last executing test programs: 10m41.573171493s ago: executing program 0 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 10m41.540767172s ago: executing program 0 (id=1092): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000880)}) 10m38.695840006s ago: executing program 0 (id=1101): socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000100)={0x523, 0x3, 0x675, 0x8000000000000000, 0x0, 0x0, 0x8, 0x7}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_io_uring_setup(0x4958, &(0x7f0000000140)={0x0, 0xf19f, 0x2000, 0x2, 0x205}, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)) r1 = io_uring_setup(0x153, &(0x7f0000000040)={0x0, 0x2008e44, 0x1818db0335554f1b, 0x1, 0xc1, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0xa, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1001}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) 10m38.429510078s ago: executing program 0 (id=1102): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x800, 0x0) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x3, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x8001, 0x8, 0x123, 0x3, 0xa000, 0x0, 0x0, r4, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r2, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r6, 0x1, 0x27, 0x0, &(0x7f00000002c0)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) sendmmsg$unix(r8, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r5}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r11, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r11, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) bpf$ITER_CREATE(0x21, &(0x7f0000002040)={r7}, 0x8) 10m37.825024851s ago: executing program 0 (id=1105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r4}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200008, 0x5, 0x7f, 0x1, 0x1, 0x3b, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)='6', &(0x7f0000000340), 0xca, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000140)=""/167, &(0x7f0000000040), &(0x7f0000000280), 0x1, r7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbf7, {0x0, 0x0, 0x0, r4, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x4018888) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x42a3, 0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x6}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendmmsg$inet(r9, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}], 0x1, 0x40000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x30, 0x1, 0x0}, &(0x7f0000000100)=0x40) 10m37.530246311s ago: executing program 0 (id=1107): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1200) 10m37.005047925s ago: executing program 32 (id=1107): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x8, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1200) 8m58.99885638s ago: executing program 3 (id=1528): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x102, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8m57.928779691s ago: executing program 3 (id=1532): epoll_create(0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000540)=""/4096, 0x1000) write$cgroup_int(r1, &(0x7f0000000080)=0x4, 0xfffffe7d) 8m57.090822334s ago: executing program 3 (id=1533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0x1058a}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x4000000, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) 8m56.870934459s ago: executing program 3 (id=1534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x280000, 0x0, 0xfe, 0x0, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r6 = dup3(r5, r0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x54, 0x0, &(0x7f0000000740)="38eef39a9470e520a675d696d62d357d2dff6aa91ce585589f5a86b334887eccd0cf6d8e735499c5da5a4d563ad1b35f80fa0b64a2aff75617b3b1c35b8d3141773af29a42fdf17084264e7834faf8d112fffc49"}) 8m56.772468437s ago: executing program 3 (id=1535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x82100, 0x0) close(0x4) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x6) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/47, 0x2f) getdents64(r6, &(0x7f0000002f40)=""/4079, 0x7c4) 8m56.744840038s ago: executing program 3 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 8m56.521760697s ago: executing program 33 (id=1537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 10.420182903s ago: executing program 4 (id=4185): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32, @ANYBLOB="200006"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.163451433s ago: executing program 4 (id=4189): io_uring_setup(0xaaa, &(0x7f0000008fc0)={0x0, 0xd73a, 0x1000, 0x3, 0x4d}) 9.989082067s ago: executing program 4 (id=4191): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xb7e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x8028451f, 0x0) 9.880932692s ago: executing program 4 (id=4194): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) 9.536997941s ago: executing program 4 (id=4201): unshare(0x22020400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="1200000007"], 0x10) 9.224801517s ago: executing program 4 (id=4207): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4}, 0x0) 8.962072589s ago: executing program 34 (id=4207): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4}, 0x0) 4.260378636s ago: executing program 5 (id=4285): syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0x9) 4.077669488s ago: executing program 5 (id=4287): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.8316247s ago: executing program 5 (id=4290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342", {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, 0x49}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x74}}, 0x0) 3.447831506s ago: executing program 5 (id=4297): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x2700}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.337396665s ago: executing program 5 (id=4299): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221200"], 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file4\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) ioctl$sock_proto_private(r1, 0x89e0, 0x0) 2.648919968s ago: executing program 6 (id=4306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) truncate(0x0, 0x8001) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 2.483137263s ago: executing program 6 (id=4310): syz_open_dev$usbfs(&(0x7f0000000040), 0x1ff, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.390462184s ago: executing program 6 (id=4313): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040815, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) 2.2572256s ago: executing program 6 (id=4315): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) 2.202667058s ago: executing program 6 (id=4318): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, 0x0, &(0x7f0000000040)) 2.056468333s ago: executing program 6 (id=4320): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1.715159802s ago: executing program 1 (id=4330): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) socket$netlink(0x10, 0x3, 0xc) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500200601fe8000000000000000000000000000bbfea000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002"], 0x0) 1.631376422s ago: executing program 1 (id=4332): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000500)=ANY=[]) 1.516329874s ago: executing program 1 (id=4334): syz_usb_connect$uac1(0x3, 0xa0, &(0x7f0000002400)=ANY=[@ANYBLOB="12010002000000086b1d010140000102030109028e0003010aa0080904000000010100000a24010300020201020c24020506020403f30f040109040100000102000009040101010102000007240144050100090501094000011800072501008008000904020000010200000904020101010200000e24020105040504d2ee0b2ea87f07240105fd01000724010649030009058209080040060407"], 0x0) 904.939232ms ago: executing program 1 (id=4350): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000), 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x840) 875.545592ms ago: executing program 1 (id=4352): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780100001b0001000000000000000000fc000000000000000000000000000000fc01000000000000000000000000000000000000000000000000002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000c000800", @ANYBLOB="706b4c195fe9f35b88ce01d09f834dab2cef7a6d0be67649fb2c008cb1a2e06e28aa5d7d7612c2633c24b575823a456d52dbb4c6bbb589f5ec2c52f575adcab8b50fa3347686cd90f2cce76abd322bea0a12ba484e46d51978da5060b21b18c1adc6aeac"], 0x178}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) 729.597272ms ago: executing program 1 (id=4356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x6, 0x7, 0xffe0000000000000, 0x300, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="ac", 0x1}], 0x1}, 0x1) 486.29554ms ago: executing program 2 (id=4362): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/101, 0x65, 0x0, 0x0, 0x4, 0x3, 0x10000001}}, 0x120) 482.644813ms ago: executing program 7 (id=4363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003c000000fc000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0004002c0000000000000058000200636263"], 0x194}}, 0x4050) 381.103477ms ago: executing program 2 (id=4364): unshare(0x2a020400) r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x002\x81\xbcht\x8b+\xb7?<\x0eQ\x88\xc5\x06\x8e;Zo\xa62\xa7\xf8.\xff', 0x0) pread64(r0, &(0x7f0000000180)=""/248, 0xf8, 0x7fffffffffffffff) 380.836816ms ago: executing program 7 (id=4365): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 323.582105ms ago: executing program 7 (id=4366): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbed, {0x7, 0x0, 0x0, r1, 0x80, 0xa99bd844dcef1332, 0x3}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c094}, 0x450) 317.32537ms ago: executing program 2 (id=4367): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) 204.301148ms ago: executing program 7 (id=4368): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) 204.016893ms ago: executing program 2 (id=4369): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xc5f2618db8c5cbca, 0x11cfa, 0x0, 0x7, 0x3, 0x4, 0x3, 0x0, 0x5}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x801) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x1d9, 0x81, 0x5}) 202.224145ms ago: executing program 5 (id=4370): syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44058882e3c0109024e0001010000000904000000020200000b240600f2ffffff"], 0x0) 114.576481ms ago: executing program 2 (id=4371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 93.278377ms ago: executing program 7 (id=4372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x4614, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @mss={0x2, 0x3}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0xfffe}, @timestamp], 0x2000000000000133) sendto(r0, &(0x7f0000000000)="c9b7d8a4097c9851d658f5bfc517da628f441794", 0x14, 0x20040, 0x0, 0x0) sendto(r0, &(0x7f0000000980)="cd", 0x1, 0xc0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 258.574µs ago: executing program 2 (id=4373): setresuid(0xee01, 0xee01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 0s ago: executing program 7 (id=4374): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 779.536404][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 779.570432][ T10] usb 5-1: can't read configurations, error -22 [ 779.570884][ T10] usb usb5-port1: attempt power cycle [ 779.614057][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 779.614073][ T30] audit: type=1326 audit(1777900429.782:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16356 comm="syz.5.3172" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x0 [ 779.680854][T11126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.687301][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 779.693008][T11126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 779.706870][ T29] usb 3-1: config 6 has an invalid interface number: 150 but max is 0 [ 779.719958][ T29] usb 3-1: config 6 has no interface number 0 [ 779.726628][ T29] usb 3-1: config 6 interface 150 altsetting 6 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 779.738938][ T29] usb 3-1: config 6 interface 150 has no altsetting 0 [ 779.748623][ T29] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 779.760236][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.775142][ T29] usb 3-1: Product: syz [ 779.786870][ T29] usb 3-1: Manufacturer: syz [ 779.798629][ T29] usb 3-1: SerialNumber: syz [ 779.915388][ T24] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 779.915434][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 779.983612][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 779.997128][T11126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.009146][ T10] usb 5-1: can't read configurations, error -22 [ 780.032183][T11126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.105232][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 780.114519][ T24] usb 7-1: config 0 has no interfaces? [ 780.144284][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 780.146682][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 780.172518][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 780.185125][ T29] usb 3-1: USB disconnect, device number 14 [ 780.213685][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 780.222172][ T10] usb 5-1: can't read configurations, error -22 [ 780.246691][ T10] usb usb5-port1: unable to enumerate USB device [ 780.269816][ T24] usb 7-1: Manufacturer: syz [ 780.297618][ T24] usb 7-1: config 0 descriptor?? [ 780.312273][T11126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.335380][T11126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.418043][T16340] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.432006][T16340] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.456076][T16340] bridge_slave_0: entered allmulticast mode [ 780.469703][T16340] bridge_slave_0: entered promiscuous mode [ 780.514914][T11126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.551608][T11126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.647968][T16340] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.656068][T16340] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.664677][T16340] bridge_slave_1: entered allmulticast mode [ 780.678338][T16340] bridge_slave_1: entered promiscuous mode [ 780.758787][ T10] usb 7-1: USB disconnect, device number 103 [ 780.800174][T16340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.821381][T16340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.918732][ T5625] Bluetooth: hci4: command tx timeout [ 780.937352][T16340] team0: Port device team_slave_0 added [ 780.993925][T16340] team0: Port device team_slave_1 added [ 781.177013][T16340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.196515][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.252140][T16340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.280574][T16340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.287873][ T5777] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 781.322069][T16340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.407408][T16340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.445454][ T5777] usb 3-1: Using ep0 maxpacket: 8 [ 781.461400][ T5777] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.506117][ T5777] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.563823][ T5777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 781.591254][ T5777] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 781.648253][ T5777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.728038][ T5777] usb 3-1: config 0 descriptor?? [ 781.912218][T11126] bridge_slave_1: left allmulticast mode [ 781.942946][T11126] bridge_slave_1: left promiscuous mode [ 781.971992][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.017170][T11126] bridge_slave_0: left allmulticast mode [ 782.040399][T11126] bridge_slave_0: left promiscuous mode [ 782.061993][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.390419][T16371] netlink: 'syz.2.3174': attribute type 1 has an invalid length. [ 782.469043][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3174'. [ 782.818139][T11126] bond1 (unregistering): (slave geneve2): Releasing active interface [ 782.995763][ T5625] Bluetooth: hci4: command tx timeout [ 783.094041][T11126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.112672][T11126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.127720][T11126] bond0 (unregistering): Released all slaves [ 783.158496][T11126] bond1 (unregistering): Released all slaves [ 783.197042][T11126] bond2 (unregistering): (slave lo): Releasing backup interface [ 783.213682][T11126] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 783.228153][T11126] bond2 (unregistering): Released all slaves [ 783.255715][T11126] bond3 (unregistering): Released all slaves [ 783.275160][T11126] bond4 (unregistering): Released all slaves [ 783.315988][T16340] hsr_slave_0: entered promiscuous mode [ 783.323038][T16340] hsr_slave_1: entered promiscuous mode [ 783.329821][T16340] debugfs: 'hsr0' already exists in 'hsr' [ 783.336026][T16340] Cannot create hsr debugfs directory [ 783.453373][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 783.466615][ T5777] usbhid 3-1:0.0: can't add hid device: -71 [ 783.475051][ T5777] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 783.507974][ T5777] usb 3-1: USB disconnect, device number 15 [ 783.538771][T11126] tipc: Disabling bearer [ 783.582689][T11126] tipc: Left network mode [ 784.125351][ T29] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 784.296237][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 784.304522][ T29] usb 5-1: config 0 has no interfaces? [ 784.320409][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.330013][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.344037][ T29] usb 5-1: Product: syz [ 784.348509][ T29] usb 5-1: Manufacturer: syz [ 784.376217][ T29] usb 5-1: SerialNumber: syz [ 784.427598][ T29] usb 5-1: config 0 descriptor?? [ 784.470499][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 784.642789][ T24] usb 5-1: USB disconnect, device number 44 [ 785.087155][ T5625] Bluetooth: hci4: command tx timeout [ 785.219850][T11126] hsr_slave_0: left promiscuous mode [ 785.265143][T11126] hsr_slave_1: left promiscuous mode [ 785.280969][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.299635][T11126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.333280][T11126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.341985][T11126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.360104][T11126] veth1_macvtap: left promiscuous mode [ 785.366011][T11126] veth0_macvtap: left promiscuous mode [ 785.373673][T11126] veth1_vlan: left promiscuous mode [ 785.373883][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3182'. [ 785.384597][T11126] veth0_vlan: left promiscuous mode [ 786.076304][T11126] team0 (unregistering): Port device team_slave_1 removed [ 786.154963][T11126] team0 (unregistering): Port device team_slave_0 removed [ 786.342953][T16444] ip6tnl1: entered allmulticast mode [ 786.985909][T16340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 787.165547][ T5625] Bluetooth: hci4: command tx timeout [ 787.257964][T16340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.266599][T16340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 787.329336][T16340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.371877][T16340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 787.525556][T16340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.807318][T16340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 787.888932][T16340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.170110][T11126] IPVS: stop unused estimator thread 0... [ 788.232588][T16340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.288329][T16340] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.344517][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.351799][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.433330][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.440532][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.539134][T16489] loop5: detected capacity change from 0 to 7 [ 788.598629][T16489] Dev loop5: unable to read RDB block 7 [ 788.611351][T16489] loop5: unable to read partition table [ 788.640525][T16489] loop5: partition table beyond EOD, truncated [ 788.670760][T16489] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 788.895518][ T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 788.963377][T16494] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 788.997020][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.065010][T16496] snd_dummy snd_dummy.0: control 0:0:14:syz0:-5 is already present [ 789.095717][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 789.108132][ T10] usb 5-1: config 0 has no interfaces? [ 789.120345][T16496] kvm: apic: phys broadcast and lowest prio [ 789.121055][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 789.168999][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 789.195351][ T10] usb 5-1: Manufacturer: syz [ 789.204586][T16340] veth0_vlan: entered promiscuous mode [ 789.211044][ T10] usb 5-1: config 0 descriptor?? [ 789.255870][T16340] veth1_vlan: entered promiscuous mode [ 789.275271][ T5630] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 789.334803][T16340] veth0_macvtap: entered promiscuous mode [ 789.362916][T16340] veth1_macvtap: entered promiscuous mode [ 789.415411][ T5630] usb 3-1: device descriptor read/64, error -71 [ 789.432846][T16340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.497761][T16340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.540422][T11125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.566639][T11125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.611696][T11125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.651441][T11125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.672140][ T5630] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 789.759769][ T5687] usb 5-1: USB disconnect, device number 45 [ 789.828594][ T5630] usb 3-1: device descriptor read/64, error -71 [ 789.928692][T11125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.945915][T11125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.965480][ T5630] usb usb3-port1: attempt power cycle [ 789.995575][ T24] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 790.013634][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.025397][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.155416][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 790.167564][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 790.187045][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 790.198683][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.206950][ T24] usb 7-1: Product: syz [ 790.215257][ T24] usb 7-1: Manufacturer: syz [ 790.222946][ T24] usb 7-1: SerialNumber: syz [ 790.252117][ T24] usb 7-1: config 0 descriptor?? [ 790.270283][ T24] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 790.321464][ T24] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 790.325321][ T5630] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 790.357750][ T5630] usb 3-1: device descriptor read/8, error -71 [ 790.605376][ T5630] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 790.637413][ T5630] usb 3-1: device descriptor read/8, error -71 [ 790.756192][ T5630] usb usb3-port1: unable to enumerate USB device [ 790.887481][ T24] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 791.303151][ T24] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 791.321978][ T24] em28xx 7-1:0.0: board has no eeprom [ 791.336136][T16519] netlink: 'syz.4.3195': attribute type 21 has an invalid length. [ 791.344267][T16519] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3195'. [ 791.647968][ T24] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 791.656443][ T24] em28xx 7-1:0.0: dvb set to bulk mode. [ 791.662328][ T5687] em28xx 7-1:0.0: Binding DVB extension [ 792.002133][T16508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.018756][T16508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.043588][ T5777] usb 7-1: USB disconnect, device number 104 [ 792.070829][ T5777] em28xx 7-1:0.0: Disconnecting em28xx [ 792.122103][ T5687] em28xx 7-1:0.0: Registering input extension [ 792.147903][ T5777] em28xx 7-1:0.0: Closing input extension [ 792.206478][ T5777] em28xx 7-1:0.0: Freeing device [ 792.280363][T16532] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 792.670468][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 792.696301][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 792.709484][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 792.721629][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 792.731256][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.800975][T16541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.072819][T16547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.122721][T16544] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.166350][T16544] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.227175][T16544] bridge_slave_0: entered allmulticast mode [ 794.267927][T16544] bridge_slave_0: entered promiscuous mode [ 794.331449][T16544] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.351017][T16544] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.388753][T16544] bridge_slave_1: entered allmulticast mode [ 794.446290][T16544] bridge_slave_1: entered promiscuous mode [ 794.616650][T16568] syzkaller0: entered promiscuous mode [ 794.623796][T16568] syzkaller0: entered allmulticast mode [ 794.781175][ T5638] Bluetooth: hci1: command tx timeout [ 794.935242][ T5704] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 795.120678][ T5704] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.130633][ T5704] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 795.147064][ T5704] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.166569][ T5704] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 795.187587][ T5704] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.198218][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.206634][ T5704] usb 2-1: Product: syz [ 795.211634][ T5704] usb 2-1: Manufacturer: syz [ 795.228827][ T5704] cdc_wdm 2-1:1.0: skipping garbage [ 795.238578][ T5704] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 795.317324][T16544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.332219][T16544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.369728][T16544] team0: Port device team_slave_0 added [ 795.377771][T16544] team0: Port device team_slave_1 added [ 795.402564][T16544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.409728][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.437109][T16544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.444625][ T5704] usb 2-1: USB disconnect, device number 48 [ 795.450306][T16544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.461853][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.489139][T16544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.538238][T16544] hsr_slave_0: entered promiscuous mode [ 795.544603][T16544] hsr_slave_1: entered promiscuous mode [ 795.551279][T16544] debugfs: 'hsr0' already exists in 'hsr' [ 795.558191][T16544] Cannot create hsr debugfs directory [ 795.585219][ T5715] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 795.723644][T16544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.734640][T16544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 795.746434][ T5715] usb 7-1: Using ep0 maxpacket: 16 [ 795.764423][ T5715] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.787684][ T5715] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 795.806467][ T5715] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 795.845271][ T5715] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 795.862137][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.880514][ T5715] usb 7-1: Product: syz [ 795.909663][ T5715] usb 7-1: Manufacturer: syz [ 795.914397][ T5715] usb 7-1: SerialNumber: syz [ 795.920995][ T5715] usb 7-1: config 0 descriptor?? [ 795.941202][ T5715] mcba_usb 7-1:0.0: Can't find endpoints [ 795.964585][T16544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.994364][T16544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 796.121424][T16544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.133658][T16544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 796.154593][ T5704] usb 7-1: USB disconnect, device number 105 [ 796.259684][T16544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.270983][T16544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 796.592640][T16544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 796.612210][T16544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.630159][T16544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 796.650752][T16544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.666652][T16544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 796.706268][T16544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.746990][T16544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 796.783968][T16544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.835401][ T5638] Bluetooth: hci1: command tx timeout [ 796.844200][ T30] audit: type=1326 audit(1777900447.012:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 796.883815][T16604] netlink: 'syz.6.3218': attribute type 4 has an invalid length. [ 796.893498][ T30] audit: type=1326 audit(1777900447.042:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 796.954828][ T30] audit: type=1326 audit(1777900447.052:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 796.982423][ T5687] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 797.004505][ T30] audit: type=1326 audit(1777900447.052:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.041181][ T30] audit: type=1326 audit(1777900447.052:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.075508][ T30] audit: type=1326 audit(1777900447.052:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.103870][ T30] audit: type=1326 audit(1777900447.052:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.129051][ T30] audit: type=1326 audit(1777900447.052:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.157953][ T5687] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 797.166712][ T5687] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 797.176258][ T5687] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 797.186910][ T5687] usb 2-1: config 220 has no interface number 2 [ 797.193346][ T5687] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 797.209915][ T30] audit: type=1326 audit(1777900447.052:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.235168][ T5687] usb 2-1: config 220 interface 0 has no altsetting 0 [ 797.242093][ T5687] usb 2-1: config 220 interface 76 has no altsetting 0 [ 797.249756][ T5687] usb 2-1: config 220 interface 1 has no altsetting 0 [ 797.258404][ T30] audit: type=1326 audit(1777900447.052:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16596 comm="syz.6.3218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 797.289622][ T5687] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 797.299667][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.308187][ T5687] usb 2-1: Product: syz [ 797.312546][ T5687] usb 2-1: Manufacturer: syz [ 797.323399][ T5687] usb 2-1: SerialNumber: syz [ 797.357085][T16544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.392565][T16544] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.427664][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.434858][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.454634][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.462272][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.564278][T16544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.701942][T16544] veth0_vlan: entered promiscuous mode [ 797.747873][T16544] veth1_vlan: entered promiscuous mode [ 797.892684][T16544] veth0_macvtap: entered promiscuous mode [ 797.921421][T16544] veth1_macvtap: entered promiscuous mode [ 797.950411][ T5687] usb 2-1: selecting invalid altsetting 0 [ 797.966983][ T5687] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 797.978099][T16544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.985532][ T5687] uvcvideo 2-1:220.0: No valid video chain found. [ 797.997672][T16544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.020028][ T5687] usb 2-1: selecting invalid altsetting 0 [ 798.051016][T11125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.056215][ T5687] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 798.097067][T11125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.115541][ T5687] usb 2-1: USB disconnect, device number 49 [ 798.139603][T11125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.152785][T11125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.320667][T16612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.534229][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.571954][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.621275][T16616] binder: 16615:16616 ioctl 40045612 200000000100 returned -22 [ 798.728778][T16624] netlink: 'syz.1.3223': attribute type 13 has an invalid length. [ 798.739643][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.754879][T16624] netlink: 'syz.1.3223': attribute type 17 has an invalid length. [ 798.771320][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.918095][ T5638] Bluetooth: hci1: command tx timeout [ 799.825450][ T5715] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 799.860046][T16645] netlink: 'syz.1.3228': attribute type 12 has an invalid length. [ 799.996274][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 800.014649][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 800.046995][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 800.064075][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 800.090563][ T5715] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 800.118473][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.199801][ T5715] usb 3-1: config 0 descriptor?? [ 800.229439][T16641] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 800.279347][ T5715] hub 3-1:0.0: USB hub found [ 800.470578][ T5715] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 800.926280][T16658] syzkaller0: entered promiscuous mode [ 800.947815][T16658] syzkaller0: entered allmulticast mode [ 800.969757][ T5715] hid-generic 0003:046D:C314.0019: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0 [ 800.995362][ T5638] Bluetooth: hci1: command tx timeout [ 801.098059][T16639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.285627][ T5715] usb 3-1: USB disconnect, device number 20 [ 801.389907][T16663] snd_dummy snd_dummy.0: control 0:0:14:syz0:-5 is already present [ 801.415355][T16663] kvm: apic: phys broadcast and lowest prio [ 801.566713][ T5687] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 801.745524][ T5687] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 801.757345][ T5687] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 801.770491][ T5687] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 801.781783][ T5687] usb 5-1: config 220 has no interface number 2 [ 801.788647][ T5687] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 801.802325][ T5687] usb 5-1: config 220 interface 0 has no altsetting 0 [ 801.810860][ T5687] usb 5-1: config 220 interface 76 has no altsetting 0 [ 801.818060][ T5687] usb 5-1: config 220 interface 1 has no altsetting 0 [ 801.826639][ T5687] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 801.836040][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.844061][ T5687] usb 5-1: Product: syz [ 801.849030][ T5687] usb 5-1: Manufacturer: syz [ 801.853688][ T5687] usb 5-1: SerialNumber: syz [ 802.005330][ T5630] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 802.074568][ T5687] usb 5-1: selecting invalid altsetting 0 [ 802.083039][ T5687] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 802.090602][ T5687] uvcvideo 5-1:220.0: No valid video chain found. [ 802.106746][ T5687] usb 5-1: selecting invalid altsetting 0 [ 802.113072][ T5687] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 802.129644][ T5687] usb 5-1: USB disconnect, device number 46 [ 802.202033][ T5630] usb 3-1: Using ep0 maxpacket: 32 [ 802.213488][ T5630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 802.222990][ T5630] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 802.236506][ T5630] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 802.251750][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.269338][ T5630] usb 3-1: Product: syz [ 802.279361][ T5630] usb 3-1: Manufacturer: syz [ 802.290279][ T5630] usb 3-1: SerialNumber: syz [ 802.613918][ T5630] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 802.630157][ T5630] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 802.761246][ T5630] usb 3-1: USB disconnect, device number 21 [ 802.830696][T14060] udevd[14060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.965050][T16681] tipc: Enabling of bearer rejected, failed to enable media [ 803.330933][T16693] FAULT_INJECTION: forcing a failure. [ 803.330933][T16693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.363896][T16693] CPU: 0 UID: 0 PID: 16693 Comm: syz.2.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.363926][T16693] Tainted: [L]=SOFTLOCKUP [ 803.363933][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.363943][T16693] Call Trace: [ 803.363951][T16693] [ 803.363959][T16693] dump_stack_lvl+0xe8/0x150 [ 803.363984][T16693] should_fail_ex+0x412/0x560 [ 803.364014][T16693] _copy_from_user+0x2d/0xb0 [ 803.364045][T16693] kvm_vcpu_ioctl+0x493/0xfd0 [ 803.364077][T16693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 803.364099][T16693] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 803.364144][T16693] ? __fget_files+0x2a/0x420 [ 803.364170][T16693] ? __fget_files+0x2a/0x420 [ 803.364191][T16693] ? __fget_files+0x3a0/0x420 [ 803.364211][T16693] ? __fget_files+0x2a/0x420 [ 803.364235][T16693] ? bpf_lsm_file_ioctl+0x9/0x20 [ 803.364260][T16693] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 803.364284][T16693] __se_sys_ioctl+0xfc/0x170 [ 803.364311][T16693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.364332][T16693] do_syscall_64+0x15f/0xf80 [ 803.364354][T16693] ? trace_irq_disable+0x3b/0x140 [ 803.364381][T16693] ? clear_bhb_loop+0x40/0x90 [ 803.364411][T16693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.364430][T16693] RIP: 0033:0x7fc48659cdd9 [ 803.364449][T16693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.364465][T16693] RSP: 002b:00007fc4874ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.364486][T16693] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659cdd9 [ 803.364500][T16693] RDX: 00002000000005c0 RSI: 000000004004ae99 RDI: 0000000000000005 [ 803.364513][T16693] RBP: 00007fc4874ad090 R08: 0000000000000000 R09: 0000000000000000 [ 803.364524][T16693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.364536][T16693] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007fc48693fa48 [ 803.364565][T16693] [ 803.597177][T16697] netlink: 'syz.4.3244': attribute type 3 has an invalid length. [ 803.725210][ T5715] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 803.878865][ T5715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 803.889482][ T5715] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 803.910805][ T5715] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.959708][ T5715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 803.995010][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 804.021882][ T5715] usb 6-1: Product: syz [ 804.042030][ T5715] usb 6-1: Manufacturer: syz [ 804.073937][ T5715] usb 6-1: SerialNumber: syz [ 804.517412][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 804.698284][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 804.766441][ T24] usb 5-1: config 0 has no interfaces? [ 804.806927][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 804.834289][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 804.844168][ T24] usb 5-1: Manufacturer: syz [ 804.870924][ T24] usb 5-1: config 0 descriptor?? [ 806.205711][T16710] snd_dummy snd_dummy.0: control 0:0:14:syz0:-5 is already present [ 806.300811][T16710] kvm: apic: phys broadcast and lowest prio [ 808.527126][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.533611][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.894943][T16706] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3250'. [ 809.036885][T16716] FAULT_INJECTION: forcing a failure. [ 809.036885][T16716] name failslab, interval 1, probability 0, space 0, times 0 [ 809.051114][T16716] CPU: 0 UID: 0 PID: 16716 Comm: syz.1.3252 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.051142][T16716] Tainted: [L]=SOFTLOCKUP [ 809.051149][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.051163][T16716] Call Trace: [ 809.051171][T16716] [ 809.051179][T16716] dump_stack_lvl+0xe8/0x150 [ 809.051206][T16716] should_fail_ex+0x412/0x560 [ 809.051236][T16716] should_failslab+0xa8/0x100 [ 809.051260][T16716] ? skb_clone+0x212/0x3a0 [ 809.051284][T16716] kmem_cache_alloc_noprof+0x87/0x650 [ 809.051307][T16716] ? __netlink_lookup+0xc6/0x8b0 [ 809.051335][T16716] skb_clone+0x212/0x3a0 [ 809.051364][T16716] __netlink_deliver_tap+0x404/0x850 [ 809.051399][T16716] ? netlink_deliver_tap+0x2e/0x1b0 [ 809.051425][T16716] netlink_deliver_tap+0x19c/0x1b0 [ 809.051448][T16716] netlink_unicast+0x730/0x8e0 [ 809.051480][T16716] netlink_sendmsg+0x813/0xb40 [ 809.051513][T16716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.051540][T16716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.051566][T16716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.051594][T16716] ____sys_sendmsg+0x972/0x9f0 [ 809.051619][T16716] ? __might_fault+0xaf/0x130 [ 809.051648][T16716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.051682][T16716] ? import_iovec+0x73/0xa0 [ 809.051711][T16716] ___sys_sendmsg+0x2a5/0x360 [ 809.051734][T16716] ? __lock_acquire+0x6b5/0x2cf0 [ 809.051759][T16716] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.051818][T16716] ? __fget_files+0x2a/0x420 [ 809.051840][T16716] ? __fget_files+0x3a0/0x420 [ 809.051872][T16716] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.051907][T16716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.051942][T16716] ? __pfx_ksys_write+0x10/0x10 [ 809.051975][T16716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.051996][T16716] do_syscall_64+0x15f/0xf80 [ 809.052019][T16716] ? trace_irq_disable+0x3b/0x140 [ 809.052045][T16716] ? clear_bhb_loop+0x40/0x90 [ 809.052068][T16716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.052087][T16716] RIP: 0033:0x7fac1ed9cdd9 [ 809.052106][T16716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.052122][T16716] RSP: 002b:00007fac1cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.052140][T16716] RAX: ffffffffffffffda RBX: 00007fac1f015fa0 RCX: 00007fac1ed9cdd9 [ 809.052153][T16716] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 809.052165][T16716] RBP: 00007fac1cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 809.052176][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.052186][T16716] R13: 00007fac1f016038 R14: 00007fac1f015fa0 R15: 00007fac1f13fa48 [ 809.052218][T16716] [ 809.367482][ T5715] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 108 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 809.600477][ T5687] usb 6-1: USB disconnect, device number 108 [ 809.615786][ T5687] usblp0: removed [ 810.066167][ T24] usb 5-1: USB disconnect, device number 47 [ 810.175242][ T5687] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 810.228363][T16740] fuse: Bad value for 'fd' [ 810.247803][T16736] netlink: 'syz.2.3258': attribute type 27 has an invalid length. [ 810.268673][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 810.375305][ T5687] usb 6-1: Using ep0 maxpacket: 16 [ 810.413026][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.454840][ T5687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.524830][ T5687] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 810.678584][ T5687] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 810.777107][ T5687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.831853][ T5687] usb 6-1: config 0 descriptor?? [ 811.424871][ T5687] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001A/input/input84 [ 811.467805][ T5687] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 811.642605][ T5357] usb 6-1: USB disconnect, device number 109 [ 811.875711][ T5687] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 811.915673][T16763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.062322][ T5687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 812.103351][T16768] netlink: 'syz.1.3269': attribute type 46 has an invalid length. [ 812.113464][ T5687] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 812.144397][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 812.212509][ T5687] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 812.244962][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 812.281760][ T5687] usb 3-1: Product: syz [ 812.297314][ T5687] usb 3-1: Manufacturer: syz [ 812.308769][ T5687] usb 3-1: SerialNumber: syz [ 813.539623][T16788] SET target dimension over the limit! [ 813.757308][ T24] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 813.938337][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 813.970514][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.984945][ T24] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 814.014971][ T24] usb 7-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 814.055079][ T24] usb 7-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 814.107492][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 814.122483][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.142864][ T24] usb 7-1: Product: syz [ 814.152583][ T24] usb 7-1: Manufacturer: syz [ 814.173831][ T24] usb 7-1: SerialNumber: syz [ 814.468993][ T24] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 814.501265][ T24] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 814.703729][ T24] usb 7-1: USB disconnect, device number 106 [ 814.745465][ T29] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 814.817790][ T5687] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 814.875187][ T5687] usb 3-1: USB disconnect, device number 22 [ 814.899690][ T5687] usblp0: removed [ 814.945224][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 814.966814][ T29] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 814.977387][T14060] udevd[14060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 814.997293][ T29] usb 5-1: config 0 has no interface number 0 [ 815.010499][ T29] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 815.027631][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.054753][ T29] usb 5-1: Product: syz [ 815.067966][ T29] usb 5-1: Manufacturer: syz [ 815.079013][ T29] usb 5-1: SerialNumber: syz [ 815.089692][ T29] usb 5-1: config 0 descriptor?? [ 815.101242][ T29] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 815.185250][ T5680] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 815.305334][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 815.343969][ T29] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 815.360668][ T5687] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 815.388160][ T5680] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 815.411117][ T5680] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 815.439788][ T5680] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 815.466876][ T5680] usb 6-1: config 220 has no interface number 2 [ 815.510020][ T5680] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 815.543232][ T5687] usb 3-1: device descriptor read/64, error -71 [ 815.578536][ T5680] usb 6-1: config 220 interface 0 has no altsetting 0 [ 815.607561][ T5680] usb 6-1: config 220 interface 76 has no altsetting 0 [ 815.622977][ T5680] usb 6-1: config 220 interface 1 has no altsetting 0 [ 815.641770][ T5680] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 815.660573][ T5680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.678131][ T5680] usb 6-1: Product: syz [ 815.690490][ T5680] usb 6-1: Manufacturer: syz [ 815.704780][ T5680] usb 6-1: SerialNumber: syz [ 815.816430][ T5687] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 815.956121][ T5687] usb 3-1: device descriptor read/64, error -71 [ 816.089465][ T5687] usb usb3-port1: attempt power cycle [ 816.211966][ T5680] usb 6-1: selecting invalid altsetting 0 [ 816.218998][ T5680] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 816.227019][ T5680] uvcvideo 6-1:220.0: No valid video chain found. [ 816.241483][ T5680] usb 6-1: selecting invalid altsetting 0 [ 816.248046][ T5680] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 816.262276][ T5680] usb 6-1: USB disconnect, device number 110 [ 816.475869][ T5687] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 816.495965][ T5687] usb 3-1: device descriptor read/8, error -71 [ 816.745268][ T5687] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 816.774815][T16828] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3288'. [ 816.787509][ T5687] usb 3-1: device descriptor read/8, error -71 [ 816.906473][ T5687] usb usb3-port1: unable to enumerate USB device [ 817.116674][ T29] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 817.276987][ T29] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 817.299476][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.335769][ T29] usb 6-1: config 0 has no interface number 0 [ 817.358653][ T29] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 817.381024][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.407251][ T29] usb 6-1: Product: syz [ 817.417430][ T29] usb 6-1: Manufacturer: syz [ 817.433880][ T29] usb 6-1: SerialNumber: syz [ 817.450942][ T29] usb 6-1: config 0 descriptor?? [ 817.469036][ T5357] usb 5-1: USB disconnect, device number 48 [ 817.469528][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 817.492901][ T29] yurex 6-1:0.50: Could not find endpoints [ 817.533416][ T5357] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 817.574327][ T5357] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 817.592015][ T5357] quatech2 5-1:0.51: device disconnected [ 817.645487][ T5630] usb 7-1: new full-speed USB device number 107 using dummy_hcd [ 817.808897][ T5630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 817.846917][ T5630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.872472][ T5630] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 817.899049][ T5630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.957423][ T5630] usb 7-1: config 0 descriptor?? [ 817.980535][T16839] snd_dummy snd_dummy.0: control 0:0:14:syz0:-5 is already present [ 818.023766][ T5680] usb 6-1: USB disconnect, device number 111 [ 818.074792][T16840] kvm: apic: phys broadcast and lowest prio [ 818.356443][T16851] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 818.368069][T16851] PKCS7: Only support pkcs7_signedData type [ 818.412055][ T5630] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 818.449497][T16853] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3297'. [ 818.611479][ T5630] isku 0003:1E7D:319C.001B: couldn't init struct isku_device [ 818.623224][ T5630] isku 0003:1E7D:319C.001B: couldn't install keyboard [ 818.632922][ T5630] isku 0003:1E7D:319C.001B: probe with driver isku failed with error -71 [ 818.654044][ T5630] usb 7-1: USB disconnect, device number 107 [ 818.751106][T16859] fido_id[16859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 819.447943][ T5630] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 819.638986][ T5680] IPVS: starting estimator thread 0... [ 819.708391][ T5630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 819.735239][T16876] IPVS: using max 54 ests per chain, 129600 per kthread [ 819.766772][ T5630] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.805177][ T5630] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 819.846788][ T5630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.913278][ T5630] usb 7-1: config 0 descriptor?? [ 820.375720][ T5630] hid (null): nested delimiters [ 820.402623][ T5630] hid (null): report_id 24797 is invalid [ 820.443214][ T5630] kye 0003:0458:5016.001C: control desc unexpectedly large [ 820.507696][ T5630] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.001C/input/input85 [ 820.653510][ T5630] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.001C/input/input86 [ 820.840692][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 820.854069][ T5630] kye 0003:0458:5016.001C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 820.970890][ T5630] usb 7-1: USB disconnect, device number 108 [ 821.034143][T16884] fido_id[16884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 821.096349][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 821.119178][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.134583][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 821.147296][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.163486][ T10] usb 3-1: config 0 descriptor?? [ 821.491703][T16891] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3308'. [ 821.525293][T13058] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 821.592294][ T10] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 821.645244][ T5680] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 821.707184][T13058] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.739334][T13058] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.761315][T13058] usb 5-1: config 1 has no interface number 0 [ 821.768428][T13058] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.779457][T13058] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 821.788703][T13058] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 821.795695][ T5680] usb 7-1: Using ep0 maxpacket: 8 [ 821.809284][ T5680] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 821.819083][ T5680] usb 7-1: config 179 has no interface number 0 [ 821.821613][T13058] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 821.826215][ T5680] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 821.847128][T13058] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.854463][ T5680] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 821.883006][ T5680] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 821.884169][T13058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.894907][ T5680] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 821.902563][T13058] usb 5-1: Product: syz [ 821.902593][T13058] usb 5-1: Manufacturer: syz [ 821.902631][T13058] usb 5-1: SerialNumber: syz [ 821.914982][ T5680] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 821.944999][ T5680] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 821.954627][ T5680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.975029][T16889] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 822.164358][ T5357] usb 3-1: USB disconnect, device number 27 [ 822.241938][ T5680] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input87 [ 822.460948][ T5680] usb 7-1: USB disconnect, device number 109 [ 822.461003][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 822.475368][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 822.768184][T13058] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 822.785189][T13058] cdc_ncm 5-1:1.1: bind() failure [ 822.819138][T13058] usb 5-1: USB disconnect, device number 49 [ 823.075387][ T5687] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 823.105602][T16918] binder: 16917:16918 ioctl c0306201 0 returned -14 [ 823.165588][T16919] binder: 16917:16919 ioctl c0306201 0 returned -14 [ 823.251665][ T5687] usb 3-1: not running at top speed; connect to a high speed hub [ 823.261648][ T5687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 2039, setting to 64 [ 823.273702][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.285940][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 823.298315][ T5687] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 823.313431][ T5687] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 823.334158][ T5687] usb 3-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 823.344318][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.353444][ T5687] usb 3-1: Manufacturer: 冞佸蔄쟒漢첡ꌧጺꦘ䋦뾫粱芹䈓眴䰾ృ쑩櫕忡뙡粧㳔엵禑㿏䐨䥍㏆뗶应嘌ẁ㳱汋쾻⠁軨锺他耨ᶑ僇ꥯ뵂ĺꝍ诓玔᝜膩፾ꪮ筘䄟湯삂캧ᶆḩ漋뻇ᨉ厔೴鏅灋躜셤貕逼럿獓迍뛩矎긂碵Εﲗᖪ⹸춆順婨靍遺㬒㪳ȋᣨ䗏ज़ [ 823.396561][ T5687] usb 3-1: SerialNumber: ࠡ [ 823.469581][ T24] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 823.633034][T16926] netlink: 'syz.5.3319': attribute type 4 has an invalid length. [ 823.646646][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 823.695733][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 823.727564][ T24] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 823.809246][T16932] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3320'. [ 823.857591][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.886526][T16924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 823.899536][T16934] fuse: Bad value for 'fd' [ 823.908605][ T24] usb 7-1: Product: syz [ 823.924567][ T24] usb 7-1: Manufacturer: syz [ 823.944316][ T24] usb 7-1: SerialNumber: syz [ 823.969244][ T24] usb 7-1: config 0 descriptor?? [ 824.118463][ T24] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 824.157788][T16942] fuse: Bad value for 'fd' [ 824.158282][ T5687] usb 3-1: USB disconnect, device number 28 [ 824.257952][T14060] udevd[14060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.104694][T16963] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3333'. [ 825.207457][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 825.207496][ T30] audit: type=1326 audit(1777900475.382:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.242250][ T30] audit: type=1326 audit(1777900475.382:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.276742][ T30] audit: type=1326 audit(1777900475.412:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.308686][ T30] audit: type=1326 audit(1777900475.412:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.334214][ T30] audit: type=1326 audit(1777900475.412:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.399766][ T30] audit: type=1326 audit(1777900475.412:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.435271][ T5357] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 825.453855][ T30] audit: type=1326 audit(1777900475.412:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.479467][ T30] audit: type=1326 audit(1777900475.412:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.513483][ T30] audit: type=1326 audit(1777900475.412:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 825.539406][ T30] audit: type=1326 audit(1777900475.412:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.5.3334" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 826.056703][ T5630] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 826.159769][ T5687] usb 7-1: USB disconnect, device number 110 [ 826.225419][ T5630] usb 3-1: Using ep0 maxpacket: 32 [ 826.228017][ T5630] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 826.243095][ T5630] usb 3-1: config 0 has no interface number 0 [ 826.252729][ T5630] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 826.252782][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.252803][ T5630] usb 3-1: Product: syz [ 826.252841][ T5630] usb 3-1: Manufacturer: syz [ 826.252857][ T5630] usb 3-1: SerialNumber: syz [ 826.259738][ T5630] usb 3-1: config 0 descriptor?? [ 826.274133][ T5630] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 826.274165][ T5630] usb 3-1: selecting invalid altsetting 1 [ 826.274182][ T5630] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 826.278899][ T5630] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 826.279513][ T5630] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 826.279564][ T5630] usb 3-1: media controller created [ 826.312440][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 826.484069][ T5630] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 826.484103][ T5630] zl10353_read_register: readreg error (reg=127, ret==-71) [ 826.484392][ T5630] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 826.536785][ T5630] usb 3-1: USB disconnect, device number 29 [ 826.793547][T16994] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3344'. [ 826.945537][T16999] syzkaller0: entered promiscuous mode [ 826.973869][T16999] syzkaller0: entered allmulticast mode [ 827.015232][ T5687] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 827.185172][ T5687] usb 7-1: Using ep0 maxpacket: 8 [ 827.200313][ T5687] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 827.222820][ T5687] usb 7-1: config 179 has no interface number 0 [ 827.266620][ T5687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 827.281627][ T5687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 827.294148][ T5687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 827.306886][ T5687] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 827.319656][ T5687] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 827.334208][ T5687] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 827.344739][ T5687] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.381439][T16995] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 827.635754][ T5357] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 827.647517][ T5687] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input88 [ 827.824711][T17019] FAULT_INJECTION: forcing a failure. [ 827.824711][T17019] name failslab, interval 1, probability 0, space 0, times 0 [ 827.850293][ T5357] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 827.859055][ T5357] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 827.879088][T17019] CPU: 1 UID: 0 PID: 17019 Comm: syz.2.3352 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.879119][T17019] Tainted: [L]=SOFTLOCKUP [ 827.879126][T17019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.879141][T17019] Call Trace: [ 827.879149][T17019] [ 827.879156][T17019] dump_stack_lvl+0xe8/0x150 [ 827.879184][T17019] should_fail_ex+0x412/0x560 [ 827.879213][T17019] should_failslab+0xa8/0x100 [ 827.879244][T17019] __kmalloc_noprof+0xe8/0x760 [ 827.879269][T17019] ? __io_issue_sqe+0x1f7/0x4b0 [ 827.879293][T17019] ? io_uring_alloc_async_data+0x78/0x120 [ 827.879318][T17019] io_uring_alloc_async_data+0x78/0x120 [ 827.879347][T17019] __io_timeout_prep+0x359/0x790 [ 827.879380][T17019] io_submit_sqes+0xb8d/0x2240 [ 827.879432][T17019] __se_sys_io_uring_enter+0x341/0x1c40 [ 827.879459][T17019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 827.879489][T17019] ? __fget_files+0x3a0/0x420 [ 827.879515][T17019] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 827.879542][T17019] ? fput+0xa0/0xd0 [ 827.879564][T17019] ? ksys_write+0x242/0x270 [ 827.879593][T17019] ? __pfx_ksys_write+0x10/0x10 [ 827.879624][T17019] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 827.879650][T17019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.879671][T17019] do_syscall_64+0x15f/0xf80 [ 827.879694][T17019] ? trace_irq_disable+0x3b/0x140 [ 827.879720][T17019] ? clear_bhb_loop+0x40/0x90 [ 827.879744][T17019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.879763][T17019] RIP: 0033:0x7fc48659cdd9 [ 827.879781][T17019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.879798][T17019] RSP: 002b:00007fc4874ad028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.879819][T17019] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659cdd9 [ 827.879833][T17019] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 827.879846][T17019] RBP: 00007fc4874ad090 R08: 0000000000000000 R09: 0000000000000000 [ 827.879858][T17019] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 827.879870][T17019] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007fc48693fa48 [ 827.879900][T17019] [ 827.896437][ T5357] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 828.140758][ T5357] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 828.151831][ T5357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 828.161820][ T5357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 828.174391][T17027] blktrace: Concurrent blktraces are not allowed on nullb0 [ 828.191273][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 828.199649][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 828.217554][ T29] usb 7-1: USB disconnect, device number 111 [ 828.222724][ T5357] usb 6-1: language id specifier not provided by device, defaulting to English [ 828.284490][ T5357] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 828.295533][ T5357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.304040][ T5357] usb 6-1: Manufacturer: 躔煟祚肂濬즰 [ 828.313383][ T5357] usb 6-1: config 0 descriptor?? [ 828.320774][T17011] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 828.334658][ T5357] hub 6-1:0.0: bad descriptor, ignoring hub [ 828.340750][ T5357] hub 6-1:0.0: probe with driver hub failed with error -5 [ 828.350601][ T5357] input: 躔煟祚肂濬즰 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 828.505281][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 828.505281][ T5687] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 828.557716][ T29] usb 6-1: USB disconnect, device number 112 [ 828.655205][ T5687] usb 3-1: Using ep0 maxpacket: 8 [ 828.661781][ T5687] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 828.670401][ T5687] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.681316][ T5687] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.687925][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 828.691484][ T5687] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.711800][ T5687] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.725917][ T10] usb 5-1: can't read configurations, error -22 [ 828.726032][ T5687] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 828.758941][ T5687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.855859][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 829.004040][ T5687] usb 3-1: GET_CAPABILITIES returned a6 [ 829.009871][ T5687] usbtmc 3-1:16.0: can't read capabilities [ 829.018128][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 829.026799][ T10] usb 5-1: can't read configurations, error -22 [ 829.033842][ T10] usb usb5-port1: attempt power cycle [ 829.385387][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 829.428251][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 829.441779][ T10] usb 5-1: can't read configurations, error -22 [ 829.569523][T17041] program syz.2.3354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.579135][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 829.610133][ T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 829.618538][ T10] usb 5-1: can't read configurations, error -22 [ 829.625534][ T10] usb usb5-port1: unable to enumerate USB device [ 830.535250][ T10] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 830.665252][ T10] usb 7-1: device descriptor read/64, error -71 [ 830.920769][ T10] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 831.065242][ T10] usb 7-1: device descriptor read/64, error -71 [ 831.175905][ T10] usb usb7-port1: attempt power cycle [ 831.274352][ T5715] usb 3-1: USB disconnect, device number 30 [ 831.515632][ T10] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 831.559690][ T10] usb 7-1: device descriptor read/8, error -71 [ 831.806918][ T10] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 831.847987][ T10] usb 7-1: device descriptor read/8, error -71 [ 831.966121][ T10] usb usb7-port1: unable to enumerate USB device [ 832.659043][T17119] ip_tunnel: non-ECT from 0.0.0.72 with TOS=0x3 [ 832.942110][T17134] pimreg: tun_chr_ioctl cmd 1074025688 [ 832.952706][T17134] pimreg: tun_chr_ioctl cmd 1074025678 [ 832.960182][T17134] pimreg: group set to 0 [ 833.058051][ T10] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 833.096302][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3403'. [ 833.105928][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 833.228620][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 833.239252][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 833.252725][ T10] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 833.264391][ T10] usb 6-1: config 1 has no interface number 0 [ 833.270889][ T10] usb 6-1: config 1 interface 138 has no altsetting 0 [ 833.299947][ T10] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 833.310230][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.320364][ T10] usb 6-1: Product: syz [ 833.324591][ T10] usb 6-1: Manufacturer: syz [ 833.329323][ T10] usb 6-1: SerialNumber: syz [ 833.533182][T17159] tc_dump_action: action bad kind [ 833.568317][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.631031][T17164] rootmode=: renamed from lo [ 833.702401][ T10] usb 6-1: USB disconnect, device number 113 [ 833.802844][T14058] udevd[14058]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.986319][ T5687] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 834.160780][ T5687] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.196945][ T5687] usb 3-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 834.230065][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.258373][ T5687] usb 3-1: Product: syz [ 834.269089][ T5687] usb 3-1: Manufacturer: syz [ 834.280803][ T5687] usb 3-1: SerialNumber: syz [ 834.306380][ T5687] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 834.522413][ T5687] usb 3-1: USB disconnect, device number 31 [ 834.703093][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3439'. [ 835.686074][ T5704] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 835.873050][ T5704] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 835.901125][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.913677][ T5704] usb 5-1: config 0 has no interface number 0 [ 835.920276][ T5704] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 835.935179][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.977007][ T5704] usb 5-1: config 0 descriptor?? [ 836.005010][ T5704] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 836.024844][ T5704] usb 5-1: MIDIStreaming interface descriptor not found [ 836.240858][ T10] usb 5-1: USB disconnect, device number 55 [ 836.556649][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 837.195306][ T10] usb 7-1: new full-speed USB device number 116 using dummy_hcd [ 837.244264][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3500'. [ 837.262952][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 837.383062][ T10] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 837.421924][ T10] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 837.438513][ T10] usb 7-1: config 220 interface 0 has no altsetting 0 [ 837.459087][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 837.482013][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.492496][ T10] usb 7-1: Product: syz [ 837.497118][ T10] usb 7-1: Manufacturer: syz [ 837.502108][ T10] usb 7-1: SerialNumber: syz [ 837.597557][T17370] netlink: 'syz.2.3507': attribute type 64 has an invalid length. [ 837.618952][T17370] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 837.748860][ T10] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 837.768670][ T10] uvcvideo 7-1:220.0: No valid video chain found. [ 837.790804][ T10] usb 7-1: USB disconnect, device number 116 [ 837.875017][T17382] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 838.113414][T17391] veth2: entered promiscuous mode [ 838.140365][T17391] veth2: entered allmulticast mode [ 838.228894][T17398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3521'. [ 838.495658][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 838.619779][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 838.619798][ T30] audit: type=1326 audit(1777900488.782:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.677565][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.688532][ T30] audit: type=1326 audit(1777900488.782:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.704694][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 838.721502][ T30] audit: type=1326 audit(1777900488.792:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.761060][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 838.770930][ T30] audit: type=1326 audit(1777900488.792:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.780705][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 838.820008][ T30] audit: type=1326 audit(1777900488.792:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.825185][ T10] usb 3-1: SerialNumber: syz [ 838.893025][ T30] audit: type=1326 audit(1777900488.792:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17419 comm="syz.6.3531" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 838.990465][T17434] x_tables: duplicate underflow at hook 1 [ 839.119160][ T10] usb 3-1: 0:2 : does not exist [ 839.186698][T17441] xt_connbytes: Forcing CT accounting to be enabled [ 839.233489][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3541'. [ 839.262750][ T10] usb 3-1: USB disconnect, device number 32 [ 839.380827][T17447] netlink: 'syz.6.3542': attribute type 5 has an invalid length. [ 840.095584][ T5680] usb 7-1: new full-speed USB device number 117 using dummy_hcd [ 840.259715][ T5680] usb 7-1: config 0 has an invalid interface number: 3 but max is 2 [ 840.279625][T17477] IPv6: sit1: Disabled Multicast RS [ 840.297143][ T5680] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.317530][T17477] sit1: entered allmulticast mode [ 840.335272][ T5680] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 840.375227][ T5680] usb 7-1: config 0 has no interface number 1 [ 840.395903][ T5680] usb 7-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 840.420892][ T5680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.468626][ T5680] usb 7-1: config 0 descriptor?? [ 840.489787][ T5680] usb 7-1: unknown number of interfaces: 2 [ 840.706031][ T5680] usb 7-1: USB disconnect, device number 117 [ 842.108968][ T30] audit: type=1326 audit(1777900492.282:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm=22 exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 842.186738][ T30] audit: type=1326 audit(1777900492.302:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm=22 exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 842.259589][ T30] audit: type=1326 audit(1777900492.312:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm="syz.2.3580" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 842.314018][T17540] x_tables: ip6_tables: SECMARK.0 target: invalid size 264 (kernel) != (user) 0 [ 842.333381][ T30] audit: type=1326 audit(1777900492.312:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17534 comm=22 exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc48659e647 code=0x7ffc0000 [ 842.744426][T17560] netlink: 'syz.2.3593': attribute type 10 has an invalid length. [ 843.225026][T17586] fuse: Bad value for 'fd' [ 843.253187][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 843.285638][ T5704] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 843.456969][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.491619][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.516714][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 843.535907][ T5704] usb 3-1: SerialNumber: syz [ 843.563961][ T5704] usb 3-1: No union descriptors [ 843.707324][T17601] syzkaller0: entered promiscuous mode [ 843.714087][T17601] syzkaller0: entered allmulticast mode [ 843.788450][ T5704] usb 3-1: USB disconnect, device number 33 [ 844.630346][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 844.630364][ T30] audit: type=1326 audit(1777900494.802:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17633 comm="syz.6.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 844.721200][ T30] audit: type=1326 audit(1777900494.832:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17633 comm="syz.6.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 844.771163][ T30] audit: type=1326 audit(1777900494.832:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17633 comm="syz.6.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 844.802653][ T30] audit: type=1326 audit(1777900494.832:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17633 comm="syz.6.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 844.827514][ T30] audit: type=1326 audit(1777900494.832:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17633 comm="syz.6.3625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 844.855270][ T5704] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 845.016954][ T5704] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 845.030625][ T5704] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.042344][ T5704] usb 6-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.055731][ T5704] usb 6-1: config 0 interface 0 has no altsetting 0 [ 845.062562][ T5704] usb 6-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 845.074766][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.088431][ T5704] usb 6-1: config 0 descriptor?? [ 845.108981][ T5704] usbhid 6-1:0.0: can't add hid device: -22 [ 845.133154][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 845.311901][ T5704] usb 6-1: USB disconnect, device number 114 [ 845.506541][ T30] audit: type=1326 audit(1777900495.662:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.2.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 845.552622][ T30] audit: type=1326 audit(1777900495.662:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.2.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 845.579444][ T30] audit: type=1326 audit(1777900495.662:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.2.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 845.606706][ T30] audit: type=1326 audit(1777900495.662:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.2.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 845.632396][ T30] audit: type=1326 audit(1777900495.662:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17646 comm="syz.2.3632" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 849.663644][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 849.663661][ T30] audit: type=1326 audit(1777900499.832:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 849.765235][ T30] audit: type=1326 audit(1777900499.832:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 849.846491][ T30] audit: type=1326 audit(1777900499.832:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 849.913896][ T30] audit: type=1326 audit(1777900499.832:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 849.988323][ T30] audit: type=1326 audit(1777900499.832:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 850.055285][ T30] audit: type=1326 audit(1777900499.832:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 850.120727][ T30] audit: type=1326 audit(1777900499.832:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17688 comm="syz.6.3651" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 851.507444][ T30] audit: type=1326 audit(1777900501.672:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.1.3684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1ed9cdd9 code=0x7ffc0000 [ 851.535550][ T5687] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 851.552585][T17761] xt_hashlimit: size too large, truncated to 1048576 [ 851.565923][ T30] audit: type=1326 audit(1777900501.672:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.1.3684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac1ed9cdd9 code=0x7ffc0000 [ 851.663108][ T30] audit: type=1326 audit(1777900501.682:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17759 comm="syz.1.3684" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fac1ed9cdd9 code=0x7ffc0000 [ 851.716475][ T5687] usb 7-1: Using ep0 maxpacket: 16 [ 851.724038][ T5687] usb 7-1: unable to get BOS descriptor or descriptor too short [ 851.734824][ T5687] usb 7-1: config 13 has an invalid interface number: 50 but max is 0 [ 851.750811][ T5687] usb 7-1: config 13 has no interface number 0 [ 851.757799][ T5687] usb 7-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 851.768855][ T5687] usb 7-1: config 13 interface 50 has no altsetting 0 [ 851.786866][ T5687] usb 7-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 851.806520][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.844592][ T5687] usb 7-1: Product: syz [ 851.860935][ T5687] usb 7-1: Manufacturer: syz [ 851.873430][T17773] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 851.891109][ T5687] usb 7-1: SerialNumber: syz [ 851.900617][T17750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 852.132187][ T5687] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 852.159973][ T5687] usb 7-1: MIDIStreaming interface descriptor not found [ 852.338879][ T5687] usb 7-1: USB disconnect, device number 118 [ 852.460795][T14058] udevd[14058]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 852.831045][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3707'. [ 853.388827][T17844] fuse: Bad value for 'fd' [ 853.539599][T17850] fuse: Bad value for 'fd' [ 853.912941][T17872] raw_sendmsg: syz.1.3737 forgot to set AF_INET. Fix it! [ 854.452160][T17897] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3745'. [ 854.887278][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3754'. [ 855.675992][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 855.676010][ T30] audit: type=1326 audit(1777900505.852:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 855.753808][ T30] audit: type=1326 audit(1777900505.882:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 855.823577][ T30] audit: type=1326 audit(1777900505.892:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 855.870736][ T30] audit: type=1326 audit(1777900505.892:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 855.977237][ T30] audit: type=1326 audit(1777900505.892:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 856.014915][ T30] audit: type=1326 audit(1777900505.892:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 856.110026][ T30] audit: type=1326 audit(1777900505.892:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 856.155519][ T30] audit: type=1326 audit(1777900505.892:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 856.235028][ T30] audit: type=1326 audit(1777900505.892:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 856.267986][ T30] audit: type=1326 audit(1777900505.892:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17949 comm="syz.6.3772" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 857.195788][ T5715] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 857.345390][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 857.354540][ T5715] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 857.378276][ T5715] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 857.415850][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0 [ 857.437174][ T5715] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb [ 857.459709][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.490066][ T5715] usb 3-1: config 0 descriptor?? [ 857.589250][T18038] io-wq is not configured for unbound workers [ 857.866605][T18050] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3816'. [ 857.951994][ T5630] usb 3-1: USB disconnect, device number 34 [ 858.031813][T18054] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 858.576177][ T5715] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 858.747487][ T5715] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 858.756384][ T5715] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 858.775691][ T5715] usb 5-1: config 220 has no interface number 2 [ 858.785264][ T5715] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 858.807183][ T5715] usb 5-1: config 220 interface 0 has no altsetting 0 [ 858.814102][ T5715] usb 5-1: config 220 interface 76 has no altsetting 0 [ 858.822118][ T5715] usb 5-1: config 220 interface 1 has no altsetting 0 [ 858.831320][ T5715] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 858.846904][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.855076][ T5715] usb 5-1: Product: syz [ 858.859546][ T5715] usb 5-1: Manufacturer: syz [ 858.864586][ T5715] usb 5-1: SerialNumber: syz [ 859.099787][ T5715] uvcvideo 5-1:220.1: Unknown video format 24000a80-2e00-407b-2d5e-2d0000000000 [ 859.111269][ T5715] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 859.134075][ T5715] uvcvideo 5-1:220.0: No valid video chain found. [ 859.140820][ T5715] usb 5-1: selecting invalid altsetting 0 [ 859.153991][ T5715] usb 5-1: selecting invalid altsetting 0 [ 859.159896][ T5715] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 859.174520][ T5715] usb 5-1: USB disconnect, device number 56 [ 859.805786][ T5715] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 859.970421][ T5715] usb 7-1: Using ep0 maxpacket: 32 [ 859.988156][ T5715] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 860.004522][ T5715] usb 7-1: config 0 has no interface number 0 [ 860.011052][ T5715] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.062577][ T5715] usb 7-1: config 0 interface 2 has no altsetting 0 [ 860.089677][ T5715] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 860.108270][ T5715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.119640][ T5715] usb 7-1: Product: syz [ 860.123961][ T5715] usb 7-1: Manufacturer: syz [ 860.129487][ T5715] usb 7-1: SerialNumber: syz [ 860.147409][ T5715] usb 7-1: config 0 descriptor?? [ 860.170362][ T5715] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 860.502279][ T5715] usb 7-1: USB disconnect, device number 119 [ 860.509605][T18154] fuse: Bad value for 'fd' [ 860.582690][T14058] udevd[14058]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.855466][ T5704] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 861.027333][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.048901][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.084598][ T5704] usb 6-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 861.094766][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3869'. [ 861.107900][ T5704] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.146594][ T5704] usb 6-1: config 0 descriptor?? [ 861.174090][ T5704] usbhid 6-1:0.0: can't add hid device: -22 [ 861.197966][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 861.382308][ T5704] usb 6-1: USB disconnect, device number 115 [ 861.455645][T18188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.821709][T18210] input: syz1 as /devices/virtual/input/input92 [ 862.375396][ T5715] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 862.560986][ T5715] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 862.605328][ T5704] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 862.620021][ T5715] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice=bb.9d [ 862.654785][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.775233][ T5704] usb 5-1: Using ep0 maxpacket: 16 [ 862.796342][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.832847][ T5704] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.859495][ T5704] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 862.894057][ T5704] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 862.919452][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.962373][ T5704] usb 5-1: config 0 descriptor?? [ 862.971074][ T5715] usb 3-1: USB disconnect, device number 35 [ 863.440110][ T5704] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001E/input/input93 [ 863.498306][ T5704] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 863.642490][ T5704] usb 5-1: USB disconnect, device number 57 [ 864.075336][T18263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3907'. [ 864.107032][T18263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3907'. [ 864.933805][T18303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3923'. [ 866.535223][ T10] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 866.585739][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 866.585756][ T30] audit: type=1326 audit(1777900516.762:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 866.639020][T18370] netlink: 'syz.2.3953': attribute type 10 has an invalid length. [ 866.655977][ T30] audit: type=1326 audit(1777900516.762:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 866.749231][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 866.770267][ T30] audit: type=1326 audit(1777900516.792:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 866.795811][ T10] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 866.803968][ T10] usb 5-1: config 95 has no interface number 0 [ 866.811320][ T30] audit: type=1326 audit(1777900516.792:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 866.839865][ T10] usb 5-1: config 95 interface 1 has no altsetting 0 [ 866.858870][ T10] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 866.871514][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.885241][ T30] audit: type=1326 audit(1777900516.792:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 866.918662][ T10] usb 5-1: Product: syz [ 866.923629][ T10] usb 5-1: Manufacturer: syz [ 866.932370][ T10] usb 5-1: SerialNumber: syz [ 866.948958][ T30] audit: type=1326 audit(1777900516.792:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 867.065809][ T30] audit: type=1326 audit(1777900516.792:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 867.113001][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3963'. [ 867.133297][ T30] audit: type=1326 audit(1777900516.792:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18367 comm="syz.5.3954" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4b659cdd9 code=0x7ffc0000 [ 867.216784][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'. [ 867.509770][ T10] usb 5-1: USB disconnect, device number 58 [ 867.724888][T14060] udevd[14060]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.860715][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.910963][T18418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.041846][T18418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 869.177051][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 869.187874][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 869.200331][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 869.210271][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 869.220238][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 869.960007][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.967000][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.525236][ T5680] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 870.719876][ T5680] usb 5-1: unable to get BOS descriptor or descriptor too short [ 870.773044][ T5680] usb 5-1: config 127 has an invalid interface number: 106 but max is 0 [ 870.813491][ T5680] usb 5-1: config 127 has no interface number 0 [ 870.837698][ T5680] usb 5-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 870.866301][ T5680] usb 5-1: config 127 interface 106 has no altsetting 0 [ 870.894401][ T5680] usb 5-1: string descriptor 0 read error: -22 [ 870.932918][ T5680] usb 5-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8 [ 870.978477][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.022027][ T5680] ftdi_sio 5-1:127.106: FTDI USB Serial Device converter detected [ 871.051856][ T5680] usb 5-1: Detected SIO [ 871.061748][ T5680] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 [ 871.082202][ T5680] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 871.264399][ T5680] usb 5-1: USB disconnect, device number 59 [ 871.298812][ T5680] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 871.309553][ T5680] ftdi_sio 5-1:127.106: device disconnected [ 871.316768][ T5625] Bluetooth: hci0: command tx timeout [ 871.374097][T18469] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.399141][T18469] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.415284][ T5630] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 871.417193][T18469] bridge_slave_0: entered allmulticast mode [ 871.458816][T18469] bridge_slave_0: entered promiscuous mode [ 871.473877][T18469] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.483121][T18469] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.494477][T18469] bridge_slave_1: entered allmulticast mode [ 871.511685][T18469] bridge_slave_1: entered promiscuous mode [ 871.609452][ T5630] usb 7-1: config 0 has no interfaces? [ 871.631480][T18469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.650556][ T5630] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 871.650687][T18469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.691682][ T5630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 871.728550][ T5630] usb 7-1: Product: syz [ 871.751674][ T5630] usb 7-1: Manufacturer: syz [ 871.763442][T18469] team0: Port device team_slave_0 added [ 871.774702][T18469] team0: Port device team_slave_1 added [ 871.776155][ T5630] usb 7-1: SerialNumber: syz [ 871.819554][ T5630] usb 7-1: config 0 descriptor?? [ 871.982498][T18469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.010046][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.082199][T18469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.135784][T18542] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4030'. [ 872.209964][T18469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.231164][T18469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.282418][T18469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.445695][ T5630] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 872.501348][T18469] hsr_slave_0: entered promiscuous mode [ 872.527910][T18469] hsr_slave_1: entered promiscuous mode [ 872.555593][T18469] debugfs: 'hsr0' already exists in 'hsr' [ 872.568292][T18469] Cannot create hsr debugfs directory [ 872.607006][ T5630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 872.642763][ T5630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 872.673895][ T5630] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 872.712849][ T5630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.713573][T18560] netlink: 272 bytes leftover after parsing attributes in process `syz.1.4038'. [ 872.764703][ T5630] usb 5-1: Product: syz [ 872.781400][ T5630] usb 5-1: Manufacturer: syz [ 872.793024][ T5630] usb 5-1: SerialNumber: syz [ 872.816819][ T5630] usb 5-1: config 0 descriptor?? [ 873.221335][T18469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.396564][ T5625] Bluetooth: hci0: command tx timeout [ 873.554963][T18469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.744570][T18469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.916242][T18469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.630281][T18469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 874.648558][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 874.674237][T18469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 874.726098][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 874.734400][T18469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 874.765931][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.787961][T18469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 874.804274][T18469] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.915416][ T5625] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 874.926370][ T5625] Bluetooth: hci4: Injecting HCI hardware error event [ 874.940031][ T5638] Bluetooth: hci4: hardware error 0x00 [ 875.121062][T18469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 875.188043][T18469] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.200134][ T10] usb 5-1: USB disconnect, device number 60 [ 875.249113][T11126] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.256369][T11126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.299344][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.306641][T11126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.475337][ T5625] Bluetooth: hci0: command tx timeout [ 875.490704][ T5704] usb 7-1: USB disconnect, device number 120 [ 875.571872][T18469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.708619][T18469] veth0_vlan: entered promiscuous mode [ 875.750380][T18469] veth1_vlan: entered promiscuous mode [ 875.872423][T18469] veth0_macvtap: entered promiscuous mode [ 875.907722][T18469] veth1_macvtap: entered promiscuous mode [ 875.978738][T18469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.016319][T18469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.055030][ T1006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.072279][ T1006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.101317][ T1006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.139028][ T1006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.469828][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.497130][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.592658][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.622957][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.996144][ T5638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 878.902461][ T30] audit: type=1326 audit(1777900529.072:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.003310][ T30] audit: type=1326 audit(1777900529.072:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.087314][ T30] audit: type=1326 audit(1777900529.112:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.131850][ T30] audit: type=1326 audit(1777900529.112:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.214392][ T30] audit: type=1326 audit(1777900529.112:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.274338][ T30] audit: type=1326 audit(1777900529.112:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.314791][ T30] audit: type=1326 audit(1777900529.112:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.389270][ T30] audit: type=1326 audit(1777900529.112:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18767 comm="syz.6.4127" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 879.515456][ T5704] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 879.679199][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.720603][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.761153][ T5704] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.801407][ T5704] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.824277][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.879158][ T5704] usb 3-1: config 0 descriptor?? [ 880.123081][T18804] input: syz0 as /devices/virtual/input/input94 [ 880.478549][ T5704] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 880.622249][ T5680] usb 3-1: USB disconnect, device number 36 [ 880.668458][T18821] fido_id[18821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 881.215345][ T5680] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 881.386271][ T5680] usb 7-1: Using ep0 maxpacket: 16 [ 881.412434][ T5680] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 881.454606][ T5680] usb 7-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 881.484364][ T5680] usb 7-1: New USB device found, idVendor=0ace, idProduct=20ff, bcdDevice= 1.01 [ 881.496345][ T5680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.513403][ T5680] usb 7-1: Product: syz [ 881.525874][ T5680] usb 7-1: Manufacturer: syz [ 881.532422][ T5680] usb 7-1: SerialNumber: syz [ 881.745643][ T5687] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 881.756878][T18837] fuse: Invalid uid '00000000000000000003' [ 881.772804][ T5680] usb 7-1: USB disconnect, device number 121 [ 881.907500][ T5687] usb 6-1: config 2 has an invalid interface number: 198 but max is 0 [ 881.917708][ T5687] usb 6-1: config 2 has no interface number 0 [ 881.938900][ T5687] usb 6-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=c8.51 [ 881.960325][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.979827][ T5687] usb 6-1: Product: syz [ 881.991959][ T5687] usb 6-1: Manufacturer: syz [ 882.003510][ T5687] usb 6-1: SerialNumber: syz [ 882.237119][ T10] usb 6-1: USB disconnect, device number 116 [ 882.713327][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4181'. [ 882.858733][T18913] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 882.938371][T18921] netlink: 'syz.4.4185': attribute type 11 has an invalid length. [ 883.864429][T18964] netlink: 'syz.6.4205': attribute type 4 has an invalid length. [ 884.366014][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.390417][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.404167][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.420999][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 884.431732][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 885.374874][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.402828][T18975] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.438650][T18975] bridge_slave_0: entered allmulticast mode [ 885.456125][T18975] bridge_slave_0: entered promiscuous mode [ 885.469202][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4222'. [ 885.483538][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.502828][T18975] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.520698][T18975] bridge_slave_1: entered allmulticast mode [ 885.534197][T18975] bridge_slave_1: entered promiscuous mode [ 885.618487][T18975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.653738][T18975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.738090][T18975] team0: Port device team_slave_0 added [ 885.766313][T18975] team0: Port device team_slave_1 added [ 885.824316][T18975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.840368][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.907217][T18975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.924283][T18975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.934293][T18975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.963065][T18975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.096459][T18975] hsr_slave_0: entered promiscuous mode [ 886.117704][T18975] hsr_slave_1: entered promiscuous mode [ 886.143096][T18975] debugfs: 'hsr0' already exists in 'hsr' [ 886.152828][T18975] Cannot create hsr debugfs directory [ 886.515306][ T5638] Bluetooth: hci3: command tx timeout [ 887.151068][ T30] audit: type=1326 audit(1777900537.322:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.4252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 887.225739][ T30] audit: type=1326 audit(1777900537.322:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.4252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 887.311356][ T30] audit: type=1326 audit(1777900537.352:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.4252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 887.364400][T18975] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 887.372480][ T30] audit: type=1326 audit(1777900537.352:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.4252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 887.414466][T18975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 887.434544][T18975] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 887.442771][ T30] audit: type=1326 audit(1777900537.352:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19070 comm="syz.2.4252" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48659cdd9 code=0x7ffc0000 [ 887.503714][T18975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.532426][T18975] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 887.598649][T18975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 887.624077][T18975] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 887.672869][T18975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 887.739350][ T30] audit: type=1326 audit(1777900537.912:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19095 comm="syz.2.4264" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc48659cdd9 code=0x0 [ 887.967879][T18975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.037928][T18975] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.063384][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.070658][T11125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.114197][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.121498][T11125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.383321][T18975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.569716][T18975] veth0_vlan: entered promiscuous mode [ 888.595298][ T5638] Bluetooth: hci3: command tx timeout [ 888.614088][T18975] veth1_vlan: entered promiscuous mode [ 888.646911][T19135] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4278'. [ 888.785600][T18975] veth0_macvtap: entered promiscuous mode [ 888.797167][T19141] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4281'. [ 888.850586][T18975] veth1_macvtap: entered promiscuous mode [ 888.914062][T18975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.978700][T18975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.032299][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.062930][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.180054][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.246475][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.630977][ T1015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.653803][ T1015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.729461][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 889.769527][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.814291][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.830168][ T5777] hid_parser_main: 419 callbacks suppressed [ 889.830191][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 889.901260][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 889.928122][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 889.960044][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 889.982843][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.009586][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.026973][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.049490][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.073356][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.089672][T19183] binder_alloc: 19181: binder_alloc_buf size 4096 failed, no address space [ 890.094698][ T5777] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0 [ 890.099939][T19183] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 890.172291][ T5777] hid-generic 0000:0000:0004.0020: hidraw0: HID v0.03 Device [syz1] on syz1 [ 890.188299][ T10] usb 6-1: new low-speed USB device number 117 using dummy_hcd [ 890.391337][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 890.430931][ T10] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 890.466855][T19191] fido_id[19191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 890.480653][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.528519][T19199] fuse: Bad value for 'fd' [ 890.537907][ T10] usb 6-1: config 0 descriptor?? [ 890.560101][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 890.675379][ T5638] Bluetooth: hci3: command tx timeout [ 890.890652][ T30] audit: type=1326 audit(1777900541.062:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.6.4315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 890.942897][ T30] audit: type=1326 audit(1777900541.092:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.6.4315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 890.995027][ T30] audit: type=1326 audit(1777900541.092:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.6.4315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 891.025009][ T30] audit: type=1326 audit(1777900541.092:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19220 comm="syz.6.4315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b9439cdd9 code=0x7ffc0000 [ 891.357120][ T5704] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 891.516907][ T5704] usb 7-1: config 0 has no interfaces? [ 891.532717][ T5704] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.548129][ T5704] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.579303][ T5704] usb 7-1: config 0 descriptor?? [ 892.369902][T19299] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4352'. [ 892.676735][ T13] wlan1: Trigger new scan to find an IBSS to join [ 892.712296][T19320] UHID_CREATE from different security context by process 549 (syz.2.4362), this is not allowed. [ 892.751877][T19322] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4363'. [ 892.761304][ T5638] Bluetooth: hci3: command tx timeout [ 892.952909][ T5357] usb 6-1: USB disconnect, device number 117 [ 893.182830][T19342] [ 893.185249][T19342] ===================================================== [ 893.192207][T19342] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 893.199700][T19342] syzkaller #0 Tainted: G L [ 893.205673][T19342] ----------------------------------------------------- [ 893.212607][T19342] syz.2.4373/19342 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 893.220325][T19342] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 893.229030][T19342] [ 893.229030][T19342] and this task is already holding: [ 893.236386][T19342] ffff888020299520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 893.245095][T19342] which would create a new lock dependency: [ 893.250976][T19342] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 893.258547][T19342] [ 893.258547][T19342] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 893.267980][T19342] (&dev->event_lock#2){..-.}-{3:3} [ 893.268012][T19342] [ 893.268012][T19342] ... which became SOFTIRQ-irq-safe at: [ 893.280871][T19342] lock_acquire+0x106/0x350 [ 893.285460][T19342] _raw_spin_lock_irqsave+0x40/0x60 [ 893.290736][T19342] input_event+0x71/0xc0 [ 893.295052][T19342] atp_complete_geyser_3_4+0x114e/0x1d90 [ 893.300775][T19342] __usb_hcd_giveback_urb+0x376/0x540 [ 893.306225][T19342] dummy_timer+0xbc0/0x4650 [ 893.310812][T19342] __hrtimer_run_queues+0x3c0/0xa20 [ 893.316198][T19342] hrtimer_run_softirq+0x17a/0x240 [ 893.321406][T19342] handle_softirqs+0x22a/0x840 [ 893.326260][T19342] __irq_exit_rcu+0xca/0x220 [ 893.330947][T19342] irq_exit_rcu+0x9/0x30 [ 893.335281][T19342] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 893.340999][T19342] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.347056][T19342] _raw_spin_unlock_irqrestore+0x47/0x80 [ 893.352777][T19342] dummy_urb_enqueue+0x58a/0x780 [ 893.357904][T19342] usb_hcd_submit_urb+0x328/0x1b70 [ 893.363097][T19342] atp_open+0x60/0x90 [ 893.367157][T19342] input_open_device+0x1f8/0x3b0 [ 893.372174][T19342] mousedev_open_device+0xcc/0x150 [ 893.377380][T19342] mousedev_open+0x2ef/0x4a0 [ 893.382068][T19342] chrdev_open+0x4cd/0x5e0 [ 893.386574][T19342] do_dentry_open+0x785/0x14e0 [ 893.391466][T19342] vfs_open+0x3b/0x340 [ 893.395611][T19342] path_openat+0x2e08/0x3860 [ 893.400285][T19342] do_file_open+0x23e/0x4a0 [ 893.404868][T19342] do_sys_openat2+0x113/0x200 [ 893.409627][T19342] __x64_sys_openat+0x138/0x170 [ 893.414560][T19342] do_syscall_64+0x15f/0xf80 [ 893.419244][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.425215][T19342] [ 893.425215][T19342] to a SOFTIRQ-irq-unsafe lock: [ 893.432215][T19342] (tasklist_lock){.+.+}-{3:3} [ 893.432240][T19342] [ 893.432240][T19342] ... which became SOFTIRQ-irq-unsafe at: [ 893.444850][T19342] ... [ 893.444859][T19342] lock_acquire+0x106/0x350 [ 893.452015][T19342] _raw_read_lock+0x36/0x50 [ 893.456598][T19342] __do_wait+0xde/0x740 [ 893.461010][T19342] do_wait+0x1e7/0x510 [ 893.465154][T19342] kernel_wait+0xd6/0x1c0 [ 893.469562][T19342] call_usermodehelper_exec_work+0xbe/0x230 [ 893.475536][T19342] process_scheduled_works+0xb5d/0x1860 [ 893.481168][T19342] worker_thread+0xa53/0xfc0 [ 893.485836][T19342] kthread+0x388/0x470 [ 893.489985][T19342] ret_from_fork+0x514/0xb70 [ 893.494659][T19342] ret_from_fork_asm+0x1a/0x30 [ 893.499498][T19342] [ 893.499498][T19342] other info that might help us debug this: [ 893.499498][T19342] [ 893.509718][T19342] Chain exists of: [ 893.509718][T19342] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 893.509718][T19342] [ 893.522757][T19342] Possible interrupt unsafe locking scenario: [ 893.522757][T19342] [ 893.531064][T19342] CPU0 CPU1 [ 893.536425][T19342] ---- ---- [ 893.541783][T19342] lock(tasklist_lock); [ 893.546015][T19342] local_irq_disable(); [ 893.552754][T19342] lock(&dev->event_lock#2); [ 893.559952][T19342] lock(&f_owner->lock); [ 893.566807][T19342] [ 893.570251][T19342] lock(&dev->event_lock#2); [ 893.575101][T19342] [ 893.575101][T19342] *** DEADLOCK *** [ 893.575101][T19342] [ 893.583271][T19342] 2 locks held by syz.2.4373/19342: [ 893.588449][T19342] #0: ffff8880330c5bd0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 893.596982][T19342] #1: ffff888020299520 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 893.606117][T19342] [ 893.606117][T19342] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 893.616505][T19342] -> (&dev->event_lock#2){..-.}-{3:3} { [ 893.622342][T19342] IN-SOFTIRQ-W at: [ 893.626589][T19342] lock_acquire+0x106/0x350 [ 893.633371][T19342] _raw_spin_lock_irqsave+0x40/0x60 [ 893.640762][T19342] input_event+0x71/0xc0 [ 893.647209][T19342] atp_complete_geyser_3_4+0x114e/0x1d90 [ 893.655036][T19342] __usb_hcd_giveback_urb+0x376/0x540 [ 893.662605][T19342] dummy_timer+0xbc0/0x4650 [ 893.669313][T19342] __hrtimer_run_queues+0x3c0/0xa20 [ 893.676693][T19342] hrtimer_run_softirq+0x17a/0x240 [ 893.684166][T19342] handle_softirqs+0x22a/0x840 [ 893.691095][T19342] __irq_exit_rcu+0xca/0x220 [ 893.697945][T19342] irq_exit_rcu+0x9/0x30 [ 893.704363][T19342] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 893.712180][T19342] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 893.720330][T19342] _raw_spin_unlock_irqrestore+0x47/0x80 [ 893.728148][T19342] dummy_urb_enqueue+0x58a/0x780 [ 893.735348][T19342] usb_hcd_submit_urb+0x328/0x1b70 [ 893.742624][T19342] atp_open+0x60/0x90 [ 893.748781][T19342] input_open_device+0x1f8/0x3b0 [ 893.755880][T19342] mousedev_open_device+0xcc/0x150 [ 893.763155][T19342] mousedev_open+0x2ef/0x4a0 [ 893.769907][T19342] chrdev_open+0x4cd/0x5e0 [ 893.776491][T19342] do_dentry_open+0x785/0x14e0 [ 893.783504][T19342] vfs_open+0x3b/0x340 [ 893.789804][T19342] path_openat+0x2e08/0x3860 [ 893.796589][T19342] do_file_open+0x23e/0x4a0 [ 893.803286][T19342] do_sys_openat2+0x113/0x200 [ 893.810168][T19342] __x64_sys_openat+0x138/0x170 [ 893.817181][T19342] do_syscall_64+0x15f/0xf80 [ 893.824032][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.832090][T19342] INITIAL USE at: [ 893.836248][T19342] lock_acquire+0x106/0x350 [ 893.842830][T19342] _raw_spin_lock_irqsave+0x40/0x60 [ 893.850109][T19342] input_inject_event+0xa4/0x330 [ 893.857121][T19342] kbd_led_trigger_activate+0xbc/0x100 [ 893.864743][T19342] led_trigger_set+0x535/0x960 [ 893.871681][T19342] led_trigger_set_default+0x260/0x2a0 [ 893.879237][T19342] led_classdev_register_ext+0x787/0x9c0 [ 893.886980][T19342] input_leds_connect+0x517/0x790 [ 893.894090][T19342] input_register_device+0xce0/0x1140 [ 893.901555][T19342] atkbd_connect+0x71e/0xa10 [ 893.908246][T19342] serio_driver_probe+0x82/0xb0 [ 893.915192][T19342] really_probe+0x267/0xaf0 [ 893.921871][T19342] __driver_probe_device+0x1ef/0x380 [ 893.929230][T19342] driver_probe_device+0x4f/0x240 [ 893.936419][T19342] __driver_attach+0x34c/0x640 [ 893.943285][T19342] bus_for_each_dev+0x23b/0x2c0 [ 893.950261][T19342] serio_handle_event+0x1af/0xf80 [ 893.957372][T19342] process_scheduled_works+0xb5d/0x1860 [ 893.964996][T19342] worker_thread+0xa53/0xfc0 [ 893.971675][T19342] kthread+0x388/0x470 [ 893.977885][T19342] ret_from_fork+0x514/0xb70 [ 893.984652][T19342] ret_from_fork_asm+0x1a/0x30 [ 893.991494][T19342] } [ 893.994268][T19342] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 894.003642][T19342] -> (&client->buffer_lock){....}-{3:3} { [ 894.009567][T19342] INITIAL USE at: [ 894.013632][T19342] lock_acquire+0x106/0x350 [ 894.020048][T19342] _raw_spin_lock_irqsave+0x40/0x60 [ 894.027152][T19342] evdev_ioctl_handler+0x1a49/0x1fe0 [ 894.034343][T19342] __se_sys_ioctl+0xfc/0x170 [ 894.040935][T19342] do_syscall_64+0x15f/0xf80 [ 894.047441][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.055238][T19342] } [ 894.057897][T19342] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 894.066212][T19342] ... acquired at: [ 894.070175][T19342] _raw_spin_lock+0x2e/0x40 [ 894.074840][T19342] evdev_pass_values+0xb9/0xbd0 [ 894.079857][T19342] evdev_events+0x1e6/0x340 [ 894.084544][T19342] input_pass_values+0x288/0x890 [ 894.089669][T19342] input_event_dispose+0x330/0x6b0 [ 894.094955][T19342] input_inject_event+0x1dc/0x330 [ 894.100160][T19342] evdev_write+0x325/0x4c0 [ 894.104752][T19342] vfs_write+0x29a/0xb90 [ 894.109167][T19342] ksys_write+0x150/0x270 [ 894.113667][T19342] do_syscall_64+0x15f/0xf80 [ 894.118426][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.124569][T19342] [ 894.126894][T19342] -> (&new->fa_lock){....}-{3:3} { [ 894.132115][T19342] INITIAL USE at: [ 894.136094][T19342] lock_acquire+0x106/0x350 [ 894.142339][T19342] _raw_write_lock_irq+0x3d/0x50 [ 894.149017][T19342] fasync_remove_entry+0xf1/0x1c0 [ 894.155778][T19342] lease_modify+0x4f7/0x6c0 [ 894.162009][T19342] locks_remove_file+0x5f0/0xf70 [ 894.168700][T19342] __fput+0x3ae/0xa60 [ 894.174437][T19342] task_work_run+0x1d9/0x270 [ 894.180784][T19342] exit_to_user_mode_loop+0xed/0x480 [ 894.187933][T19342] do_syscall_64+0x33e/0xf80 [ 894.194276][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.201929][T19342] INITIAL READ USE at: [ 894.206345][T19342] lock_acquire+0x106/0x350 [ 894.213018][T19342] _raw_read_lock_irqsave+0x48/0x60 [ 894.220383][T19342] kill_fasync+0x199/0x4d0 [ 894.226968][T19342] lease_break_callback+0x26/0x30 [ 894.234169][T19342] __break_lease+0x81f/0x1ea0 [ 894.241031][T19342] do_dentry_open+0x1010/0x14e0 [ 894.248067][T19342] vfs_open+0x3b/0x340 [ 894.254326][T19342] path_openat+0x2e08/0x3860 [ 894.261089][T19342] do_file_open+0x23e/0x4a0 [ 894.267764][T19342] do_sys_openat2+0x113/0x200 [ 894.274629][T19342] __x64_sys_open+0x11e/0x150 [ 894.281493][T19342] do_syscall_64+0x15f/0xf80 [ 894.288266][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.296416][T19342] } [ 894.298991][T19342] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 894.307742][T19342] ... acquired at: [ 894.311620][T19342] _raw_read_lock_irqsave+0x48/0x60 [ 894.317070][T19342] kill_fasync+0x199/0x4d0 [ 894.321681][T19342] evdev_pass_values+0x627/0xbd0 [ 894.326790][T19342] evdev_events+0x1e6/0x340 [ 894.331459][T19342] input_pass_values+0x288/0x890 [ 894.336561][T19342] input_event_dispose+0x330/0x6b0 [ 894.341837][T19342] input_inject_event+0x1dc/0x330 [ 894.347113][T19342] evdev_write+0x325/0x4c0 [ 894.351716][T19342] vfs_write+0x29a/0xb90 [ 894.356132][T19342] ksys_write+0x150/0x270 [ 894.360718][T19342] do_syscall_64+0x15f/0xf80 [ 894.365484][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.371552][T19342] [ 894.373871][T19342] -> (&f_owner->lock){....}-{3:3} { [ 894.379182][T19342] INITIAL USE at: [ 894.383077][T19342] lock_acquire+0x106/0x350 [ 894.389430][T19342] _raw_write_lock_irq+0x3d/0x50 [ 894.395944][T19342] __f_setown+0x67/0x370 [ 894.401765][T19342] generic_setlease+0xacf/0xfd0 [ 894.408202][T19342] do_fcntl_add_lease+0x35e/0x470 [ 894.414794][T19342] fcntl_setlease+0x123/0x180 [ 894.421056][T19342] do_fcntl+0x8b3/0x1a20 [ 894.426878][T19342] __se_sys_fcntl+0xc8/0x150 [ 894.433029][T19342] do_syscall_64+0x15f/0xf80 [ 894.439190][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.446650][T19342] INITIAL READ USE at: [ 894.450985][T19342] lock_acquire+0x106/0x350 [ 894.457477][T19342] _raw_read_lock_irqsave+0x48/0x60 [ 894.464691][T19342] send_sigio+0x38/0x370 [ 894.470922][T19342] kill_fasync+0x24d/0x4d0 [ 894.477420][T19342] lease_break_callback+0x26/0x30 [ 894.484440][T19342] __break_lease+0x81f/0x1ea0 [ 894.491103][T19342] do_dentry_open+0x1010/0x14e0 [ 894.497944][T19342] vfs_open+0x3b/0x340 [ 894.504001][T19342] path_openat+0x2e08/0x3860 [ 894.510578][T19342] do_file_open+0x23e/0x4a0 [ 894.517072][T19342] do_sys_openat2+0x113/0x200 [ 894.523742][T19342] __x64_sys_open+0x11e/0x150 [ 894.530406][T19342] do_syscall_64+0x15f/0xf80 [ 894.537000][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.544906][T19342] } [ 894.547390][T19342] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 894.556234][T19342] ... acquired at: [ 894.560123][T19342] _raw_read_lock_irqsave+0x48/0x60 [ 894.565505][T19342] send_sigio+0x38/0x370 [ 894.569935][T19342] kill_fasync+0x24d/0x4d0 [ 894.574521][T19342] lease_break_callback+0x26/0x30 [ 894.579716][T19342] __break_lease+0x81f/0x1ea0 [ 894.584558][T19342] do_dentry_open+0x1010/0x14e0 [ 894.589579][T19342] vfs_open+0x3b/0x340 [ 894.593809][T19342] path_openat+0x2e08/0x3860 [ 894.598574][T19342] do_file_open+0x23e/0x4a0 [ 894.603244][T19342] do_sys_openat2+0x113/0x200 [ 894.608085][T19342] __x64_sys_open+0x11e/0x150 [ 894.612934][T19342] do_syscall_64+0x15f/0xf80 [ 894.617686][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.623741][T19342] [ 894.626053][T19342] [ 894.626053][T19342] the dependencies between the lock to be acquired [ 894.626062][T19342] and SOFTIRQ-irq-unsafe lock: [ 894.639657][T19342] -> (tasklist_lock){.+.+}-{3:3} { [ 894.644784][T19342] HARDIRQ-ON-R at: [ 894.648757][T19342] lock_acquire+0x106/0x350 [ 894.654902][T19342] _raw_read_lock+0x36/0x50 [ 894.661055][T19342] __do_wait+0xde/0x740 [ 894.666939][T19342] do_wait+0x1e7/0x510 [ 894.672661][T19342] kernel_wait+0xd6/0x1c0 [ 894.678661][T19342] call_usermodehelper_exec_work+0xbe/0x230 [ 894.686299][T19342] process_scheduled_works+0xb5d/0x1860 [ 894.693511][T19342] worker_thread+0xa53/0xfc0 [ 894.699759][T19342] kthread+0x388/0x470 [ 894.705580][T19342] ret_from_fork+0x514/0xb70 [ 894.711816][T19342] ret_from_fork_asm+0x1a/0x30 [ 894.718224][T19342] SOFTIRQ-ON-R at: [ 894.722210][T19342] lock_acquire+0x106/0x350 [ 894.728351][T19342] _raw_read_lock+0x36/0x50 [ 894.734494][T19342] __do_wait+0xde/0x740 [ 894.740291][T19342] do_wait+0x1e7/0x510 [ 894.746041][T19342] kernel_wait+0xd6/0x1c0 [ 894.752015][T19342] call_usermodehelper_exec_work+0xbe/0x230 [ 894.759543][T19342] process_scheduled_works+0xb5d/0x1860 [ 894.766731][T19342] worker_thread+0xa53/0xfc0 [ 894.772962][T19342] kthread+0x388/0x470 [ 894.778759][T19342] ret_from_fork+0x514/0xb70 [ 894.784985][T19342] ret_from_fork_asm+0x1a/0x30 [ 894.791392][T19342] INITIAL USE at: [ 894.795270][T19342] lock_acquire+0x106/0x350 [ 894.801321][T19342] _raw_write_lock_irq+0x3d/0x50 [ 894.807905][T19342] copy_process+0x2b4c/0x4440 [ 894.814133][T19342] kernel_clone+0x284/0x8f0 [ 894.820187][T19342] user_mode_thread+0x110/0x180 [ 894.826590][T19342] rest_init+0x23/0x300 [ 894.832298][T19342] start_kernel+0x38a/0x3e0 [ 894.838356][T19342] x86_64_start_reservations+0x24/0x30 [ 894.845378][T19342] x86_64_start_kernel+0x143/0x1c0 [ 894.852039][T19342] common_startup_64+0x13e/0x147 [ 894.858531][T19342] INITIAL READ USE at: [ 894.862844][T19342] lock_acquire+0x106/0x350 [ 894.869330][T19342] _raw_read_lock+0x36/0x50 [ 894.875824][T19342] __do_wait+0xde/0x740 [ 894.881976][T19342] do_wait+0x1e7/0x510 [ 894.888036][T19342] kernel_wait+0xd6/0x1c0 [ 894.894353][T19342] call_usermodehelper_exec_work+0xbe/0x230 [ 894.902226][T19342] process_scheduled_works+0xb5d/0x1860 [ 894.909842][T19342] worker_thread+0xa53/0xfc0 [ 894.916419][T19342] kthread+0x388/0x470 [ 894.922484][T19342] ret_from_fork+0x514/0xb70 [ 894.929063][T19342] ret_from_fork_asm+0x1a/0x30 [ 894.935829][T19342] } [ 894.938324][T19342] ... key at: [] tasklist_lock+0x18/0x40 [ 894.946122][T19342] ... acquired at: [ 894.949921][T19342] _raw_read_lock+0x36/0x50 [ 894.954644][T19342] send_sigurg+0x12b/0x420 [ 894.959236][T19342] sk_send_sigurg+0x6c/0x2e0 [ 894.963998][T19342] queue_oob+0x42c/0x4f0 [ 894.968403][T19342] unix_stream_sendmsg+0xcb1/0xe80 [ 894.973675][T19342] ____sys_sendmsg+0x972/0x9f0 [ 894.978625][T19342] ___sys_sendmsg+0x2a5/0x360 [ 894.983489][T19342] __sys_sendmmsg+0x27c/0x4e0 [ 894.988351][T19342] __x64_sys_sendmmsg+0xa0/0xc0 [ 894.993371][T19342] do_syscall_64+0x15f/0xf80 [ 894.998135][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.004196][T19342] [ 895.006510][T19342] [ 895.006510][T19342] stack backtrace: [ 895.012590][T19342] CPU: 0 UID: 0 PID: 19342 Comm: syz.2.4373 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.012627][T19342] Tainted: [L]=SOFTLOCKUP [ 895.012634][T19342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.012644][T19342] Call Trace: [ 895.012653][T19342] [ 895.012666][T19342] dump_stack_lvl+0xe8/0x150 [ 895.012690][T19342] __lock_acquire+0x2a94/0x2cf0 [ 895.012717][T19342] ? send_sigurg+0x12b/0x420 [ 895.012742][T19342] lock_acquire+0x106/0x350 [ 895.012757][T19342] ? send_sigurg+0x12b/0x420 [ 895.012780][T19342] _raw_read_lock+0x36/0x50 [ 895.012798][T19342] ? send_sigurg+0x12b/0x420 [ 895.012816][T19342] send_sigurg+0x12b/0x420 [ 895.012843][T19342] sk_send_sigurg+0x6c/0x2e0 [ 895.012859][T19342] queue_oob+0x42c/0x4f0 [ 895.012879][T19342] ? __pfx_queue_oob+0x10/0x10 [ 895.012893][T19342] ? __perf_event_task_sched_in+0x1606/0x1800 [ 895.012919][T19342] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 895.012965][T19342] unix_stream_sendmsg+0xcb1/0xe80 [ 895.012984][T19342] ? __lock_acquire+0x6b5/0x2cf0 [ 895.013000][T19342] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 895.013015][T19342] ? rcu_is_watching+0x15/0xb0 [ 895.013033][T19342] ? aa_sock_msg_perm+0xda/0x1b0 [ 895.013052][T19342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.013071][T19342] ____sys_sendmsg+0x972/0x9f0 [ 895.013092][T19342] ? __might_fault+0xaf/0x130 [ 895.013112][T19342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.013134][T19342] ? import_iovec+0x73/0xa0 [ 895.013156][T19342] ___sys_sendmsg+0x2a5/0x360 [ 895.013174][T19342] ? __lock_acquire+0x6b5/0x2cf0 [ 895.013191][T19342] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.013211][T19342] ? preempt_schedule_common+0x82/0xd0 [ 895.013229][T19342] ? preempt_schedule_thunk+0x16/0x30 [ 895.013256][T19342] ? __fget_files+0x2a/0x420 [ 895.013274][T19342] ? __fget_files+0x3a0/0x420 [ 895.013293][T19342] __sys_sendmmsg+0x27c/0x4e0 [ 895.013314][T19342] ? __pfx___sys_sendmmsg+0x10/0x10 [ 895.013332][T19342] ? do_futex+0x395/0x420 [ 895.013352][T19342] ? __pfx_do_fcntl+0x10/0x10 [ 895.013377][T19342] ? rcu_is_watching+0x15/0xb0 [ 895.013396][T19342] __x64_sys_sendmmsg+0xa0/0xc0 [ 895.013416][T19342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.013432][T19342] do_syscall_64+0x15f/0xf80 [ 895.013450][T19342] ? trace_irq_disable+0x3b/0x140 [ 895.013471][T19342] ? clear_bhb_loop+0x40/0x90 [ 895.013488][T19342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.013503][T19342] RIP: 0033:0x7fc48659cdd9 [ 895.013519][T19342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.013533][T19342] RSP: 002b:00007fc4874ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 895.013551][T19342] RAX: ffffffffffffffda RBX: 00007fc486815fa0 RCX: 00007fc48659cdd9 [ 895.013562][T19342] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 895.013572][T19342] RBP: 00007fc486632d69 R08: 0000000000000000 R09: 0000000000000000 [ 895.013582][T19342] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 895.013592][T19342] R13: 00007fc486816038 R14: 00007fc486815fa0 R15: 00007fc48693fa48 [ 895.013609][T19342] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 895.371552][ T5777] usb 7-1: USB disconnect, device number 122 [ 895.525212][ T5357] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 895.781397][ T13] wlan1: Creating new IBSS network, BSSID 8a:f8:66:a1:f6:58 [ 896.134097][T11125] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.230854][T11125] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.361792][T11125] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.389232][T11125] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.468965][T11125] bridge_slave_1: left allmulticast mode [ 896.474670][T11125] bridge_slave_1: left promiscuous mode [ 896.480730][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.490595][T11125] bridge_slave_0: left allmulticast mode [ 896.496462][T11125] bridge_slave_0: left promiscuous mode [ 896.502289][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.590782][T11125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.601425][T11125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.611245][T11125] bond0 (unregistering): Released all slaves [ 896.832941][T11125] hsr_slave_0: left promiscuous mode [ 896.840163][T11125] hsr_slave_1: left promiscuous mode [ 896.846378][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.853805][T11125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.863896][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.874688][T11125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.884606][T11125] veth1_macvtap: left promiscuous mode [ 896.890447][T11125] veth0_macvtap: left promiscuous mode [ 896.896478][T11125] veth1_vlan: left promiscuous mode [ 896.901744][T11125] veth0_vlan: left promiscuous mode [ 896.994304][T11125] team0 (unregistering): Port device team_slave_1 removed [ 897.006397][T11125] team0 (unregistering): Port device team_slave_0 removed [ 897.052072][ T5286] 8021q: adding VLAN 0 to HW filter on device eth9 [ 897.450148][ T5286] 8021q: adding VLAN 0 to HW filter on device eth11 [ 897.461554][T11125] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.522265][T11125] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.614577][T11125] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.684945][T11125] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.708411][ T5286] 8021q: adding VLAN 0 to HW filter on device eth10 [ 897.824887][T11125] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.835457][T11125] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.909420][T11125] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.919968][T11125] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.972327][T11125] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.984912][T11125] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.997978][ T5286] 8021q: adding VLAN 0 to HW filter on device eth12 [ 898.031841][T11125] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.042207][T11125] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.127381][T11125] bridge_slave_1: left allmulticast mode [ 898.136123][T11125] bridge_slave_1: left promiscuous mode [ 898.141908][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.151057][T11125] bridge_slave_0: left allmulticast mode [ 898.157107][T11125] bridge_slave_0: left promiscuous mode [ 898.163186][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.174165][T11125] bridge_slave_1: left allmulticast mode [ 898.180859][T11125] bridge_slave_1: left promiscuous mode [ 898.187371][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.198196][T11125] bridge_slave_0: left allmulticast mode [ 898.204086][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.345334][T11125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.357518][T11125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.370070][T11125] bond0 (unregistering): Released all slaves [ 898.445512][T11125] bond0 (unregistering): (slave bridge1): Releasing backup interface [ 898.453671][T11125] bridge1 (unregistering): left promiscuous mode [ 898.460192][T11125] bridge1 (unregistering): left allmulticast mode [ 898.507661][T11125] bond1 (unregistering): Released all slaves [ 898.517579][T11125] bond0 (unregistering): Released all slaves [ 898.527955][ T5286] 8021q: adding VLAN 0 to HW filter on device eth13 [ 898.837945][ T5286] 8021q: adding VLAN 0 to HW filter on device eth14 [ 898.921159][T11125] hsr_slave_0: left promiscuous mode [ 898.927186][T11125] hsr_slave_1: left promiscuous mode [ 898.933122][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.940643][T11125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.951522][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.959000][T11125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.969459][T11125] hsr_slave_0: left promiscuous mode [ 898.976744][T11125] hsr_slave_1: left promiscuous mode [ 898.982771][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.990516][T11125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.998815][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.006427][T11125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.022644][T11125] veth1_macvtap: left promiscuous mode [ 899.028369][T11125] veth0_macvtap: left promiscuous mode [ 899.033940][T11125] veth1_vlan: left promiscuous mode [ 899.039264][T11125] veth0_vlan: left promiscuous mode [ 899.046698][T11125] veth1_macvtap: left promiscuous mode [ 899.052226][T11125] veth0_macvtap: left promiscuous mode [ 899.057946][T11125] veth1_vlan: left promiscuous mode [ 899.063221][T11125] veth0_vlan: left promiscuous mode [ 899.259565][T11125] team0 (unregistering): Port device team_slave_1 removed [ 899.274351][T11125] team0 (unregistering): Port device team_slave_0 removed [ 899.468256][T11125] team0 (unregistering): Port device team_slave_1 removed [ 899.480836][T11125] team0 (unregistering): Port device team_slave_0 removed [ 899.518524][ T5286] 8021q: adding VLAN 0 to HW filter on device eth15 [ 899.927153][ T5286] 8021q: adding VLAN 0 to HW filter on device eth16 [ 900.103289][T11125] IPVS: stop unused estimator thread 0... [ 900.228727][ T5286] 8021q: adding VLAN 0 to HW filter on device eth17 [ 900.445911][ T5286] 8021q: adding VLAN 0 to HW filter on device eth18 [ 900.656404][ T5286] 8021q: adding VLAN 0 to HW filter on device eth19 [ 900.869263][ T5286] 8021q: adding VLAN 0 to HW filter on device eth20