ 765.374078][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.440061][ T5606] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 765.529934][T13813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.529953][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.529983][T13813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.532640][T13813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.532656][T13813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.532682][T13813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.629880][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 765.634031][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 765.658032][T13911] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2741'. [ 765.677184][ T5606] usb 2-1: config 7 has an invalid interface number: 124 but max is 0 [ 765.677216][ T5606] usb 2-1: config 7 has no interface number 0 [ 765.677251][ T5606] usb 2-1: config 7 interface 124 has no altsetting 0 [ 765.690145][ T5606] usb 2-1: New USB device found, idVendor=14b2, idProduct=3c06, bcdDevice=ac.85 [ 765.690176][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.690198][ T5606] usb 2-1: Product: syz [ 765.690215][ T5606] usb 2-1: Manufacturer: syz [ 765.690233][ T5606] usb 2-1: SerialNumber: syz [ 765.831863][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.045669][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.106255][T10473] Bluetooth: hci3: command tx timeout [ 767.147514][ T5606] usb 2-1: USB disconnect, device number 44 [ 767.328551][ T5693] usb 6-1: USB disconnect, device number 2 [ 767.353574][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.547674][ T5606] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 767.618299][T13813] hsr_slave_0: entered promiscuous mode [ 767.619309][T13813] hsr_slave_1: entered promiscuous mode [ 767.663417][T13813] debugfs: 'hsr0' already exists in 'hsr' [ 767.663438][T13813] Cannot create hsr debugfs directory [ 767.709973][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 767.713696][ T5606] usb 2-1: unable to get BOS descriptor or descriptor too short [ 767.786480][ T5606] usb 2-1: config 7 has an invalid interface number: 124 but max is 0 [ 767.786514][ T5606] usb 2-1: config 7 has no interface number 0 [ 767.786560][ T5606] usb 2-1: config 7 interface 124 has no altsetting 0 [ 767.796682][ T5606] usb 2-1: New USB device found, idVendor=14b2, idProduct=3c06, bcdDevice=ac.85 [ 767.796716][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.796765][ T5606] usb 2-1: Product: syz [ 767.796793][ T5606] usb 2-1: Manufacturer: syz [ 767.796836][ T5606] usb 2-1: SerialNumber: syz [ 768.088372][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.441077][ T5606] usb 2-1: USB disconnect, device number 45 [ 768.681149][ T9183] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 768.829915][ T9183] usb 6-1: Using ep0 maxpacket: 32 [ 768.832144][ T9183] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.832177][ T9183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 768.832208][ T9183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 768.832315][ T9183] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 768.832342][ T9183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.839363][ T9183] usb 6-1: config 0 descriptor?? [ 768.866517][T13941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 768.897979][ T9183] hub 6-1:0.0: USB hub found [ 769.084311][ T9183] hub 6-1:0.0: 2 ports detected [ 769.111051][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.496729][ T7149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.825358][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2756'. [ 770.150252][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.382603][ T5693] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 770.384814][ T7149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.390330][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.532671][ T5693] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 770.532704][ T5693] usb 4-1: config 5 has no interface number 0 [ 770.532752][ T5693] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 770.532785][ T5693] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 770.532815][ T5693] usb 4-1: config 5 interface 123 has no altsetting 0 [ 770.536547][ T5693] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 770.536578][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.536601][ T5693] usb 4-1: Product: syz [ 770.536617][ T5693] usb 4-1: Manufacturer: syz [ 770.536633][ T5693] usb 4-1: SerialNumber: syz [ 770.635684][T13981] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 770.888503][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.890361][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.007698][ T7149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.098722][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.121451][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.123415][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.124132][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.202096][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.333784][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.334725][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.558014][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 771.630044][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2778'. [ 771.783305][ T5606] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 771.890256][ T7149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.934090][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2780'. [ 771.935231][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2780'. [ 771.985301][T13941] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 772.230292][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.089945][ T5606] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 773.121602][ T5606] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 773.216216][ T5606] usb 6-1: USB disconnect, device number 3 [ 773.320642][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.437589][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.437638][ T9183] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 773.533636][ T5693] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 773.568403][ T5693] usb 4-1: USB disconnect, device number 33 [ 773.623570][T14032] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2792'. [ 773.805431][ T9183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 773.805492][ T9183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 773.805524][ T9183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.805550][ T9183] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 773.805597][ T9183] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 773.805623][ T9183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.055601][ T9183] usb 2-1: config 0 descriptor?? [ 774.287349][ T9183] usbhid 2-1:0.0: can't add hid device: -71 [ 774.287507][ T9183] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 774.348033][ T9183] usb 2-1: USB disconnect, device number 46 [ 774.392984][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.909904][ T5606] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 774.910499][ T9183] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 775.069942][ T9183] usb 2-1: Using ep0 maxpacket: 16 [ 775.078291][ T9183] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 775.078328][ T9183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 775.078353][ T9183] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 775.106448][ T9183] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 775.106541][ T9183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.106604][ T9183] usb 2-1: Product: syz [ 775.106646][ T9183] usb 2-1: Manufacturer: syz [ 775.106689][ T9183] usb 2-1: SerialNumber: syz [ 775.143589][ T5606] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 775.143664][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.198632][ T5606] usb 4-1: config 0 descriptor?? [ 775.225187][ T9183] usb 2-1: config 0 descriptor?? [ 775.226005][T14025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 775.271094][ T9183] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 775.271122][ T9183] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 775.290771][ T5606] cp210x 4-1:0.0: cp210x converter detected [ 775.430905][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.434275][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.436236][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.467190][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.528933][T14025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.529580][T14025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.569139][ T9183] usb 2-1: USB disconnect, device number 47 [ 775.722105][ T5606] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 775.973356][ T5606] usb 4-1: cp210x converter now attached to ttyUSB0 [ 776.148277][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.173844][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.178270][T14061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.198017][T14061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.213837][ T5606] usb 4-1: USB disconnect, device number 34 [ 776.279536][ T5606] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 776.443338][ T7149] bond0 (unregistering): Released all slaves [ 776.467260][ T7149] bond1 (unregistering): Released all slaves [ 776.470239][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.470327][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.529992][ T7149] bond2 (unregistering): Released all slaves [ 776.537567][ T91] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.550945][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.575053][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.603174][ T5606] cp210x 4-1:0.0: device disconnected [ 776.624701][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 777.042791][T14086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2808'. [ 777.079977][ T5606] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 777.245554][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 777.256772][ T5606] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 777.256804][ T5606] usb 4-1: config 0 has no interface number 0 [ 777.256852][ T5606] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 777.256899][ T5606] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 777.256926][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.390312][ T5606] usb 4-1: config 0 descriptor?? [ 777.522997][ T5606] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 777.839413][T14099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.846647][T14099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.630416][ T36] net_ratelimit: 1 callbacks suppressed [ 778.630454][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.830558][ T9] usb 4-1: USB disconnect, device number 35 [ 779.519945][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.664639][ T7149] IPVS: stopping master sync thread 7802 ... [ 779.720388][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.751367][T14124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 781.459808][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.727397][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 781.831054][ T6050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.850471][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.871897][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.649516][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.134256][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.379545][T14181] tipc: Started in network mode [ 783.379787][T14181] tipc: Node identity ac14140f, cluster identity 4711 [ 783.410540][T14181] tipc: New replicast peer: 172.30.0.1 [ 783.425875][T14181] tipc: Enabled bearer , priority 10 [ 783.434253][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 783.434324][T14181] tipc: Disabling bearer [ 784.106238][T14185] overlayfs: overlapping lowerdir path [ 784.160744][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.190364][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.762226][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.762386][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.233517][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.411307][T14230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2844'. [ 787.182034][ T5823] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 787.283942][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.369845][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 787.382677][ T5823] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.382772][ T5823] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.402769][ T5823] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 787.402864][ T5823] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 787.402927][ T5823] usb 4-1: Product: syz [ 787.402970][ T5823] usb 4-1: Manufacturer: syz [ 787.495385][ T5823] hub 4-1:4.0: USB hub found [ 787.735179][ T5823] hub 4-1:4.0: 9 ports detected [ 787.736654][ T5823] hub 4-1:4.0: insufficient power available to use all downstream ports [ 787.834019][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 787.934320][T14250] overlayfs: overlapping lowerdir path [ 787.937676][ T5823] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 787.937696][ T5823] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 787.999828][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 788.024628][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 788.054296][ T5823] usb 4-1: USB disconnect, device number 36 [ 788.084309][ T31] usb 6-1: string descriptor 0 read error: -22 [ 788.084457][ T31] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 788.084485][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.330037][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.522551][ T7149] veth1_macvtap: left promiscuous mode [ 788.522662][ T7149] veth0_macvtap: left promiscuous mode [ 788.522891][ T7149] veth1_vlan: left promiscuous mode [ 788.523068][ T7149] veth0_vlan: left promiscuous mode [ 788.659283][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 788.659317][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2857'. [ 788.761081][ T31] usbhid 6-1:1.0: can't add hid device: -71 [ 788.761204][ T31] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 788.790460][ T31] usb 6-1: USB disconnect, device number 4 [ 788.790867][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.350315][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.580461][T14276] overlayfs: overlapping lowerdir path [ 790.391469][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.465718][T14294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2871'. [ 790.465741][T14294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2871'. [ 790.604730][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2871'. [ 790.802168][T14298] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2871'. [ 790.805301][T13813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.855324][T13813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.856196][T14298] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2871'. [ 790.969488][T13813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 791.179960][T14305] netlink: 'syz.0.2874': attribute type 29 has an invalid length. [ 791.179985][T14305] netlink: 'syz.0.2874': attribute type 3 has an invalid length. [ 791.180001][T14305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2874'. [ 791.221699][T13813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 791.223408][T13813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 791.326636][T13813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.327744][T13813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 791.396480][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'. [ 791.396513][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2878'. [ 791.430462][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.469048][T13813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 791.831522][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.969461][T14329] bridge0: port 3(vlan2) entered blocking state [ 791.972290][T14329] bridge0: port 3(vlan2) entered disabled state [ 791.972485][T14329] vlan2: entered allmulticast mode [ 791.972502][T14329] bridge0: entered allmulticast mode [ 791.972557][T14329] bridge0: entered promiscuous mode [ 792.034803][T14329] vlan2: left allmulticast mode [ 792.034836][T14329] bridge0: left allmulticast mode [ 792.287054][ T9183] bridge0: left promiscuous mode [ 792.329983][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 792.358554][T13813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 792.393378][T13813] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.482389][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.482448][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 792.482480][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.482505][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 792.482551][ T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 792.482577][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.748941][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.764616][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.764806][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.458951][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.459168][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.750298][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.750471][ T9] usb 2-1: config 0 descriptor?? [ 794.050765][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 794.050895][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 794.152714][ T9] usb 2-1: USB disconnect, device number 48 [ 795.239023][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.321063][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.321215][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.842241][T14398] fuse: Bad value for 'fd' [ 795.856644][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.856911][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.857163][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.874789][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.875218][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.892758][T14397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.893112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.086125][T14408] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2909'. [ 796.145288][T13813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.266688][ T37] audit: type=1400 audit(1783431989.258:2053): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=14414 comm="syz.1.2914" daddr=::ffff:172.20.20.8 [ 796.289921][ T5823] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 796.439836][ T5823] usb 6-1: Using ep0 maxpacket: 16 [ 796.443038][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short [ 796.445366][ T5823] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.445431][ T5823] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 796.445461][ T5823] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 796.448629][ T5823] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 796.448660][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.448684][ T5823] usb 6-1: Manufacturer: 퀈죍⨼롶턐澩敺䘻睮깋⎧젗⁛ꜿ緤௻嵉鏃㋰꣤㕩Ѣ딥皰渏䣋逽阋鐶k㒿駦̶懱ᵳ鱢셄㜎繼 [ 796.448708][ T5823] usb 6-1: SerialNumber: င [ 796.461485][T13813] veth0_vlan: entered promiscuous mode [ 796.632314][T13813] veth1_vlan: entered promiscuous mode [ 796.782244][T14407] netlink: 'syz.5.2910': attribute type 49 has an invalid length. [ 797.370453][T14407] ip6gretap0: entered promiscuous mode [ 797.370500][T14407] ip6gretap0: entered allmulticast mode [ 797.531443][T13813] veth0_macvtap: entered promiscuous mode [ 797.600554][ T5823] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 797.620712][T13813] veth1_macvtap: entered promiscuous mode [ 797.641965][ T5823] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 797.722068][ T5823] usb 6-1: USB disconnect, device number 5 [ 797.784748][T13813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.906717][T13940] udevd[13940]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.966525][T13813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.051226][ T6048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.053360][ T6048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.053638][ T6048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.055047][ T6048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.099842][ T5694] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 798.265577][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.265613][ T5694] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.265652][ T5694] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 798.265675][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.318829][ T5694] usb 2-1: config 0 descriptor?? [ 798.760127][T14470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2932'. [ 799.019585][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 799.019624][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 799.019652][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 799.022631][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 799.022668][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 799.041388][T14456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.073824][T14456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.418140][ T5694] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 799.483562][ T5694] playstation 0003:054C:0DF2.000C: Invalid reportID received, expected 9 got 104 [ 799.483593][ T5694] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense pairing info: -22 [ 799.483644][ T5694] playstation 0003:054C:0DF2.000C: Failed to get MAC address from DualSense [ 799.483661][ T5694] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 799.691532][ T5694] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -22 [ 799.814956][ T5694] usb 2-1: USB disconnect, device number 49 [ 800.042689][T14477] fido_id[14477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 800.108902][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.108925][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.470669][ T5866] net_ratelimit: 9 callbacks suppressed [ 800.470692][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.623001][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.623024][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.763958][ T37] audit: type=1400 audit(1783431993.758:2054): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=14506 comm="syz.0.2942" dest=20001 [ 801.235280][ T5818] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 801.456478][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.036349][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 802.285086][ T5818] usb 2-1: not running at top speed; connect to a high speed hub [ 802.298353][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 802.298381][ T5818] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 802.298458][ T5818] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 802.341632][ T5818] usb 2-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 802.341666][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.341688][ T5818] usb 2-1: Product: syz [ 802.341704][ T5818] usb 2-1: Manufacturer: syz [ 802.341720][ T5818] usb 2-1: SerialNumber: syz [ 802.460761][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.648799][ T5818] usb 2-1: unit 4 not found! [ 802.939906][ T9183] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 803.017439][ T5606] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 803.127461][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 803.241791][ T9183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.241827][ T9183] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.241868][ T9183] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 803.241893][ T9183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.262031][ T5606] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.262091][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 803.262131][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.262156][ T5606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 803.262225][ T5606] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 803.262291][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.312200][ T9183] usb 4-1: config 0 descriptor?? [ 803.348302][ T5606] usb 3-1: config 0 descriptor?? [ 803.451628][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 803.490728][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 803.514389][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.556059][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 803.580745][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 803.589508][ T5606] usbhid 3-1:0.0: can't add hid device: -71 [ 803.633980][ T5606] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 803.692752][ T5606] usb 3-1: USB disconnect, device number 3 [ 803.831967][ T9183] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 803.832006][ T9183] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 803.832035][ T9183] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 803.832062][ T9183] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 803.832092][ T9183] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 803.965930][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.981678][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.115442][ T9183] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 804.172023][ T9183] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 104 [ 804.172053][ T9183] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 804.172116][ T9183] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 804.172135][ T9183] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 804.453316][ T9183] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 804.474576][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.499816][ T5606] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 804.570372][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.572764][ T9183] usb 4-1: USB disconnect, device number 37 [ 804.651164][ T5818] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 804.659570][ T5818] usb 2-1: USB disconnect, device number 50 [ 804.772987][ T5606] usb 3-1: Using ep0 maxpacket: 16 [ 804.775559][ T5606] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 804.775601][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 804.775627][ T5606] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 804.790770][ T5606] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 804.790802][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.790825][ T5606] usb 3-1: Product: syz [ 804.790840][ T5606] usb 3-1: Manufacturer: syz [ 804.790856][ T5606] usb 3-1: SerialNumber: syz [ 805.069191][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.313637][ T5606] usb 3-1: config 0 descriptor?? [ 805.391323][T13940] udevd[13940]: setting mode of /dev/bus/usb/002/050 to 020664 failed: No such file or directory [ 805.391533][T13940] udevd[13940]: setting owner of /dev/bus/usb/002/050 to uid=0, gid=0 failed: No such file or directory [ 805.395982][T14526] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 805.447468][ T5606] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 805.447508][ T5606] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 805.604932][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.675755][T13940] udevd[13940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 805.739827][ T9183] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 805.827529][ T31] usb 3-1: USB disconnect, device number 4 [ 805.830321][T10473] Bluetooth: hci4: command tx timeout [ 805.899771][ T9183] usb 4-1: Using ep0 maxpacket: 16 [ 805.902125][ T9183] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 805.902155][ T9183] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 805.902179][ T9183] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 805.902200][ T9183] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 805.913170][ T9183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 805.913250][ T9183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.913296][ T9183] usb 4-1: Product: syz [ 805.913338][ T9183] usb 4-1: Manufacturer: syz [ 805.913378][ T9183] usb 4-1: SerialNumber: syz [ 806.104539][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 806.108556][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2957'. [ 806.362930][ T9183] usb 4-1: 0:2 : does not exist [ 806.433561][ T9183] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 806.638065][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.889158][ T9183] usb 4-1: USB disconnect, device number 38 [ 807.210050][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 807.257955][T14356] udevd[14356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.259495][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 807.329839][ T31] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 807.511391][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.544776][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.544835][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 807.544866][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.544889][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 807.544930][ T31] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 807.544953][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.690104][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.714805][ T31] usb 2-1: config 0 descriptor?? [ 807.785537][ T37] audit: type=1326 audit(1783432000.778:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.785693][ T37] audit: type=1326 audit(1783432000.778:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.789144][ T37] audit: type=1326 audit(1783432000.778:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.789510][ T37] audit: type=1326 audit(1783432000.778:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.874229][ T37] audit: type=1326 audit(1783432000.858:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.909909][T10473] Bluetooth: hci4: command tx timeout [ 807.923836][ T37] audit: type=1326 audit(1783432000.898:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.926240][ T37] audit: type=1326 audit(1783432000.918:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 807.928665][ T37] audit: type=1326 audit(1783432000.918:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14611 comm="syz.5.2972" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5295de59 code=0x7ffc0000 [ 808.041038][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 808.041166][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 808.163242][ T31] usb 2-1: USB disconnect, device number 51 [ 808.641935][ T31] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 808.726166][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.740282][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.840074][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 808.843904][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 808.843938][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 808.843962][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 808.862426][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 808.862457][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.862508][ T31] usb 2-1: Product: syz [ 808.862571][ T31] usb 2-1: Manufacturer: syz [ 808.862615][ T31] usb 2-1: SerialNumber: syz [ 808.960113][ T31] usb 2-1: config 0 descriptor?? [ 808.961305][T14598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 808.983867][ T31] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 808.983903][ T31] mceusb 2-1:0.0: probe with driver mceusb failed with error -12 [ 809.177400][ T31] usb 2-1: USB disconnect, device number 52 [ 809.313295][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.313520][T14528] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.313724][T14528] bridge_slave_0: entered allmulticast mode [ 809.318536][T14528] bridge_slave_0: entered promiscuous mode [ 809.340334][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.342201][T14528] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.344728][T14528] bridge_slave_1: entered allmulticast mode [ 809.374402][T14528] bridge_slave_1: entered promiscuous mode [ 809.607736][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.634839][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.734320][T14528] team0: Port device team_slave_0 added [ 809.738497][T14528] team0: Port device team_slave_1 added [ 809.752723][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.804724][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.804742][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.804764][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.809326][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.809343][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.809374][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.003532][T10473] Bluetooth: hci4: command tx timeout [ 810.796429][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.185093][T14528] hsr_slave_0: entered promiscuous mode [ 811.197340][T14528] hsr_slave_1: entered promiscuous mode [ 811.215835][T14528] debugfs: 'hsr0' already exists in 'hsr' [ 811.215864][T14528] Cannot create hsr debugfs directory [ 811.339982][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.454794][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 811.454828][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 811.835804][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.071311][T10473] Bluetooth: hci4: command tx timeout [ 812.841468][T14528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.881729][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.058355][T14708] futex_wake_op: syz.2.3009 tries to shift op by 144; fix this program [ 814.046316][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.390316][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.469165][T14718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.509533][T14718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.528308][T14718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.528642][T14718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.837290][T14528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.090008][T14738] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3022'. [ 815.320927][T14746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3026'. [ 815.451586][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3028'. [ 815.556109][T14528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.990196][T14756] tap0: tun_chr_ioctl cmd 1074025680 [ 816.049904][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 816.203761][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.203821][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 816.203869][ T31] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 816.203896][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.253920][ T31] usb 6-1: config 0 descriptor?? [ 816.272106][ T31] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 816.339937][ T31] net_ratelimit: 6 callbacks suppressed [ 816.339960][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.713177][T14528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.760318][T14778] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3039'. [ 816.760343][T14778] tc_dump_action: action bad kind [ 817.357810][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.491593][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.392976][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.877015][ T9] usb 6-1: USB disconnect, device number 6 [ 820.140248][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.556635][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.696195][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3065'. [ 820.696767][T14852] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3067'. [ 820.696782][T14852] tc_dump_action: action bad kind [ 820.821909][T14528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 821.026177][T14528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.149874][ T5818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 821.443254][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.472697][T14528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 822.401485][T14528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.421568][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.421617][ T5818] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.421658][ T5818] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 822.421682][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.470933][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.488175][ T5818] usb 4-1: config 0 descriptor?? [ 822.489256][T14528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 822.569816][ T5818] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 822.623148][T14528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.686005][T14528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 822.921146][T14528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.119877][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 823.283429][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 823.285724][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.285758][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.285798][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 823.285823][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.361539][ T31] usb 6-1: config 0 descriptor?? [ 823.375318][ T31] hub 6-1:0.0: USB hub found [ 823.513198][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.576053][ T31] hub 6-1:0.0: 1 port detected [ 823.591906][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.771794][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.777225][ T31] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 823.777249][ T31] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 823.823139][ T31] usbhid 6-1:0.0: can't add hid device: -71 [ 823.823268][ T31] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 823.906173][T14528] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.051321][ T31] usb 6-1: USB disconnect, device number 7 [ 824.055924][ T9] usb 4-1: USB disconnect, device number 39 [ 824.102661][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.121452][ T5693] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 824.158249][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.172221][ T7149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.213263][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.253054][ T7149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.311264][ T5693] usb 3-1: Using ep0 maxpacket: 8 [ 824.315781][ T5693] usb 3-1: config 31 has an invalid interface number: 197 but max is 0 [ 824.315813][ T5693] usb 3-1: config 31 has no interface number 0 [ 824.315850][ T5693] usb 3-1: config 31 interface 197 has no altsetting 0 [ 824.318254][ T5693] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 824.318286][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.318316][ T5693] usb 3-1: Product: syz [ 824.318328][ T5693] usb 3-1: Manufacturer: syz [ 824.318341][ T5693] usb 3-1: SerialNumber: syz [ 824.550108][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.699548][T14932] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3083'. [ 825.040331][ T5693] gspca_main: etoms-2.14.0 probing 102c:6151 [ 825.225846][ T5693] usb 3-1: USB disconnect, device number 5 [ 825.600556][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.630929][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.632076][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.484715][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 829.326910][T14974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3094'. [ 829.383595][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.383657][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.383705][ T31] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 829.383733][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.440600][ T31] usb 4-1: config 0 descriptor?? [ 829.485257][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 829.745328][T14528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.979590][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.996696][T14528] veth0_vlan: entered promiscuous mode [ 831.013062][T14528] veth1_vlan: entered promiscuous mode [ 831.349844][T10473] Bluetooth: hci0: command 0x0406 tx timeout [ 831.488886][T14528] veth0_macvtap: entered promiscuous mode [ 831.514940][T14528] veth1_macvtap: entered promiscuous mode [ 831.568926][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.675455][T14528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.753525][T14528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.827908][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.828163][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.828206][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.828245][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.036841][ T5818] usb 4-1: USB disconnect, device number 40 [ 832.047170][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.096125][T14991] overlayfs: overlapping lowerdir path [ 833.020884][T15004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3104'. [ 833.110540][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.650636][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.680013][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.680514][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.186563][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.186587][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.571633][ T5606] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 835.915959][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.981171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.981188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.193821][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 836.198924][ T5606] usb 2-1: no configurations [ 836.198947][ T5606] usb 2-1: can't read configurations, error -22 [ 836.329858][ T5606] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 836.393556][T15039] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3117'. [ 836.489765][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 836.490768][ T5606] usb 2-1: no configurations [ 836.490786][ T5606] usb 2-1: can't read configurations, error -22 [ 836.510458][ T5606] usb usb2-port1: attempt power cycle [ 836.746364][T15049] usb usb1: usbfs: process 15049 (syz.0.3120) did not claim interface 23 before use [ 836.872854][ T5606] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 836.872954][ T5693] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 836.891334][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 836.903455][ T5606] usb 2-1: no configurations [ 836.903477][ T5606] usb 2-1: can't read configurations, error -22 [ 836.952584][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.000009][ T5693] usb 3-1: device descriptor read/64, error -71 [ 837.037190][ T5606] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 837.059593][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 837.066950][ T5606] usb 2-1: no configurations [ 837.066976][ T5606] usb 2-1: can't read configurations, error -22 [ 837.072759][ T5606] usb usb2-port1: unable to enumerate USB device [ 837.239852][ T5693] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 837.369829][ T5693] usb 3-1: device descriptor read/64, error -71 [ 837.390841][ T9183] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 837.482515][ T5693] usb usb3-port1: attempt power cycle [ 837.545198][ T9183] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.545227][ T9183] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 837.545252][ T9183] usb 1-1: config 1 has no interface number 0 [ 837.545301][ T9183] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 837.545332][ T9183] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 837.545363][ T9183] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 837.545400][ T9183] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 837.545426][ T9183] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.576664][ T9183] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.576749][ T9183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.576811][ T9183] usb 1-1: Product: syz [ 837.576853][ T9183] usb 1-1: Manufacturer: syz [ 837.576896][ T9183] usb 1-1: SerialNumber: syz [ 837.678035][T15059] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 837.739040][T15070] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3129'. [ 837.750595][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.910020][ T5693] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 837.930412][ T5818] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 837.950799][ T5693] usb 3-1: device descriptor read/8, error -71 [ 838.007652][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.104470][T15058] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 838.104746][ T5818] usb 6-1: Using ep0 maxpacket: 32 [ 838.122278][ T5818] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 838.122304][ T5818] usb 6-1: config 0 has no interface number 0 [ 838.122344][ T5818] usb 6-1: config 0 interface 184 has no altsetting 0 [ 838.127201][ T5818] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 838.127233][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.127255][ T5818] usb 6-1: Product: syz [ 838.127270][ T5818] usb 6-1: Manufacturer: syz [ 838.127287][ T5818] usb 6-1: SerialNumber: syz [ 838.219809][ T5693] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 838.223732][ T5818] usb 6-1: config 0 descriptor?? [ 838.245830][ T5693] usb 3-1: device descriptor read/8, error -71 [ 838.358674][ T5693] usb usb3-port1: unable to enumerate USB device [ 838.531005][ T9183] cdc_ncm 1-1:1.1: bind() failure [ 838.715965][ T5693] usb 1-1: USB disconnect, device number 6 [ 838.798664][T15079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.827886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.907651][ T5818] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 838.907687][ T5818] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 838.907916][ T5818] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 838.908235][ T5818] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 838.965991][ T5818] usb 6-1: USB disconnect, device number 8 [ 839.031117][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.453409][T15089] netlink: 'syz.1.3138': attribute type 12 has an invalid length. [ 840.262729][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.039892][ T822] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 841.070119][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.100197][ T5818] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 841.190028][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 841.191013][ T822] usb 6-1: no configurations [ 841.191031][ T822] usb 6-1: can't read configurations, error -22 [ 841.254395][ T5818] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 841.254427][ T5818] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 841.254448][ T5818] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 841.254469][ T5818] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 841.254491][ T5818] usb 4-1: config 220 has no interface number 2 [ 841.254577][ T5818] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 841.254606][ T5818] usb 4-1: config 220 interface 0 has no altsetting 0 [ 841.254626][ T5818] usb 4-1: config 220 interface 76 has no altsetting 0 [ 841.254646][ T5818] usb 4-1: config 220 interface 1 has no altsetting 0 [ 841.270760][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.285384][ T5818] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 841.285475][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.285530][ T5818] usb 4-1: Product: syz [ 841.285610][ T5818] usb 4-1: Manufacturer: syz [ 841.285654][ T5818] usb 4-1: SerialNumber: syz [ 841.353150][ T822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 841.560270][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 841.561041][ T822] usb 6-1: no configurations [ 841.561054][ T822] usb 6-1: can't read configurations, error -22 [ 841.561448][ T822] usb usb6-port1: attempt power cycle [ 841.589836][ T5602] Bluetooth: hci5: command 0x0406 tx timeout [ 841.724908][ T5818] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 841.724994][ T5818] uvcvideo 4-1:220.0: No valid video chain found. [ 841.725068][ T5818] usb 4-1: selecting invalid altsetting 0 [ 841.820481][ T5818] usb 4-1: selecting invalid altsetting 0 [ 841.820523][ T5818] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 841.887124][ T5818] usb 4-1: USB disconnect, device number 41 [ 842.000290][ T822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 842.022199][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 842.023023][ T822] usb 6-1: no configurations [ 842.023041][ T822] usb 6-1: can't read configurations, error -22 [ 842.149980][ T822] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 842.171904][ T822] usb 6-1: Using ep0 maxpacket: 16 [ 842.175587][ T822] usb 6-1: no configurations [ 842.175602][ T822] usb 6-1: can't read configurations, error -22 [ 842.186750][ T822] usb usb6-port1: unable to enumerate USB device [ 842.312849][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.550862][ T36] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 842.659890][ T5693] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 842.709844][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 842.714488][ T36] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 842.714519][ T36] usb 2-1: config 179 has no interface number 0 [ 842.714582][ T36] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 842.714613][ T36] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 842.714644][ T36] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 842.714673][ T36] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 842.714705][ T36] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 842.714750][ T36] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 842.714776][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.801820][ T5693] usb 3-1: device descriptor read/64, error -71 [ 842.828542][T15130] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 843.378549][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.991881][ T5693] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 844.108539][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.131035][ T5693] usb 3-1: device descriptor read/64, error -71 [ 844.151428][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.252535][ T5693] usb usb3-port1: attempt power cycle [ 844.385844][ T5818] usb 2-1: USB disconnect, device number 57 [ 844.385868][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 844.386302][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 844.401115][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.589906][ T5693] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 844.611036][ T5693] usb 3-1: device descriptor read/8, error -71 [ 844.851389][ T5693] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 844.871836][ T5693] usb 3-1: device descriptor read/8, error -71 [ 844.937942][T15164] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3164'. [ 844.981018][ T5693] usb usb3-port1: unable to enumerate USB device [ 845.067125][ T5866] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 845.128289][T15168] tmpfs: Too small a size for current use [ 845.405764][T15175] input: syz0 as /devices/virtual/input/input10 [ 845.441004][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 845.669339][ T37] audit: type=1326 audit(1783432038.658:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.669390][ T37] audit: type=1326 audit(1783432038.658:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.669433][ T37] audit: type=1326 audit(1783432038.658:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.750222][ T37] audit: type=1326 audit(1783432038.738:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.752540][ T37] audit: type=1326 audit(1783432038.748:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.752878][ T37] audit: type=1326 audit(1783432038.748:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.753026][ T37] audit: type=1326 audit(1783432038.748:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.753153][ T37] audit: type=1326 audit(1783432038.748:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.753672][ T37] audit: type=1326 audit(1783432038.748:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 845.753849][ T37] audit: type=1326 audit(1783432038.748:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15182 comm="syz.3.3173" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe7d4de59 code=0x7ffc0000 [ 846.141859][T15192] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3177'. [ 846.219803][ T822] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 846.349863][ T822] usb 3-1: device descriptor read/64, error -71 [ 846.475002][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.590006][ T822] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 846.619918][ T5693] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 846.702717][ T5818] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 846.720276][ T822] usb 3-1: device descriptor read/64, error -71 [ 846.772347][ T5693] usb 4-1: Using ep0 maxpacket: 8 [ 846.775423][ T5693] usb 4-1: config 1 interface 0 has no altsetting 0 [ 846.779626][ T5693] usb 4-1: string descriptor 0 read error: -22 [ 846.795666][ T5693] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.40 [ 846.795701][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.831571][ T5818] usb 6-1: device descriptor read/64, error -71 [ 846.832620][ T822] usb usb3-port1: attempt power cycle [ 847.083976][ T5818] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 847.169801][ T822] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 847.194953][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.215939][ T5818] usb 6-1: device descriptor read/64, error -71 [ 847.217627][ T822] usb 3-1: device descriptor read/8, error -71 [ 847.276497][ T5693] usbhid 4-1:1.0: can't add hid device: -32 [ 847.276631][ T5693] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 847.320014][ T5693] usb 4-1: USB disconnect, device number 43 [ 847.327234][ T5818] usb usb6-port1: attempt power cycle [ 847.470020][ T822] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 847.490659][ T822] usb 3-1: device descriptor read/8, error -71 [ 847.510457][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.600321][ T822] usb usb3-port1: unable to enumerate USB device [ 847.709913][ T5818] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 847.731155][ T5818] usb 6-1: device descriptor read/8, error -71 [ 847.747308][T15213] kvm: emulating exchange as write [ 847.969872][ T5818] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 847.990515][ T5818] usb 6-1: device descriptor read/8, error -71 [ 848.094425][T15218] binder: BINDER_SET_CONTEXT_MGR already set [ 848.094437][T15218] binder: 15217:15218 ioctl 40046207 0 returned -16 [ 848.112677][ T5818] usb usb6-port1: unable to enumerate USB device [ 848.398543][T15228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3191'. [ 848.550224][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.209843][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 849.413613][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.413648][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 849.415260][ T5866] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 849.415293][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 849.415319][ T5866] usb 3-1: SerialNumber: syz [ 849.600587][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.774733][ T5866] usb 3-1: 0:2 : does not exist [ 849.979817][ T5866] usb 3-1: USB disconnect, device number 18 [ 850.203617][T13940] udevd[13940]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.230911][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.384079][ T5693] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 850.529809][ T5693] usb 6-1: Using ep0 maxpacket: 8 [ 850.534954][ T5693] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 850.534985][ T5693] usb 6-1: config 0 has no interface number 0 [ 850.561502][ T5693] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 850.561535][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.561557][ T5693] usb 6-1: Product: syz [ 850.561572][ T5693] usb 6-1: Manufacturer: syz [ 850.561588][ T5693] usb 6-1: SerialNumber: syz [ 850.638625][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.653565][ T5693] usb 6-1: config 0 descriptor?? [ 850.872079][ T5693] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22 [ 850.878780][ T5693] usb 6-1: USB disconnect, device number 17 [ 851.169811][ T5866] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 851.329897][ T5866] usb 2-1: Using ep0 maxpacket: 16 [ 851.332435][ T5866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 851.332463][ T5866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 851.335577][ T5866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 851.335607][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.335629][ T5866] usb 2-1: Product: syz [ 851.335644][ T5866] usb 2-1: Manufacturer: syz [ 851.335659][ T5866] usb 2-1: SerialNumber: syz [ 851.440201][ T5866] usb 2-1: 0:2 : does not exist [ 851.710245][ T5866] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 851.781489][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.060114][T15304] kvm: MWAIT instruction emulated as NOP! [ 852.169933][ T5818] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 852.173255][ T5866] usb 2-1: USB disconnect, device number 58 [ 852.319787][ T5818] usb 4-1: Using ep0 maxpacket: 16 [ 852.323979][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 852.327166][ T5818] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.327249][ T5818] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 852.327281][ T5818] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 852.380468][ T5818] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 852.380516][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.380542][ T5818] usb 4-1: Manufacturer: 퀈죍⨼롶턐澩敺䘻睮깋⎧젗⁛ꜿ緤௻嵉鏃㋰꣤㕩Ѣ딥皰渏䣋逽阋鐶k㒿駦̶懱ᵳ鱢셄㜎繼 [ 852.380569][ T5818] usb 4-1: SerialNumber: င [ 852.473346][T13940] udevd[13940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.800187][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.886927][T15303] netlink: 'syz.3.3223': attribute type 49 has an invalid length. [ 852.967228][ T5818] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 852.979418][ T5818] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 853.101897][ T5818] usb 4-1: USB disconnect, device number 44 [ 853.185925][T13940] udevd[13940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.271707][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.370234][ T822] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 853.499821][ T822] usb 6-1: device descriptor read/64, error -71 [ 853.510408][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.740043][ T822] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 853.965462][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.273958][ T822] usb 6-1: device descriptor read/64, error -71 [ 855.430670][ T822] usb usb6-port1: attempt power cycle [ 855.460038][ T9183] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 855.980297][ T9183] usb 1-1: Using ep0 maxpacket: 32 [ 856.053738][ T9183] usb 1-1: config index 0 descriptor too short (expected 8219, got 27) [ 856.053799][ T9183] usb 1-1: config 47 has an invalid descriptor of length 108, skipping remainder of the config [ 856.053879][ T9183] usb 1-1: config 47 has 0 interfaces, different from the descriptor's value: 32 [ 856.141442][ T9183] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 856.141478][ T9183] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 856.141501][ T9183] usb 1-1: Product: syz [ 856.141559][ T9183] usb 1-1: Manufacturer: syz [ 856.141619][ T9183] usb 1-1: SerialNumber: syz [ 856.366252][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.534981][ T9183] usb 1-1: USB disconnect, device number 7 [ 861.084120][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.182763][ T5819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.232240][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.630207][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.788923][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.150525][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.900154][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.336796][T15397] Invalid logical block size (8192) [ 866.056856][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.493705][T15404] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 866.493825][T15404] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 866.554503][T15404] vhci_hcd vhci_hcd.0: Device attached [ 866.867313][T15401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3239'. [ 866.867833][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 867.071693][T15403] vhci_hcd vhci_hcd.0: port 0 already used [ 867.238871][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.426670][ T5818] usb 36-1: SetAddress Request (2) to port 0 [ 867.426777][ T5818] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 867.556536][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.712332][T15409] vhci_hcd: connection closed [ 868.091455][T15401] macsec1: entered promiscuous mode [ 868.091478][T15401] dummy0: entered promiscuous mode [ 868.165209][T15410] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 868.165748][T15327] vhci_hcd vhci_hcd.1: stop threads [ 868.166928][T15327] vhci_hcd vhci_hcd.1: release socket [ 868.339846][T15327] vhci_hcd vhci_hcd.1: disconnect device [ 868.348765][T15401] macsec1: entered allmulticast mode [ 868.348783][T15401] dummy0: entered allmulticast mode [ 868.646095][T15425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3244'. [ 868.646280][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.706178][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 868.706199][ T37] audit: type=1400 audit(1783432061.698:2083): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=15424 comm="syz.2.3244" daddr=::ffff:172.20.20.170 dest=20000 [ 869.148211][ T37] audit: type=1400 audit(1783432062.118:2084): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=15426 comm="syz.1.3245" dest=20005 [ 869.189809][ T4911] Bluetooth: hci4: command 0x0405 tx timeout [ 869.670243][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.153905][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.370256][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.391383][T15448] overlayfs: missing 'lowerdir' [ 870.715073][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 871.638507][T15463] comedi comedi1: dt2814: a I/O base address must be specified [ 871.754304][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.337162][T15470] netlink: 'syz.0.3254': attribute type 1 has an invalid length. [ 872.337187][T15470] netlink: 'syz.0.3254': attribute type 2 has an invalid length. [ 872.803029][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.569362][ T5818] usb 36-1: device descriptor read/8, error -110 [ 873.667690][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.667733][ T821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.669966][ T37] audit: type=1400 audit(1783432066.658:2085): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=15477 comm="syz.0.3257" daddr=::ffff:172.20.20.170 [ 873.849273][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.232622][ T5818] usb usb36-port1: attempt power cycle [ 875.000932][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.394795][ T5818] usb usb36-port1: unable to enumerate USB device [ 875.943481][T15525] netlink: 'syz.3.3266': attribute type 21 has an invalid length. [ 875.943506][T15525] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3266'. [ 875.943622][T15525] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3266'. [ 876.046012][T15510] libceph: resolve ' [ 876.046012][T15510] -&fYǝa2i [ 876.046012][T15510] .?&*&' (ret=-3): failed [ 876.070117][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.110206][T15527] netlink: 'syz.3.3266': attribute type 1 has an invalid length. [ 876.110232][T15527] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3266'. [ 876.630019][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.964029][T15512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 877.122424][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.208432][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.389731][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.674520][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.471560][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.515495][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.733946][T15554] syzkaller0: entered promiscuous mode [ 881.733977][T15554] syzkaller0: entered allmulticast mode [ 883.438766][ T4911] Bluetooth: hci3: command 0x0406 tx timeout [ 883.451707][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.520301][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.520465][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.521277][ T6048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.522439][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 883.526660][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 884.470208][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.255525][ T9183] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 885.377901][T15581] 9p: Bad value for 'rfdno' [ 885.528463][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.553163][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.554123][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.080055][ T9183] usb 4-1: device descriptor read/64, error -71 [ 887.319822][ T9183] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 887.469876][ T9183] usb 4-1: Using ep0 maxpacket: 16 [ 887.472613][ T37] audit: type=1400 audit(1783432080.468:2086): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":*" requested=w pid=15603 comm="syz.0.3287" dest=20000 [ 887.474836][ T9183] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 887.474865][ T9183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.474889][ T9183] usb 4-1: Product: syz [ 887.474906][ T9183] usb 4-1: Manufacturer: syz [ 887.474922][ T9183] usb 4-1: SerialNumber: syz [ 887.547031][ T9183] usb 4-1: config 0 descriptor?? [ 887.844342][ T5694] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 887.993771][ T5694] usb 2-1: Using ep0 maxpacket: 32 [ 887.997895][ T5694] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 887.997927][ T5694] usb 2-1: config 0 has no interface number 0 [ 887.997983][ T5694] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 887.998015][ T5694] usb 2-1: config 0 interface 89 has no altsetting 0 [ 888.006116][ T5694] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 888.006171][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.006233][ T5694] usb 2-1: Product: syz [ 888.006257][ T5694] usb 2-1: Manufacturer: syz [ 888.006274][ T5694] usb 2-1: SerialNumber: syz [ 888.061355][ T5694] usb 2-1: config 0 descriptor?? [ 888.090257][ T9183] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 888.630157][ T9183] net_ratelimit: 1 callbacks suppressed [ 888.630178][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.122563][ T31] usb 4-1: USB disconnect, device number 46 [ 889.653149][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.681220][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.003940][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.315855][ T5823] usb 2-1: USB disconnect, device number 59 [ 891.999887][ T5823] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 892.115540][T15670] netlink: 'syz.2.3308': attribute type 1 has an invalid length. [ 892.115565][T15670] netlink: 'syz.2.3308': attribute type 2 has an invalid length. [ 892.164781][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.164839][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.164887][ T5823] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 892.164915][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.247948][ T5823] usb 1-1: config 0 descriptor?? [ 892.259881][ T822] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 892.295070][ T5823] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 892.427692][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.048051][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.052092][ T822] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 893.052123][ T822] usb 2-1: config 5 has no interface number 0 [ 893.052168][ T822] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 893.052197][ T822] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 893.052224][ T822] usb 2-1: config 5 interface 123 has no altsetting 0 [ 893.063647][ T822] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 893.063680][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.063702][ T822] usb 2-1: Product: syz [ 893.063717][ T822] usb 2-1: Manufacturer: syz [ 893.063732][ T822] usb 2-1: SerialNumber: syz [ 893.211533][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.217085][T15669] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 893.472219][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.475570][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.590108][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.590574][ T5823] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 893.688475][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.702457][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.739839][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 893.742530][ T5823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 893.742633][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 893.742662][ T5823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 893.745853][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 893.745960][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.745988][ T5823] usb 3-1: Product: syz [ 893.746008][ T5823] usb 3-1: Manufacturer: syz [ 893.746026][ T5823] usb 3-1: SerialNumber: syz [ 893.831839][ T5823] usb 3-1: config 0 descriptor?? [ 893.834945][T15674] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 893.862962][ T5823] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 893.863009][ T5823] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 893.926434][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.939974][T15682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.950160][T15682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.962515][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.069205][ T31] usb 3-1: USB disconnect, device number 19 [ 894.204491][ T822] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 894.250825][ T822] usb 2-1: USB disconnect, device number 60 [ 894.376103][T15689] netlink: 'syz.3.3314': attribute type 2 has an invalid length. [ 894.630427][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.284523][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3315'. [ 895.564100][ T822] usb 1-1: USB disconnect, device number 8 [ 895.692804][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.918207][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.280828][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.361300][T15710] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 897.361436][T15710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 897.362089][T15710] vhci_hcd vhci_hcd.0: Device attached [ 897.441834][T15710] vhci_hcd vhci_hcd.0: port 0 already used [ 897.808856][T15713] vhci_hcd: connection closed [ 897.919589][ T6786] vhci_hcd vhci_hcd.0: stop threads [ 897.919927][ T6786] vhci_hcd vhci_hcd.0: release socket [ 897.991595][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.346261][ T6786] vhci_hcd vhci_hcd.0: disconnect device [ 898.354057][T15706] ppp0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 899.402586][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.310788][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 900.556663][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.412498][ T5694] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 903.110097][ T5694] usb 2-1: device descriptor read/64, error -71 [ 903.350872][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.351424][ T5694] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 903.519144][ T5694] usb 2-1: device descriptor read/64, error -71 [ 903.623437][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.708773][ T5694] usb usb2-port1: attempt power cycle [ 904.044153][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.630785][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.921394][ T5818] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 904.921871][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 905.037870][ T5694] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 905.050111][ T5818] usb 6-1: device descriptor read/64, error -32 [ 905.080285][ T5694] usb 2-1: device descriptor read/8, error -71 [ 905.310090][ T5693] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 905.310556][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 905.334948][ T5818] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 905.515438][ T5693] usb 1-1: device descriptor read/64, error -32 [ 905.621313][ T5694] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 905.923538][ T5694] usb 2-1: device descriptor read/8, error -71 [ 906.041947][ T5693] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 906.043382][ C0] raw-gadget.2 gadget.0: ignoring, device is not running [ 906.059524][ T5694] usb usb2-port1: unable to enumerate USB device [ 906.342678][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.436187][ T5694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 906.564275][ T5693] usb 1-1: device descriptor read/64, error -32 [ 906.672160][ T5693] usb usb1-port1: attempt power cycle [ 909.099780][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 909.295718][ T5818] usb 6-1: device descriptor read/all, error -71 [ 909.296896][ T5818] usb usb6-port1: attempt power cycle [ 909.568893][ T5692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.005779][T15754] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 910.005871][T15754] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 910.010072][T15754] vhci_hcd vhci_hcd.0: Device attached [ 910.146460][T15756] vhci_hcd vhci_hcd.0: port 0 already used [ 910.151026][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.201221][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 911.425255][T15755] vhci_hcd: connection closed [ 911.872766][ T6048] vhci_hcd vhci_hcd.3: stop threads [ 911.872836][ T6048] vhci_hcd vhci_hcd.3: release socket [ 911.873004][ T6048] vhci_hcd vhci_hcd.3: disconnect device [ 912.230390][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.260503][T15769] 9p: Bad value for 'rfdno' [ 912.343058][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3335'. [ 912.631061][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.631915][ T1525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.632773][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.633644][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 912.706025][ T822] usb usb40-port1: attempt power cycle [ 913.284630][ T5606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.284828][ T5818] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 913.425782][ T822] usb usb40-port1: unable to enumerate USB device [ 913.486081][ T5818] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 913.486111][ T5818] usb 3-1: config 5 has no interface number 0 [ 913.486144][ T5818] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 913.486166][ T5818] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 913.486187][ T5818] usb 3-1: config 5 interface 123 has no altsetting 0 [ 913.488461][ T5818] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 913.488483][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.488499][ T5818] usb 3-1: Product: syz [ 913.488510][ T5818] usb 3-1: Manufacturer: syz [ 913.488521][ T5818] usb 3-1: SerialNumber: syz [ 913.618625][T15783] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 913.649854][T15746] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 913.672751][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.799859][T15746] usb 1-1: Using ep0 maxpacket: 16 [ 913.803103][T15746] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 913.803205][T15746] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 913.803232][T15746] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 913.808000][T15746] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 913.808035][T15746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.808283][T15746] usb 1-1: Product: syz [ 913.808302][T15746] usb 1-1: Manufacturer: syz [ 913.808623][T15746] usb 1-1: SerialNumber: syz [ 913.902270][T15746] usb 1-1: config 0 descriptor?? [ 913.906029][T15786] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 913.937852][T15783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.968987][T15746] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 913.969093][T15746] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 913.976874][T15783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.129613][T15746] usb 1-1: USB disconnect, device number 12 [ 914.218083][T15783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.223175][T15783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.260888][T15776] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 914.260918][T15776] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 914.261099][T15776] vhci_hcd vhci_hcd.0: Device attached [ 914.311054][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.437168][T15783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.437922][T15783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.530895][T15792] vhci_hcd: connection closed [ 914.548724][ T1525] vhci_hcd vhci_hcd.5: stop threads [ 914.548747][ T1525] vhci_hcd vhci_hcd.5: release socket [ 914.577035][T15795] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 914.577088][T15795] netlink: 'syz.3.3342': attribute type 2 has an invalid length. [ 914.626315][ T1525] vhci_hcd vhci_hcd.5: disconnect device [ 914.717121][ T5818] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 914.737269][ T5818] usb 3-1: USB disconnect, device number 20 [ 915.575297][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.489942][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.881911][T15810] 9p: Bad value for 'rfdno' [ 917.334609][T15812] Can't find ip_set type hash:i [ 917.511946][ T5818] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 917.585950][T15827] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 917.585976][T15827] netlink: 'syz.0.3353': attribute type 2 has an invalid length. [ 917.662992][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.663030][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.663072][ T5818] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 917.663099][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.674360][ T31] net_ratelimit: 1 callbacks suppressed [ 917.674410][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.727103][ T5818] usb 4-1: config 0 descriptor?? [ 917.914951][T15829] tmpfs: Unsupported parameter 'huge' [ 918.152745][T15820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.155177][T15820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.196030][ T5818] playstation 0003:054C:0DF2.000E: item fetching failed at offset 4/5 [ 918.198423][ T5818] playstation 0003:054C:0DF2.000E: Parse failed [ 918.198512][ T5818] playstation 0003:054C:0DF2.000E: probe with driver playstation failed with error -22 [ 918.219819][ T822] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 918.382669][ T822] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 918.382702][ T822] usb 1-1: config 5 has no interface number 0 [ 918.382749][ T822] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 918.382782][ T822] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 918.382813][ T822] usb 1-1: config 5 interface 123 has no altsetting 0 [ 918.388235][ T822] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 918.388268][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.388756][ T822] usb 1-1: Product: syz [ 918.388775][ T822] usb 1-1: Manufacturer: syz [ 918.388803][ T822] usb 1-1: SerialNumber: syz [ 918.459460][ T31] usb 4-1: USB disconnect, device number 47 [ 918.499005][T15831] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 918.723833][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.724503][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.754613][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 918.994207][T15842] program syz.5.3359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.127895][T15831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.128540][T15831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.323030][ T822] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 919.347297][ T822] usb 1-1: USB disconnect, device number 13 [ 919.370315][T14356] udevd[14356]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 919.510103][ T5693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.679824][ T9183] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 919.817458][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.837653][ T9183] usb 6-1: Using ep0 maxpacket: 16 [ 919.838507][ T9183] usb 6-1: no configurations [ 919.838519][ T9183] usb 6-1: can't read configurations, error -22 [ 919.895602][T10473] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 919.895636][T10473] CPU: 0 UID: 0 PID: 10473 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 919.895669][T10473] Tainted: [L]=SOFTLOCKUP [ 919.895678][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 919.895692][T10473] Workqueue: hci0 hci_rx_work [ 919.895735][T10473] Call Trace: [ 919.895747][T10473] [ 919.895759][T10473] dump_stack_lvl+0xe8/0x150 [ 919.895801][T10473] sysfs_create_dir_ns+0x271/0x2a0 [ 919.895843][T10473] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 919.895883][T10473] ? rt_spin_unlock+0x163/0x200 [ 919.895915][T10473] kobject_add_internal+0x62c/0xce0 [ 919.895948][T10473] kobject_add+0x163/0x240 [ 919.895969][T10473] ? rt_spin_unlock+0x157/0x200 [ 919.895999][T10473] ? __pfx_kobject_add+0x10/0x10 [ 919.896028][T10473] ? get_device_parent+0x370/0x3a0 [ 919.896061][T10473] device_add+0x3fa/0xb80 [ 919.896090][T10473] hci_conn_add_sysfs+0xd5/0x210 [ 919.896123][T10473] le_conn_complete_evt+0xfef/0x1580 [ 919.896179][T10473] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 919.896212][T10473] ? lockdep_hardirqs_on+0x7a/0x110 [ 919.896245][T10473] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 919.896277][T10473] ? rt_mutex_slowunlock+0x219/0x460 [ 919.896303][T10473] ? skb_pull_data+0xf0/0x200 [ 919.896336][T10473] hci_le_conn_complete_evt+0x187/0x470 [ 919.896391][T10473] hci_event_packet+0x67a/0xf10 [ 919.896432][T10473] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 919.896476][T10473] ? __pfx_hci_event_packet+0x10/0x10 [ 919.896509][T10473] ? rt_spin_unlock+0x157/0x200 [ 919.896546][T10473] ? hci_send_to_monitor+0xe2/0x590 [ 919.896578][T10473] hci_rx_work+0x3ee/0x1020 [ 919.896622][T10473] ? process_scheduled_works+0xa20/0x14e0 [ 919.896663][T10473] process_scheduled_works+0xa8e/0x14e0 [ 919.896723][T10473] ? __pfx_process_scheduled_works+0x10/0x10 [ 919.896759][T10473] ? assign_work+0x3cf/0x5d0 [ 919.896793][T10473] worker_thread+0xa47/0xfb0 [ 919.896838][T10473] ? __kthread_parkme+0x71/0x1f0 [ 919.896881][T10473] kthread+0x388/0x470 [ 919.896914][T10473] ? __pfx_worker_thread+0x10/0x10 [ 919.896941][T10473] ? __pfx_kthread+0x10/0x10 [ 919.896977][T10473] ret_from_fork+0x514/0xb70 [ 919.897016][T10473] ? __pfx_ret_from_fork+0x10/0x10 [ 919.897052][T10473] ? __switch_to+0xc89/0x1420 [ 919.897085][T10473] ? __pfx_kthread+0x10/0x10 [ 919.897119][T10473] ret_from_fork_asm+0x1a/0x30 [ 919.897162][T10473] [ 919.897389][T10473] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 919.897436][T10473] Bluetooth: hci0: failed to register connection device [ 919.970160][ T9183] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 920.226493][ T9183] usb 6-1: Using ep0 maxpacket: 16 [ 920.227391][ T9183] usb 6-1: no configurations [ 920.227409][ T9183] usb 6-1: can't read configurations, error -22 [ 920.229085][ T9183] usb usb6-port1: attempt power cycle [ 920.329299][T15861] netlink: 'syz.0.3365': attribute type 1 has an invalid length. [ 920.329340][T15861] netlink: 'syz.0.3365': attribute type 2 has an invalid length. [ 920.431454][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 920.505029][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 920.539542][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 920.559821][ T822] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 920.666536][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 920.667366][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 920.677146][ T9183] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 920.700006][ T9183] usb 6-1: Using ep0 maxpacket: 16 [ 920.708030][ T9183] usb 6-1: no configurations [ 920.708051][ T9183] usb 6-1: can't read configurations, error -22 [ 920.751335][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 920.754529][ T822] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 920.754587][ T822] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 920.754613][ T822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 920.754641][ T822] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 920.754667][ T822] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 920.754713][ T822] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 920.754739][ T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.874056][T15484] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.966891][ T5602] Bluetooth: hci4: command 0x0405 tx timeout [ 921.019854][ T9183] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 921.042830][ T9183] usb 6-1: Using ep0 maxpacket: 16 [ 921.043409][ T9183] usb 6-1: no configurations [ 921.043424][ T9183] usb 6-1: can't read configurations, error -22 [ 921.043741][ T9183] usb usb6-port1: unable to enumerate USB device [ 921.184128][ T822] usb 3-1: GET_CAPABILITIES returned 0 [ 921.184178][ T822] usbtmc 3-1:16.0: can't read capabilities [ 921.408593][ T822] usb 3-1: USB disconnect, device number 21 [ 921.933286][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.397518][T15895] netlink: 'syz.5.3376': attribute type 1 has an invalid length. [ 922.397541][T15895] netlink: 'syz.5.3376': attribute type 2 has an invalid length. [ 922.459817][ T9183] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 922.588345][ T822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.723756][ T9183] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 922.723785][ T9183] usb 4-1: config 5 has no interface number 0 [ 922.723839][ T9183] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 922.723869][ T9183] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 922.723900][ T9183] usb 4-1: config 5 interface 123 has no altsetting 0 [ 922.727729][ T9183] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 922.727761][ T9183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.727784][ T9183] usb 4-1: Product: syz [ 922.727800][ T9183] usb 4-1: Manufacturer: syz [ 922.727816][ T9183] usb 4-1: SerialNumber: syz [ 922.827201][T15889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 922.963557][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.032176][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.033461][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.172460][ T5592] syz_tun (unregistering): left allmulticast mode [ 923.190758][T15484] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 923.243080][T15913] netlink: 'syz.0.3382': attribute type 2 has an invalid length. [ 923.352362][T10473] Bluetooth: hci1: command tx timeout [ 923.362098][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.438955][T15484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.439053][T15484] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.439097][T15484] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 923.439122][T15484] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.451722][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.452925][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.518911][T15484] usb 3-1: config 0 descriptor?? [ 923.699537][ T9183] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 923.730034][ T9183] usb 4-1: USB disconnect, device number 48 [ 923.940267][T15484] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 923.941518][T15484] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 923.941552][T15484] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 923.941582][T15484] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 923.941611][T15484] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 923.990729][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.025245][T15484] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 924.140285][T15484] playstation 0003:054C:0DF2.000F: Invalid reportID received, expected 9 got 104 [ 924.140317][T15484] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 924.140375][T15484] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 924.140393][T15484] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 924.148415][T15484] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -22 [ 924.382623][ T5693] usb 3-1: USB disconnect, device number 22 [ 924.881120][T15853] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.881334][T15853] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.881643][T15853] bridge_slave_0: entered allmulticast mode [ 924.884300][T15853] bridge_slave_0: entered promiscuous mode [ 924.887259][T15853] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.887432][T15853] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.887928][T15853] bridge_slave_1: entered allmulticast mode [ 924.944474][T15853] bridge_slave_1: entered promiscuous mode [ 924.999105][T15853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.015484][T15853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.035821][ T5693] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 925.055675][ T9183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 925.099259][T15853] team0: Port device team_slave_0 added [ 925.116538][T15853] team0: Port device team_slave_1 added [ 925.151661][T15935] netlink: 'syz.2.3388': attribute type 1 has an invalid length. [ 925.151683][T15935] netlink: 'syz.2.3388': attribute type 2 has an invalid length. [ 925.192130][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 925.193125][ T5693] usb 4-1: no configurations [ 925.193142][ T5693] usb 4-1: can't read configurations, error -22 [ 925.268408][T15853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.268427][T15853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.268458][T15853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.271470][T15484] =========================[ 925.271470][T15484] ================================================================== [ 925.271484][T15484] BUG: KASAN: slab-use-after-free in l2cap_sock_ready_cb+0xe3/0x180 [ 925.271596][T15484] Read of size 8 at addr ffff88802a3e8200 by task kworker/1:4/15484 [ 925.271610][T15484] [ 925.271623][T15484] CPU: 1 UID: 0 PID: 15484 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.271647][T15484] Tainted: [L]=SOFTLOCKUP [ 925.271665][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 925.271677][T15484] Workqueue: events l2cap_info_timeout [ 925.271697][T15484] Call Trace: [ 925.271705][T15484] [ 925.271713][T15484] dump_stack_lvl+0xe8/0x150 [ 925.271741][T15484] print_address_description+0x55/0x1e0 [ 925.271772][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.271795][T15484] print_report+0x58/0x70 [ 925.271818][T15484] kasan_report+0x117/0x150 [ 925.271849][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.271896][T15484] l2cap_sock_ready_cb+0xe3/0x180 [ 925.271921][T15484] l2cap_conn_start+0x7af/0xf70 [ 925.271942][T15484] ? __pfx_l2cap_conn_start+0x10/0x10 [ 925.271964][T15484] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 925.271989][T15484] ? lockdep_hardirqs_on+0x7a/0x110 [ 925.272014][T15484] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 925.272037][T15484] ? mutex_lock_nested+0x152/0x1d0 [ 925.272054][T15484] ? l2cap_info_timeout+0x60/0xa0 [ 925.272072][T15484] l2cap_info_timeout+0x68/0xa0 [ 925.272089][T15484] ? process_scheduled_works+0xa20/0x14e0 [ 925.272112][T15484] process_scheduled_works+0xa8e/0x14e0 [ 925.272143][T15484] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.272169][T15484] ? assign_work+0x3cf/0x5d0 [ 925.272191][T15484] worker_thread+0xa47/0xfb0 [ 925.272218][T15484] ? __kthread_parkme+0x71/0x1f0 [ 925.272248][T15484] kthread+0x388/0x470 [ 925.272273][T15484] ? __pfx_worker_thread+0x10/0x10 [ 925.272293][T15484] ? __pfx_kthread+0x10/0x10 [ 925.272317][T15484] ret_from_fork+0x514/0xb70 [ 925.272346][T15484] ? __pfx_ret_from_fork+0x10/0x10 [ 925.272373][T15484] ? __switch_to+0xc89/0x1420 [ 925.272401][T15484] ? __pfx_kthread+0x10/0x10 [ 925.272425][T15484] ret_from_fork_asm+0x1a/0x30 [ 925.272451][T15484] [ 925.272458][T15484] [ 925.272472][T15484] Allocated by task 15855: [ 925.272482][T15484] kasan_save_track+0x3e/0x80 [ 925.272499][T15484] __kasan_kmalloc+0x93/0xb0 [ 925.272514][T15484] __kmalloc_noprof+0x41a/0x780 [ 925.272530][T15484] sk_prot_alloc+0xe7/0x210 [ 925.272556][T15484] sk_alloc+0x3a/0x390 [ 925.272583][T15484] bt_sock_alloc+0x3b/0x340 [ 925.272682][T15484] l2cap_sock_create+0x147/0x330 [ 925.272708][T15484] bt_sock_create+0x163/0x240 [ 925.272726][T15484] __sock_create+0x4b3/0x9d0 [ 925.272753][T15484] __sys_socket+0xd6/0x1b0 [ 925.272778][T15484] __x64_sys_socket+0x7a/0x90 [ 925.272804][T15484] do_syscall_64+0x174/0x580 [ 925.272833][T15484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.272855][T15484] [ 925.272861][T15484] Freed by task 15855: [ 925.272872][T15484] kasan_save_track+0x3e/0x80 [ 925.272891][T15484] kasan_save_free_info+0x40/0x50 [ 925.272918][T15484] __kasan_slab_free+0x5c/0x80 [ 925.272938][T15484] kfree+0x1c5/0x6c0 [ 925.272967][T15484] __sk_destruct+0x754/0x9e0 [ 925.272985][T15484] l2cap_sock_release+0x1b3/0x250 [ 925.273009][T15484] sock_close+0xad/0x220 [ 925.273030][T15484] __fput+0x42a/0xa80 [ 925.273049][T15484] task_work_run+0x1d9/0x270 [ 925.273079][T15484] get_signal+0x1182/0x12c0 [ 925.273103][T15484] arch_do_signal_or_restart+0xbb/0x860 [ 925.273143][T15484] exit_to_user_mode_loop+0x104/0x730 [ 925.273194][T15484] do_syscall_64+0x353/0x580 [ 925.273222][T15484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.273242][T15484] [ 925.273248][T15484] The buggy address belongs to the object at ffff88802a3e8000 [ 925.273248][T15484] which belongs to the cache kmalloc-4k of size 4096 [ 925.273267][T15484] The buggy address is located 512 bytes inside of [ 925.273267][T15484] freed 4096-byte region [ffff88802a3e8000, ffff88802a3e9000) [ 925.273291][T15484] [ 925.273297][T15484] The buggy address belongs to the physical page: [ 925.273317][T15484] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a3e8 [ 925.273338][T15484] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 925.273357][T15484] flags: 0x80000000000040(head|node=0|zone=1) [ 925.273374][T15484] page_type: f5(slab) [ 925.273393][T15484] raw: 0080000000000040 ffff88813ffb5140 dead000000000100 dead000000000122 [ 925.273412][T15484] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 925.273433][T15484] head: 0080000000000040 ffff88813ffb5140 dead000000000100 dead000000000122 [ 925.273451][T15484] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 925.273470][T15484] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 925.273488][T15484] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 925.273499][T15484] page dumped because: kasan: bad access detected [ 925.273510][T15484] page_owner tracks the page as allocated [ 925.273518][T15484] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4966, tgid 4966 (udevd), ts 36627875501, free_ts 36581446903 [ 925.273555][T15484] post_alloc_hook+0x1f9/0x250 [ 925.273605][T15484] get_page_from_freelist+0x262a/0x26a0 [ 925.273629][T15484] __alloc_frozen_pages_noprof+0x18d/0x380 [ 925.273661][T15484] allocate_slab+0x79/0x5e0 [ 925.273687][T15484] refill_objects+0x2d8/0x350 [ 925.273715][T15484] __pcs_replace_empty_main+0x330/0x690 [ 925.273742][T15484] __kmalloc_noprof+0x544/0x780 [ 925.273762][T15484] tomoyo_realpath_from_path+0xef/0x640 [ 925.273790][T15484] tomoyo_check_open_permission+0x229/0x470 [ 925.273824][T15484] security_file_open+0xa9/0x240 [ 925.273846][T15484] do_dentry_open+0x4be/0x1420 [ 925.273877][T15484] vfs_open+0x3b/0x350 [ 925.273906][T15484] path_openat+0x2e60/0x3850 [ 925.273931][T15484] do_file_open+0x23e/0x4a0 [ 925.273954][T15484] do_sys_openat2+0x115/0x200 [ 925.273972][T15484] __x64_sys_openat+0x138/0x170 [ 925.273996][T15484] page last free pid 4964 tgid 4964 stack trace: [ 925.274010][T15484] __free_frozen_pages+0x10e7/0x11c0 [ 925.274030][T15484] __slab_free+0x252/0x2a0 [ 925.274049][T15484] qlist_free_all+0x99/0x100 [ 925.274081][T15484] kasan_quarantine_reduce+0x148/0x160 [ 925.274113][T15484] __kasan_slab_alloc+0x22/0x80 [ 925.274133][T15484] kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 925.274166][T15484] __alloc_skb+0x1d7/0x7a0 [ 925.274196][T15484] netlink_sendmsg+0x5d4/0xb40 [ 925.274217][T15484] sock_sendmsg_nosec+0x13a/0x180 [ 925.274242][T15484] ____sys_sendmsg+0x565/0x870 [ 925.274260][T15484] ___sys_sendmsg+0x2a5/0x360 [ 925.274277][T15484] __x64_sys_sendmsg+0x1b7/0x290 [ 925.274297][T15484] do_syscall_64+0x174/0x580 [ 925.274325][T15484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.274347][T15484] [ 925.274353][T15484] Memory state around the buggy address: [ 925.274366][T15484] ffff88802a3e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.274378][T15484] ffff88802a3e8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.274389][T15484] >ffff88802a3e8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.274398][T15484] ^ [ 925.274448][T15484] ffff88802a3e8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.274459][T15484] ffff88802a3e8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 925.274468][T15484] ================================================================== [ 925.321359][T15484] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 925.321384][T15484] CPU: 1 UID: 0 PID: 15484 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 925.321416][T15484] Tainted: [L]=SOFTLOCKUP [ 925.321425][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 925.321441][T15484] Workqueue: events l2cap_info_timeout [ 925.321471][T15484] Call Trace: [ 925.321480][T15484] [ 925.321490][T15484] vpanic+0x56c/0xa60 [ 925.321515][T15484] ? rcu_is_watching+0x15/0xb0 [ 925.321543][T15484] ? __pfx_vpanic+0x10/0x10 [ 925.321570][T15484] panic+0xc5/0xd0 [ 925.321590][T15484] ? __pfx_panic+0x10/0x10 [ 925.321611][T15484] ? preempt_schedule_thunk+0x16/0x40 [ 925.321642][T15484] ? preempt_schedule_thunk+0x16/0x40 [ 925.321680][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.321708][T15484] check_panic_on_warn+0x89/0xb0 [ 925.321810][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.321839][T15484] end_report+0x73/0x170 [ 925.321864][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.321894][T15484] kasan_report+0x128/0x150 [ 925.321920][T15484] ? l2cap_sock_ready_cb+0xe3/0x180 [ 925.321953][T15484] l2cap_sock_ready_cb+0xe3/0x180 [ 925.321984][T15484] l2cap_conn_start+0x7af/0xf70 [ 925.322013][T15484] ? __pfx_l2cap_conn_start+0x10/0x10 [ 925.322043][T15484] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 925.322076][T15484] ? lockdep_hardirqs_on+0x7a/0x110 [ 925.322107][T15484] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 925.322139][T15484] ? mutex_lock_nested+0x152/0x1d0 [ 925.322162][T15484] ? l2cap_info_timeout+0x60/0xa0 [ 925.322186][T15484] l2cap_info_timeout+0x68/0xa0 [ 925.322209][T15484] ? process_scheduled_works+0xa20/0x14e0 [ 925.322234][T15484] process_scheduled_works+0xa8e/0x14e0 [ 925.322276][T15484] ? __pfx_process_scheduled_works+0x10/0x10 [ 925.322307][T15484] ? assign_work+0x3cf/0x5d0 [ 925.322332][T15484] worker_thread+0xa47/0xfb0 [ 925.322366][T15484] ? __kthread_parkme+0x71/0x1f0 [ 925.322399][T15484] kthread+0x388/0x470 [ 925.322431][T15484] ? __pfx_worker_thread+0x10/0x10 [ 925.322456][T15484] ? __pfx_kthread+0x10/0x10 [ 925.322489][T15484] ret_from_fork+0x514/0xb70 [ 925.322525][T15484] ? __pfx_ret_from_fork+0x10/0x10 [ 925.322559][T15484] ? __switch_to+0xc89/0x1420 [ 925.322588][T15484] ? __pfx_kthread+0x10/0x10 [ 925.322621][T15484] ret_from_fork_asm+0x1a/0x30 [ 925.322662][T15484] [ 925.323267][T15484] Kernel Offset: disabled