last executing test programs: 21m58.878940078s ago: executing program 3 (id=1157): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 21m58.517060271s ago: executing program 3 (id=1159): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x2, 0x3, 0x28c}) close_range(r0, 0xffffffffffffffff, 0x0) 21m57.042439031s ago: executing program 3 (id=1161): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000005740)=ANY=[@ANYBLOB="040e04060304"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) 21m56.167038427s ago: executing program 3 (id=1164): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)) read$dsp(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x3}, 0x28) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r5, &(0x7f0000000080), 0x12) connect$x25(r5, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 21m53.112202398s ago: executing program 3 (id=1172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = semget$private(0x0, 0x3, 0x100) semtimedop(r5, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(r5, 0x2, 0x10, &(0x7f0000000100)=0x3) 21m50.940917621s ago: executing program 3 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) mount(&(0x7f00000002c0)=@md0, &(0x7f0000000340)='./tracefs/instances/foo\x00', &(0x7f0000000380)='cpuset\x00', 0x10, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) socket$pppoe(0x18, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) 21m35.226395588s ago: executing program 32 (id=1174): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) mount(&(0x7f00000002c0)=@md0, &(0x7f0000000340)='./tracefs/instances/foo\x00', &(0x7f0000000380)='cpuset\x00', 0x10, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x26c}) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) socket$pppoe(0x18, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private2, @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x309) 18m17.303542617s ago: executing program 0 (id=1532): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71a, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0x1000000000000192, 0x9ba3, 0xffff, 0x82519, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x70bd26, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r4, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x401, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x7, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x1c0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x5, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0x8d2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x0, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x3, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m12.589294618s ago: executing program 0 (id=1540): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x103000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0x51f2, 0xdb00, 0x10000008, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m12.317760588s ago: executing program 0 (id=1542): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x50) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @multicast2}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfffb, 0x0, 0x4, 0x6, 0x800}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, 0x0, 0x0) 18m11.862061289s ago: executing program 0 (id=1544): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = semget$private(0x0, 0x3, 0x100) semtimedop(r5, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SETVAL(r5, 0x2, 0x10, &(0x7f0000000100)=0x3) 18m5.15091773s ago: executing program 0 (id=1555): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 18m3.870574141s ago: executing program 0 (id=1559): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x4) socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x18, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r6, &(0x7f0000000c00)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff03c}, {0x6, 0x0, 0x0, 0x5387cf8b}]}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e1d, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000500000005000600000000000500060009000000440001800800030001000000080003000200000014000200626f6e645f736c6176655f30800000001c00020074756e6c30000000000000000000000008000100", @ANYRES32, @ANYBLOB="08000900010000000500070005"], 0x78}}, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000080)) 17m46.835208784s ago: executing program 33 (id=1559): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x4) socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0x18, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r4}, 0x10) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet(r6, &(0x7f0000000c00)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000040)) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x30, 0x80, 0x5, 0xfffff03c}, {0x6, 0x0, 0x0, 0x5387cf8b}]}) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e1d, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000500000005000600000000000500060009000000440001800800030001000000080003000200000014000200626f6e645f736c6176655f30800000001c00020074756e6c30000000000000000000000008000100", @ANYRES32, @ANYBLOB="08000900010000000500070005"], 0x78}}, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000080)) 17m0.065162315s ago: executing program 1 (id=1627): socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syslog(0x4, &(0x7f0000000080)=""/113, 0x71) 16m58.72795928s ago: executing program 1 (id=1629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="d4", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="32fcfd0e8e2820c24fb7d2128ed610", 0xf}], 0x1}}], 0x2, 0x40080) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}], 0x1, 0x4000801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 16m57.121692186s ago: executing program 1 (id=1632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)="05", 0x1) 16m56.957480076s ago: executing program 1 (id=1633): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x80c010, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x0, 0x9, 0x2, 0x7}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000002240)={0x50, 0x0, 0x0, {0x7, 0x8, 0x11, 0x40000, 0x10, 0x8, 0x85, 0x6, 0xc00, 0x0, 0x20, 0x17989}}, 0x50) fallocate(r0, 0x0, 0x3, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000240)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000400)={@local}, &(0x7f0000000440)=0x14) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) lseek(r2, 0x0, 0x4) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x2000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24041804}, 0x81) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x430200, 0x20) 16m56.829003316s ago: executing program 1 (id=1634): ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000004}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x2000c800) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c100000000100000000", 0x57}], 0x1) 16m55.36283621s ago: executing program 1 (id=1635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000002e40), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000500250000000c600e41b0000900ac00081f25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r3, 0x2022ad) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000100f9ff0000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 16m39.842967864s ago: executing program 34 (id=1635): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000002e40), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000500250000000c600e41b0000900ac00081f25000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r3, 0x2022ad) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000100f9ff0000000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 21.043731839s ago: executing program 5 (id=5049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020206425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'bond_slave_1\x00', @random="0131089d30d9"}) 20.99805696s ago: executing program 5 (id=5050): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x1, 0x17, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x10, 0xffffffff, 0xc}}) r1 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syncfs(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) io_setup(0x4, 0x0) io_pgetevents(0x0, 0x2, 0x0, &(0x7f0000000740), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x24c280, 0x0) tee(r3, 0xffffffffffffffff, 0x10, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13.477656179s ago: executing program 5 (id=5053): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004"], 0x1d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) 13.089950053s ago: executing program 5 (id=5055): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 12.90217567s ago: executing program 5 (id=5056): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key(0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x700000c, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x2) ioctl(r0, 0xc0184d03, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) 12.401149203s ago: executing program 5 (id=5060): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 11.149439027s ago: executing program 2 (id=5065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0xfffffff8) 10.033021751s ago: executing program 7 (id=5066): unshare(0x78040280) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) 9.937179215s ago: executing program 2 (id=5067): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x20a303) syz_usb_connect(0x2, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4400, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe, 0x1, 0x47, {0x8, 0x25, 0x1, 0x102, 0x3c, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x6, 0x0, {0x8, 0x25, 0x1, 0x82, 0xc, 0x8, 0x8}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x29, 0x802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040), 0x0) 7.869281965s ago: executing program 6 (id=5074): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2e, 0x0, 0x0) 7.617340849s ago: executing program 7 (id=5075): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) 7.029716038s ago: executing program 7 (id=5076): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) 6.857259416s ago: executing program 7 (id=5077): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000400c200b104000010203010902289f030103a0420904000000010100000a240102000a0002010209040100000102000009040101e2010200000905ba0710000206000725010c004000090502"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000280)={0x0, 0xf, 0xc0, {0x5, 0xf, 0xc0, 0x6, [@ptm_cap={0x3}, @generic={0x84, 0x10, 0x2, "2616c5bc16ba9ab9a1e8ffe08dbc867736fd897c9d5e98712837074ba4bf49ea3e71d0319689a1298aaf33c97d80915813778fe76fc031f9ae06b9d4f03c944d1e74d06b10631d32258a15fed280ccaf44c34e6b2e4a91527af9b86c9c009ccf146bbadb81479451aa8ed841ba451e7877b500bbd5746db2c462c789a495a1df95"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa4, 0x8, 0x5, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0xf1, "81ad36c4fb4ce7202bb7b24f4694fcc9"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xa, 0x2, 0x7fff}, @wireless={0xb, 0x10, 0x1, 0x2, 0xb8, 0x6, 0x7f, 0xe9, 0x6e}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x1, 0xfb, "8557ed6c", "a3c47772"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x6, 0x2a, 0x4, 0x1, 0x3}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x0, 0x14, 0x44, "4bcee332c9bc51d11a859f04665783253cdd1020ee35b6de05909281e5bd99b18010d762ebe1696f12d8acd77edbcb7b83b727b20b6189539067730282d63805bb02bd30"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x222, 0x40}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "e3ad"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x13, 0x6, @local}, &(0x7f0000000780)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "d73e"}, &(0x7f0000000800)={0x40, 0x1a, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000100)) syz_usb_control_io$hid(r1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x141c00) read$hidraw(r4, 0x0, 0x60) r5 = syz_open_dev$hidraw(&(0x7f00000009c0), 0x2, 0x20000) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000a00)="423606c1d8e9f5d6338855b9a265fe9ca7ae877db70e4c50d30248420c035100ba8148b1090acba69ded5be55495a7880444cb6d9183b4eb3a7be86b82cc6caf661ae94342bda6500b17cd107a4fe05285be5808903fc64a633d2a099488674a5aa29b68c0df66ac6f1860c8a22bf81d1cc4a686b6f18900555705b500c50c9ca2a4472623342cb149dce69850dc8b40fa9752d9ed7def8a440ecbf59251ea574e") syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) 5.920513296s ago: executing program 2 (id=5078): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = io_uring_setup(0x4520, &(0x7f0000000380)={0x0, 0xdca4, 0x2000, 0x2, 0x2e6}) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad, 0x0, r0}, 0x0, &(0x7f0000000500), &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, 0x0, 0xfe) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d07, &(0x7f0000000040)) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r5, 0x0) r6 = epoll_create(0x5) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) r8 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmmsg$inet(r3, &(0x7f0000005300)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000005100)=[{0x0, 0x20}, {&(0x7f0000000500)="b72a", 0x2}], 0x2}}], 0x1, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000008705000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_pts(r8, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) 5.5832107s ago: executing program 6 (id=5079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="2e1221b23bb601c494d3df173e75fe0100dd9d904901f665b773953519da1abb67e4ccdfabbb4d04ef", 0x29}, {&(0x7f0000000080)="0400000002e877da3002473500000003467b5dc4", 0x14}, {&(0x7f0000000100)="6e1d9afe29a908435413b7ae0371167073ca1266dddc8f1bdc85dd6d5704d94766ac08fee359e7d3048690089aaffa8e265d525faa19f70c48215f5fe890978da4ac566c534f80b84007896f87b591793225320ca636db5db5a222d4df21bf6c275d22221f805052c4aa97414699e37dc9a81d3af6e16743b14362e70e9abb306fb85f93e371502076e9c05b32f1a4795dd1a1e6bdfd7e2443a9ae1c6c6800cb19832b9bf390364e9c7496a43cea1b090000", 0xb2}], 0x3) 5.203268082s ago: executing program 6 (id=5082): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x58, 0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1e50}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4000000e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80000008}, {}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x6, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) add_key$user(0x0, 0x0, &(0x7f0000000080)="269d5dfee993d0b38403e96b97e97a715a61f496e8d05a99f2f7ffb097254c115b53559cdf6bc389", 0x28, 0xfffffffffffffffd) syz_usb_connect(0x2, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000056544820e105080411250102070109023600010000000009040000042ec25d00090502"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x48) 5.091088531s ago: executing program 4 (id=5083): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x3, 0xb018}) 3.861213536s ago: executing program 4 (id=5084): syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41) syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001300)=ANY=[@ANYBLOB="0007ebffffff"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.729688818s ago: executing program 7 (id=5085): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x21, 0x0, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81a", 0x0, 0x2, 0x0, 0x7ffc}, 0x50) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 3.589470557s ago: executing program 2 (id=5086): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) 3.219388156s ago: executing program 2 (id=5087): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8) 2.841290344s ago: executing program 2 (id=5088): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x20a303) syz_usb_connect(0x2, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902"], 0x0) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x8, 0x20, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4400, 0x7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe, 0x1, 0x47, {0x8, 0x25, 0x1, 0x102, 0x3c, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x6, 0x0, {0x8, 0x25, 0x1, 0x82, 0xc, 0x8, 0x8}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x29, 0x802, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040), 0x0) 2.386203838s ago: executing program 7 (id=5089): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x28, &(0x7f0000000500)={[{0x24, 0x4e00, "c4eaf25b88ffacbf6f56fc6a2876659c363fad62f286759a082f2f09b64147f31c772e26"}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x21, 0x88, {0x88, 0x9, "50b5aeab4789a74e574791cf1c4be9d38728beb6aaf9e567857682e5a75dd8f398e36e5f18866b7d68fb11b31989f5f994b624d1858e0775ffc626762ea10ae4aa67c4b38c205b4362df805093bf71a137b9b2830d29f41f132223ae2f13f87c2ce505e3bde494aa05f47d2123188a78169477e961c5b30847f6bc8ab4ee80252cbc25022817"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0x5, 0xdb, "250aab6fbbe83b1249a8c9a89d6915338ee654938cec06705d976c081bb21e544a13514a10aef382dacae3b8a3859853f5117117bc88f6493dabbecd62e4403c0aefb3d8ca4327d6e9b95e83c28f1b4fb19003ab5d09d9ae6e7face15ad761f7380d78f62957f140908a291bb05a4ea146b57385bf9c930160001fbd4e69faaa0b552e3c1749b07c421cadfc2617ff76d3d14a0de2052b2ffa053d163055c1f421c581c3871f7a904a394c077fed2093da1d90beb787ba4ee334707fc45040804c04e8465599d875eda5fa1f3f939a5535a02e0876b28085bf5b68"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xf7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3}}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 2.327002706s ago: executing program 6 (id=5090): r0 = syz_usb_connect(0x0, 0x4f, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x7, '\b'}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0x9, "02"}, @main=@item_012={0x0, 0x0, 0xc}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000080)={0x6, "7ed547b2f0cfe53cb4be574d1ed341f6a1bfb8aa4622377b049e453ccb4007795cb49aa6981e8701eee094225d68149129a5444b1ec0442185f46f1b9ccf84c1"}) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)='8', 0x1) syz_usb_control_io(r1, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x20, 0xe, 0x4, "87266cff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.82924789s ago: executing program 4 (id=5091): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="0100000001000000140003007665746830000000000000000000000008000a00", @ANYBLOB], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff000089497d727bdbcf2e21ae6fc9a9cdb3dae0ef5792f36727e4a6fcc19b0c649d88e269676e8be4db54cdd52b5cd17e4510aa125ea5e46441f8ff7cc68da2a8700096cec1c8f1895f3330ee09747680b3ce", 0x76, 0x0, &(0x7f0000000800)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db"], 0x34}}, 0x0) 1.396533619s ago: executing program 4 (id=5092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000004c0)="2e1221b23bb601c494d3df173e75fe0100dd9d904901f665b773953519da1abb67e4ccdfabbb4d04ef", 0x29}, {&(0x7f0000000080)="0400000002e877da3002473500000003467b5dc4", 0x14}, {&(0x7f0000000100)="6e1d9afe29a908435413b7ae0371167073ca1266dddc8f1bdc85dd6d5704d94766ac08fee359e7d3048690089aaffa8e265d525faa19f70c48215f5fe890978da4ac566c534f80b84007896f87b591793225320ca636db5db5a222d4df21bf6c275d22221f805052c4aa97414699e37dc9a81d3af6e16743b14362e70e9abb306fb85f93e371502076e9c05b32f1a4795dd1a1e6bdfd7e2443a9ae1c6c6800cb19832b9bf390364e9c7496a43cea1b090000", 0xb2}], 0x3) 482.037826ms ago: executing program 4 (id=5093): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB='&'], 0x10) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r2, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r4 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 331.262016ms ago: executing program 4 (id=5094): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05005000000000000109022400010000e80b090400000103f302000921fd7f000122c10109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0x3, 0xeb59, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00224c00000005200973a10185010a19031500250575089501"], 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00032a0000002a03c1bb1f85aedccfd7936f87360dbac4b3"]}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0xffffffffffffff74, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.246939ms ago: executing program 6 (id=5095): r0 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r1, 0x1000000) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 0s ago: executing program 6 (id=5096): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = io_uring_setup(0x4520, &(0x7f0000000380)={0x0, 0xdca4, 0x2000, 0x2, 0x2e6}) r1 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad, 0x0, r0}, 0x0, &(0x7f0000000500), &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x2, 0x0, 0xfe) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x3, 0x5, 0x1, 0x0, 0x2}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d07, &(0x7f0000000040)) readv(r5, &(0x7f0000000680)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x11, r5, 0x0) r6 = epoll_create(0x5) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1807, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) r8 = openat$ttyS3(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) sendmmsg$inet(r3, &(0x7f0000005300)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000005100)=[{0x0, 0x20}, {&(0x7f0000000500)="b72a", 0x2}], 0x2}}], 0x1, 0x8000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000008705000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_pts(r8, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) kernel console output (not intermixed with test programs): lave_0 added [ 1656.956979][T20605] team0: Port device team_slave_1 added [ 1656.997713][ T9719] usb 3-1: USB disconnect, device number 28 [ 1657.197357][ T36] audit: type=1326 audit(1790177454.050:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20713 comm="syz.4.4440" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x0 [ 1657.247967][ T42] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1657.295132][T15997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.398877][ T42] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1657.400039][ T42] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.401759][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1657.401786][ T42] usb 6-1: Product: syz [ 1657.401801][ T42] usb 6-1: Manufacturer: syz [ 1657.420181][ T42] usb 6-1: selecting invalid altsetting 1 [ 1657.420361][ T42] dvb_ttusb_budget: ttusb_init_controller: error [ 1657.420377][ T42] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1657.553651][ T42] DVB: Unable to find symbol cx22700_attach() [ 1657.578376][T16157] Bluetooth: hci0: command tx timeout [ 1657.586747][ T42] DVB: Unable to find symbol tda10046_attach() [ 1657.586759][ T42] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1657.701947][T20605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.701966][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.701991][T20605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.704441][T20605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.704459][T20605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.704486][T20605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.817757][T20605] hsr_slave_0: entered promiscuous mode [ 1657.841080][T20605] hsr_slave_1: entered promiscuous mode [ 1657.948228][ T5879] usb 6-1: USB disconnect, device number 122 [ 1658.250213][T15997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.298042][T15037] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1658.478757][T15037] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1658.497855][T15037] usb 3-1: config 0 has no interfaces? [ 1658.497901][T15037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.524932][T15037] usb 3-1: config 0 descriptor?? [ 1658.754643][T15997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.657971][T16157] Bluetooth: hci0: command tx timeout [ 1660.013795][T20743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1661.916837][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1662.186636][T15037] usb 3-1: USB disconnect, device number 29 [ 1662.222188][T15997] bridge_slave_1: left allmulticast mode [ 1662.222228][T15997] bridge_slave_1: left promiscuous mode [ 1662.222470][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.494486][T15997] bridge_slave_0: left allmulticast mode [ 1662.494528][T15997] bridge_slave_0: left promiscuous mode [ 1662.494894][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.855585][T20779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1663.820575][T15997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.899687][T15997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.950313][T15997] bond0 (unregistering): Released all slaves [ 1664.678085][T20771] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1664.678240][T20771] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1666.035575][T20771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1666.036243][T20771] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1666.325770][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1666.326271][T20771] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1666.326637][T20771] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1666.444117][T20771] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1666.444250][T20771] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1666.675824][T20771] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1666.675959][T20771] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1666.783711][T16157] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.909402][T20771] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1668.153844][T16157] Bluetooth: hci1: command 0x0406 tx timeout [ 1668.207967][T15037] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1668.318447][T15997] hsr_slave_0: left promiscuous mode [ 1668.358161][T15997] hsr_slave_1: left promiscuous mode [ 1668.362995][T15997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.363110][T15997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1668.368070][T15037] usb 6-1: Using ep0 maxpacket: 16 [ 1668.369063][T15037] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1668.370351][T15037] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1668.370375][T15037] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1668.373188][T15037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.373213][T15037] usb 6-1: Product: syz [ 1668.373227][T15037] usb 6-1: Manufacturer: syz [ 1668.373241][T15037] usb 6-1: SerialNumber: syz [ 1668.383409][T16157] Bluetooth: hci4: command 0x0406 tx timeout [ 1668.464473][T16157] Bluetooth: hci5: command 0x0406 tx timeout [ 1668.465732][T15997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1668.465759][T15997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1668.473999][T15037] usb 6-1: 0:2 : does not exist [ 1668.649687][T15037] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1668.698096][T16157] Bluetooth: hci0: command 0x0c1a tx timeout [ 1668.834699][T15037] usb 6-1: USB disconnect, device number 123 [ 1668.855490][T15997] veth1_macvtap: left promiscuous mode [ 1668.855619][T15997] veth0_macvtap: left promiscuous mode [ 1668.856448][T15997] veth1_vlan: left promiscuous mode [ 1668.856641][T15997] veth0_vlan: left promiscuous mode [ 1668.859312][T16157] Bluetooth: hci2: command 0x0406 tx timeout [ 1669.020201][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.020267][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.116333][T20720] udevd[20720]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1670.262844][T16157] Bluetooth: hci1: command 0x0406 tx timeout [ 1670.458017][T16157] Bluetooth: hci4: command 0x0406 tx timeout [ 1670.488875][T20871] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1670.539126][T16157] Bluetooth: hci5: command 0x0406 tx timeout [ 1670.787995][T16157] Bluetooth: hci0: command 0x0c1a tx timeout [ 1670.808889][T15997] team0 (unregistering): Port device team_slave_1 removed [ 1670.897521][T15997] team0 (unregistering): Port device team_slave_0 removed [ 1671.928093][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1672.136868][T20889] overlayfs: failed to clone upperpath [ 1672.148008][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1672.175069][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1672.175127][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1672.176045][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1672.176083][ T10] usb 3-1: can't read configurations, error -71 [ 1672.256400][T20890] overlayfs: failed to clone upperpath [ 1672.859401][T16157] Bluetooth: hci0: command 0x0c1a tx timeout [ 1674.968060][ T10] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1675.002232][T15037] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1675.121646][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1675.152421][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1675.152504][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1675.153737][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1675.153778][ T10] usb 6-1: can't read configurations, error -71 [ 1675.158014][T15037] usb 3-1: Using ep0 maxpacket: 16 [ 1675.158977][T15037] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1675.160818][T15037] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.160846][T15037] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1675.164658][T15037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.164697][T15037] usb 3-1: Product: syz [ 1675.164714][T15037] usb 3-1: Manufacturer: syz [ 1675.164728][T15037] usb 3-1: SerialNumber: syz [ 1675.340446][T15037] usb 3-1: 0:2 : does not exist [ 1675.464619][T15037] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1675.696110][T15037] usb 3-1: USB disconnect, device number 32 [ 1675.889543][T20720] udevd[20720]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1676.020828][T20942] FAULT_INJECTION: forcing a failure. [ 1676.020828][T20942] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.020872][T20942] CPU: 0 UID: 0 PID: 20942 Comm: syz.5.4501 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1676.020901][T20942] Tainted: [L]=SOFTLOCKUP [ 1676.020909][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1676.020923][T20942] Call Trace: [ 1676.020932][T20942] [ 1676.020942][T20942] dump_stack_lvl+0xe8/0x150 [ 1676.020980][T20942] should_fail_ex+0x46b/0x600 [ 1676.021012][T20942] should_failslab+0xa8/0x100 [ 1676.021052][T20942] __kmalloc_noprof+0xfb/0x790 [ 1676.021081][T20942] ? prepare_creds+0x30/0x820 [ 1676.021103][T20942] ? security_prepare_creds+0x52/0x360 [ 1676.021130][T20942] ? security_prepare_creds+0x52/0x360 [ 1676.021164][T20942] security_prepare_creds+0x52/0x360 [ 1676.021195][T20942] prepare_creds+0x57d/0x820 [ 1676.021221][T20942] __se_sys_setgroups+0x38a/0x500 [ 1676.021252][T20942] do_syscall_64+0x166/0x520 [ 1676.021271][T20942] ? trace_irq_disable+0x3b/0x140 [ 1676.021297][T20942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.021318][T20942] ? clear_bhb_loop+0x70/0xc0 [ 1676.021352][T20942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.021373][T20942] RIP: 0033:0x7fe68135e159 [ 1676.021394][T20942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1676.021412][T20942] RSP: 002b:00007fe67f5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 1676.021435][T20942] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68135e159 [ 1676.021451][T20942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.021464][T20942] RBP: 00007fe6813f506b R08: 0000000000000000 R09: 0000000000000000 [ 1676.021477][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1676.021490][T20942] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007ffd57d78b58 [ 1676.021523][T20942] [ 1678.417973][T15037] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1678.568537][T15037] usb 6-1: Using ep0 maxpacket: 32 [ 1678.603402][T15037] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1678.603458][T15037] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1678.604499][T15037] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1678.604535][T15037] usb 6-1: can't read configurations, error -71 [ 1678.609636][T20605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1678.846908][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.850802][T20605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1678.866578][ T36] audit: type=1326 audit(1790177475.710:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20969 comm="syz.2.4507" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x0 [ 1679.108446][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1679.109723][T20605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1679.282798][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1679.301054][T20605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1679.344122][T20605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1679.723695][T20605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.798293][T20605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.816250][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.816713][T15981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.839023][ T9718] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1679.845263][T15981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.845442][T15981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.999635][ T9718] usb 6-1: Using ep0 maxpacket: 16 [ 1680.002925][ T9718] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1680.004576][ T9718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.004602][ T9718] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1680.007693][ T9718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.007728][ T9718] usb 6-1: Product: syz [ 1680.007743][ T9718] usb 6-1: Manufacturer: syz [ 1680.007756][ T9718] usb 6-1: SerialNumber: syz [ 1680.081914][ T9718] usb 6-1: 0:2 : does not exist [ 1680.282664][ T9718] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1680.286550][T21028] fuse: fd is not a fuse device [ 1680.587028][ T9718] usb 6-1: USB disconnect, device number 2 [ 1680.799773][T20720] udevd[20720]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1681.037967][ T1879] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1681.192235][ T1879] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1681.193821][ T1879] usb 3-1: config 0 has no interfaces? [ 1681.196671][ T1879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1681.196699][ T1879] usb 3-1: Product: syz [ 1681.196715][ T1879] usb 3-1: Manufacturer: syz [ 1681.239687][ T1879] usb 3-1: config 0 descriptor?? [ 1681.335662][T20605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.468160][T15037] usb 3-1: USB disconnect, device number 33 [ 1681.862718][T20605] veth0_vlan: entered promiscuous mode [ 1681.891565][T20605] veth1_vlan: entered promiscuous mode [ 1682.410013][T20605] veth0_macvtap: entered promiscuous mode [ 1682.431754][T20605] veth1_macvtap: entered promiscuous mode [ 1682.490718][T20605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.494427][T21089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1682.639918][T20605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.845735][ T9332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.846165][ T9332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.015096][ T9718] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1684.167968][ T9718] usb 3-1: Using ep0 maxpacket: 8 [ 1684.168789][ T9718] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1684.170062][ T9718] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1684.255131][ T9718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.255151][ T9718] usb 3-1: Product: syz [ 1684.255159][ T9718] usb 3-1: Manufacturer: syz [ 1684.255167][ T9718] usb 3-1: SerialNumber: syz [ 1684.472776][ T9718] usb 3-1: config 0 descriptor?? [ 1684.478693][ T9718] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1684.571836][T18869] Bluetooth: hci3: Frame reassembly failed (-84) [ 1685.986412][T16007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.997489][T16007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.486718][T16157] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1686.514777][ T9486] Bluetooth: hci3: command 0x1003 tx timeout [ 1686.870920][T15997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.870944][T15997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.211627][T21113] Illegal XDP return value 4294967294 on prog (id 139) dev N/A, expect packet loss! [ 1688.238053][ T9718] gspca_zc3xx: reg_w_i err -71 [ 1688.268007][ T9718] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1688.294218][ T9718] usb 3-1: USB disconnect, device number 34 [ 1688.521671][T16007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.521693][T16007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.897597][T21122] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4549'. [ 1690.191761][T21130] random: crng reseeded on system resumption [ 1691.206821][T21156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1691.218368][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4557'. [ 1691.273750][T21154] bond1: entered promiscuous mode [ 1691.273801][T21154] bond1: entered allmulticast mode [ 1691.276153][T21154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1692.504095][T21187] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1693.696700][T21207] batman_adv: batadv0: Adding interface: veth0 [ 1693.696716][T21207] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.779629][T21207] batman_adv: batadv0: Interface activated: veth0 [ 1694.108074][T21208] batman_adv: batadv0: Interface deactivated: veth0 [ 1694.108110][T21208] batman_adv: batadv0: Removing interface: veth0 [ 1694.199674][T21218] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1694.548027][ T9718] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1694.703308][ T9718] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1694.717171][ T9718] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.717189][ T9718] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1694.719177][ T9718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1694.719205][ T9718] usb 7-1: Product: syz [ 1694.719219][ T9718] usb 7-1: Manufacturer: syz [ 1695.042320][ T5879] usb 7-1: USB disconnect, device number 87 [ 1695.490228][T21236] binfmt_misc: register: failed to install interpreter ./bus [ 1695.547967][ T9718] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1695.694935][T21243] fuse: fd is not a fuse device [ 1695.739735][ T9718] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1695.760903][ T9718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.765134][ T9718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1695.765164][ T9718] usb 3-1: Product: syz [ 1695.765180][ T9718] usb 3-1: Manufacturer: syz [ 1695.916872][ T9718] usb 3-1: selecting invalid altsetting 1 [ 1695.917020][ T9718] dvb_ttusb_budget: ttusb_init_controller: error [ 1695.917036][ T9718] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1696.073836][ T9718] DVB: Unable to find symbol cx22700_attach() [ 1696.102318][ T5879] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1696.249520][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 1696.250426][ T5879] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1696.252033][ T5879] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.252061][ T5879] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1696.253362][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1696.253388][ T5879] usb 7-1: SerialNumber: syz [ 1696.293853][ T9718] DVB: Unable to find symbol tda10046_attach() [ 1696.293871][ T9718] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1696.307597][ T9718] usb 3-1: USB disconnect, device number 35 [ 1696.523153][ T5879] usb 7-1: 0:2 : does not exist [ 1697.103398][ T5879] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1697.340444][ T5879] usb 7-1: USB disconnect, device number 88 [ 1697.617249][T21272] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4606'. [ 1698.518008][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1698.670673][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1698.672326][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.672362][ T42] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1699.063584][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1699.063614][ T42] usb 3-1: Product: syz [ 1699.063629][ T42] usb 3-1: Manufacturer: syz [ 1699.369032][T21280] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1699.417952][ T9718] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1699.426762][ T42] usb 3-1: USB disconnect, device number 36 [ 1699.504334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061266000: rx timeout, send abort [ 1699.568951][ T9718] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1699.570741][ T9718] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1699.570768][ T9718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1699.570788][ T9718] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1699.570810][ T9718] usb 6-1: config 1 has no interface number 1 [ 1699.570854][ T9718] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1699.570895][ T9718] usb 6-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 1699.570921][ T9718] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 1699.570943][ T9718] usb 6-1: config 1 interface 2 altsetting 1 bulk endpoint 0xE has invalid maxpacket 0 [ 1699.574591][ T9718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.574626][ T9718] usb 6-1: Product: syz [ 1699.574641][ T9718] usb 6-1: Manufacturer: syz [ 1699.574657][ T9718] usb 6-1: SerialNumber: syz [ 1699.963491][ T9718] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1699.963555][ T9718] usb 6-1: MIDIStreaming interface descriptor not found [ 1700.004426][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061266000: abort rx timeout. Force session deactivation [ 1700.021224][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061267000: rx timeout, send abort [ 1700.171793][ T9718] usb 6-1: USB disconnect, device number 3 [ 1700.521339][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061267000: abort rx timeout. Force session deactivation [ 1700.647583][T20590] udevd[20590]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1701.428012][ T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1701.578747][ T42] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1701.579955][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.579983][ T42] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1701.582088][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1701.582116][ T42] usb 3-1: Product: syz [ 1701.582131][ T42] usb 3-1: Manufacturer: syz [ 1701.861344][ T42] usb 3-1: USB disconnect, device number 37 [ 1702.032788][T21345] tipc: Failed to remove unknown binding: 66,0,0/0:2872389950/2872389952 [ 1702.032827][T21345] tipc: Failed to remove unknown binding: 66,0,0/0:2872389950/2872389951 [ 1702.033333][T21345] tipc: Failed to remove unknown binding: 66,0,0/0:2872389950/2872389952 [ 1702.033362][T21345] tipc: Failed to remove unknown binding: 66,0,0/0:2872389950/2872389951 [ 1702.872276][T21358] loop7: detected capacity change from 0 to 7 [ 1703.027593][ T11] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.027917][ T11] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043361][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043396][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043530][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043554][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043596][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043621][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043700][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043724][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043784][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043808][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043853][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043877][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.043900][T21358] ldm_validate_partition_table(): Disk read failed. [ 1703.043935][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.043966][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.044002][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.044026][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.044059][T21358] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 1703.044081][T21358] Buffer I/O error on dev loop7, logical block 0, async page read [ 1703.044130][T21358] Dev loop7: unable to read RDB block 0 [ 1703.044254][T21358] loop7: unable to read partition table [ 1703.044455][T21358] loop7: partition table beyond EOD, truncated [ 1703.044494][T21358] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1703.064116][ T5628] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1703.227688][ T5628] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1703.235090][ T5628] usb 7-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 1703.235144][ T5628] usb 7-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1703.235172][ T5628] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1703.241075][ T5628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.241104][ T5628] usb 7-1: Product: syz [ 1703.241119][ T5628] usb 7-1: Manufacturer: syz [ 1703.241132][ T5628] usb 7-1: SerialNumber: syz [ 1703.551589][ T5628] cdc_ether 7-1:1.0: GUID doesn't match [ 1703.567063][ T5628] usb 7-1: USB disconnect, device number 89 [ 1703.614166][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4644'. [ 1707.626356][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4658'. [ 1707.640420][T21407] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1708.497926][ T42] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1708.578012][T17467] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1708.649152][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1708.650321][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.650353][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.650367][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1708.650391][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.653893][ T42] usb 3-1: config 0 descriptor?? [ 1708.754811][T17467] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1708.756196][T17467] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.756222][T17467] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1708.787237][T17467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1708.787255][T17467] usb 7-1: Product: syz [ 1708.787263][T17467] usb 7-1: Manufacturer: syz [ 1708.817965][ T9718] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1708.968061][ T9718] usb 6-1: Using ep0 maxpacket: 32 [ 1708.979036][ T9718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1708.979092][ T9718] usb 6-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 1708.984592][ T9718] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1708.984631][ T9718] usb 6-1: can't read configurations, error -71 [ 1709.025532][T17467] usb 7-1: USB disconnect, device number 90 [ 1709.076904][ T42] hid_parser_main: 31 callbacks suppressed [ 1709.076930][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.076963][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.076990][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077016][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077042][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077068][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077094][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077120][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077145][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.077169][ T42] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1709.117284][ T42] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1710.533307][T21452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4677'. [ 1710.827343][ T9718] usb 3-1: USB disconnect, device number 38 [ 1710.987974][T12969] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1711.161742][T12969] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1711.162888][T12969] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.164533][T12969] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1711.164560][T12969] usb 6-1: Product: syz [ 1711.164573][T12969] usb 6-1: Manufacturer: syz [ 1711.243365][T12969] usb 6-1: selecting invalid altsetting 1 [ 1711.243550][T12969] dvb_ttusb_budget: ttusb_init_controller: error [ 1711.243566][T12969] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1711.350517][T12969] DVB: Unable to find symbol cx22700_attach() [ 1711.550716][T12969] DVB: Unable to find symbol tda10046_attach() [ 1711.550735][T12969] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1711.888106][T12969] usb 6-1: USB disconnect, device number 6 [ 1715.099233][ T5628] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1715.208019][T17467] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1715.248685][ T5628] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1715.251017][ T5628] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.251054][ T5628] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1715.252795][ T5628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1715.252821][ T5628] usb 7-1: Product: syz [ 1715.252835][ T5628] usb 7-1: Manufacturer: syz [ 1715.371227][T17467] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1715.372734][T17467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.372783][T17467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.381449][T17467] usb 3-1: config 0 descriptor?? [ 1715.530080][ T9718] usb 7-1: USB disconnect, device number 91 [ 1715.747957][T15037] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1715.793563][T21488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1715.797165][T21488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1715.847457][T17467] usbhid 3-1:0.0: can't add hid device: -71 [ 1715.850223][T17467] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1715.910572][T15037] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1715.912433][T15037] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.915116][T15037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1715.915142][T15037] usb 6-1: Product: syz [ 1715.915154][T15037] usb 6-1: Manufacturer: syz [ 1715.956167][T17467] usb 3-1: USB disconnect, device number 39 [ 1716.003541][T15037] usb 6-1: selecting invalid altsetting 1 [ 1716.003711][T15037] dvb_ttusb_budget: ttusb_init_controller: error [ 1716.003726][T15037] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1716.100420][T15037] DVB: Unable to find symbol cx22700_attach() [ 1716.157745][T15037] DVB: Unable to find symbol tda10046_attach() [ 1716.157948][T15037] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1716.310703][T17467] usb 6-1: USB disconnect, device number 7 [ 1717.459113][T17467] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1717.608444][T17467] usb 7-1: Using ep0 maxpacket: 32 [ 1717.610592][T17467] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1717.610628][T17467] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1717.611954][T17467] usb 7-1: config 14 has an invalid interface number: 228 but max is 0 [ 1717.611971][T17467] usb 7-1: config 14 has no interface number 0 [ 1717.611998][T17467] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1717.612014][T17467] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1717.612028][T17467] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1717.612042][T17467] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1717.612057][T17467] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.612071][T17467] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1717.617285][T17467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.617303][T17467] usb 7-1: Product: syz [ 1717.617312][T17467] usb 7-1: Manufacturer: syz [ 1717.617320][T17467] usb 7-1: SerialNumber: syz [ 1718.007999][T15037] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1718.117034][T17467] legousbtower 7-1:14.228: interrupt endpoints not found [ 1718.158590][T15037] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1718.162419][T15037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.162475][T15037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.205099][T15037] usb 3-1: config 0 descriptor?? [ 1718.497967][T17467] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1718.635270][T21550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.637169][T21550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.656999][T17467] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1718.674333][T17467] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.681098][T17467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1718.681126][T17467] usb 6-1: Product: syz [ 1718.681141][T17467] usb 6-1: Manufacturer: syz [ 1718.722808][T15037] usbhid 3-1:0.0: can't add hid device: -71 [ 1718.722933][T15037] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1718.767084][T15037] usb 3-1: USB disconnect, device number 40 [ 1718.818760][T17467] usb 6-1: selecting invalid altsetting 1 [ 1718.818860][T17467] dvb_ttusb_budget: ttusb_init_controller: error [ 1718.818871][T17467] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1719.051481][T17467] DVB: Unable to find symbol cx22700_attach() [ 1719.141989][T17467] DVB: Unable to find symbol tda10046_attach() [ 1719.142002][T17467] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1719.174111][T17467] usb 6-1: USB disconnect, device number 8 [ 1719.542088][ T36] audit: type=1326 audit(1790177516.390:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21561 comm="syz.4.4720" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x0 [ 1721.378953][T17467] usb 7-1: USB disconnect, device number 92 [ 1721.608534][T12405] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1721.808290][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1721.810085][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1721.810109][T12405] usb 6-1: can't read configurations, error -61 [ 1721.939240][T12405] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1722.100790][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1722.103319][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1722.103358][T12405] usb 6-1: can't read configurations, error -61 [ 1722.103806][T12405] usb usb6-port1: attempt power cycle [ 1722.477936][T12405] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1722.500751][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1722.503109][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1722.503150][T12405] usb 6-1: can't read configurations, error -61 [ 1722.629412][T12405] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1722.651675][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1722.656739][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1722.656779][T12405] usb 6-1: can't read configurations, error -61 [ 1722.657455][T12405] usb usb6-port1: unable to enumerate USB device [ 1723.648792][ T5628] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1723.810128][ T5628] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1723.811362][ T5628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.811412][ T5628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.849609][ T5628] usb 7-1: config 0 descriptor?? [ 1724.274991][T21599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.276628][T21599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.296097][ T5628] usbhid 7-1:0.0: can't add hid device: -71 [ 1724.296224][ T5628] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1725.150306][ T5628] usb 7-1: USB disconnect, device number 93 [ 1725.478125][ T42] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1725.540016][ T36] audit: type=1326 audit(1790177522.390:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21617 comm="syz.5.4740" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x0 [ 1725.595276][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.595300][T21624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.629172][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1725.630357][ T42] usb 3-1: New USB device found, idVendor=1f8a, idProduct=0000, bcdDevice= 0.00 [ 1725.631910][ T42] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1725.631931][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1725.631950][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.642365][ T42] usb 3-1: config 0 descriptor?? [ 1725.686205][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.686235][T21624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1726.211369][ T42] input: HID 1f8a:0000 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1F8A:0000.0026/input/input106 [ 1726.465454][ T42] hid-generic 0003:1F8A:0000.0026: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1f8a:0000] on usb-dummy_hcd.2-1/input0 [ 1726.479497][ T42] usb 3-1: USB disconnect, device number 41 [ 1726.739695][T21630] fido_id[21630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1727.327977][ T5628] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1727.478522][ T5628] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1727.479621][ T5628] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1727.479648][ T5628] usb 3-1: config 0 has no interface number 0 [ 1727.479700][ T5628] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1727.481930][ T5628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.481958][ T5628] usb 3-1: Product: syz [ 1727.481972][ T5628] usb 3-1: Manufacturer: syz [ 1727.481986][ T5628] usb 3-1: SerialNumber: syz [ 1727.485964][ T5628] usb 3-1: config 0 descriptor?? [ 1727.507980][ T42] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1727.689366][ T42] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1727.693232][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1727.693272][ T42] usb 7-1: can't read configurations, error -61 [ 1727.818004][ T42] usb 7-1: new full-speed USB device number 95 using dummy_hcd [ 1727.969400][ T42] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1727.974978][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1727.975020][ T42] usb 7-1: can't read configurations, error -61 [ 1727.980776][ T42] usb usb7-port1: attempt power cycle [ 1728.303908][ T5628] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1728.317912][ T42] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 1728.405751][ T42] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1728.417745][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1728.417981][ T42] usb 7-1: can't read configurations, error -61 [ 1728.506151][ T5628] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1728.506173][ T5628] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1728.506343][ T5628] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1728.541891][ T5628] usb 3-1: USB disconnect, device number 42 [ 1728.598148][ T42] usb 7-1: new full-speed USB device number 97 using dummy_hcd [ 1728.619656][ T42] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1728.621819][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1728.621860][ T42] usb 7-1: can't read configurations, error -61 [ 1728.622350][ T42] usb usb7-port1: unable to enumerate USB device [ 1730.245991][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1730.255410][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.303546][T21673] bridge_slave_1 (unregistering): left allmulticast mode [ 1730.303584][T21673] bridge_slave_1 (unregistering): left promiscuous mode [ 1730.303691][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.460409][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.460477][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.727928][T12969] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1730.891343][T12969] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1730.895635][T12969] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.895685][T12969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.938497][T12969] usb 6-1: config 0 descriptor?? [ 1731.379663][T21677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.381324][T21677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1731.481264][ T36] audit: type=1326 audit(1790177528.310:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21680 comm="syz.6.4763" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x0 [ 1731.553864][T12969] usbhid 6-1:0.0: can't add hid device: -71 [ 1731.553990][T12969] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1731.613733][T12969] usb 6-1: USB disconnect, device number 13 [ 1733.349794][ T42] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1733.500628][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1733.503700][ T42] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1733.503740][ T42] usb 6-1: can't read configurations, error -61 [ 1733.638063][ T42] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1734.803697][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1735.109112][T21724] trusted_key: encrypted_key: key user:syz not found [ 1735.352015][ T42] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1735.352258][ T42] usb 6-1: can't read configurations, error -61 [ 1735.489690][ T42] usb usb6-port1: attempt power cycle [ 1735.857984][ T42] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1735.879165][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1735.880866][ T42] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1735.880906][ T42] usb 6-1: can't read configurations, error -61 [ 1735.987977][ T5628] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1736.008042][ T42] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1736.029050][ T42] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1736.030721][ T42] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1736.030760][ T42] usb 6-1: can't read configurations, error -61 [ 1736.031195][ T42] usb usb6-port1: unable to enumerate USB device [ 1736.150564][ T5628] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1736.168443][ T5628] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.168470][ T5628] usb 7-1: Product: syz [ 1736.168486][ T5628] usb 7-1: Manufacturer: syz [ 1736.168494][ T5628] usb 7-1: SerialNumber: syz [ 1736.176917][ T5628] usb 7-1: config 0 descriptor?? [ 1736.215998][T21731] netlink: 'syz.5.4782': attribute type 1 has an invalid length. [ 1736.216025][T21731] netlink: 'syz.5.4782': attribute type 22 has an invalid length. [ 1736.235405][ T5628] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1737.056907][ T5628] gspca_sunplus: reg_w_riv err -71 [ 1737.057007][ T5628] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1737.103392][ T5628] usb 7-1: USB disconnect, device number 98 [ 1737.109799][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4787'. [ 1738.099103][T12969] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1738.209626][ T36] audit: type=1326 audit(1790177535.060:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21758 comm="syz.4.4791" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x0 [ 1738.258780][T12969] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1738.261532][T12969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.261567][T12969] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.261606][T12969] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.356022][T12969] usb 7-1: config 0 descriptor?? [ 1738.824454][T12969] hid_parser_main: 5 callbacks suppressed [ 1738.824484][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824518][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824547][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824574][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824601][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824628][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.824655][T12969] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 1738.934084][T12969] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1739.478393][T12969] cp2112 0003:10C4:EA90.0027: Part Number: 0x00 Device Version: 0x00 [ 1740.263944][T12969] cp2112 0003:10C4:EA90.0027: error reading lock byte: -71 [ 1740.275895][T12969] usb 7-1: USB disconnect, device number 99 [ 1740.687925][ T42] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1740.838368][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 1740.840742][ T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1740.842316][ T42] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1740.842345][ T42] usb 3-1: config 0 has no interface number 0 [ 1740.842390][ T42] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1740.842413][ T42] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1740.842440][ T42] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1740.842467][ T42] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1740.927670][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.927702][ T42] usb 3-1: Product: syz [ 1740.927718][ T42] usb 3-1: Manufacturer: syz [ 1740.927733][ T42] usb 3-1: SerialNumber: syz [ 1740.977894][T12969] usb 7-1: new full-speed USB device number 100 using dummy_hcd [ 1741.061126][ T42] usb 3-1: config 0 descriptor?? [ 1741.108325][ T42] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input107 [ 1741.165297][ C1] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 1741.187115][T12969] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1741.197422][T12969] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1741.197460][T12969] usb 7-1: can't read configurations, error -71 [ 1741.319700][ C1] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 1741.378006][ T42] usb 3-1: USB disconnect, device number 43 [ 1742.176048][T21812] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4799'. [ 1742.318878][ T42] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1742.467870][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 1742.468714][ T42] usb 3-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 1742.472041][ T42] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30 [ 1742.472087][ T42] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.472113][ T42] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.472135][ T42] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1742.472163][ T42] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1742.472197][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.495134][ T42] usb 3-1: config 0 descriptor?? [ 1743.410620][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 1743.410737][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1743.441505][ T42] usb 3-1: USB disconnect, device number 44 [ 1743.958863][ T36] audit: type=1326 audit(1790177540.810:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21818 comm="syz.7.4811" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x0 [ 1744.314758][T21843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1744.468394][T21848] netlink: 'syz.2.4819': attribute type 1 has an invalid length. [ 1744.557940][ T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1744.717969][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1744.718952][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1744.720345][ T10] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1744.720377][ T10] usb 7-1: config 0 has no interface number 0 [ 1744.720413][ T10] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1744.720431][ T10] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1744.720454][ T10] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1744.720478][ T10] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1744.723541][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.723566][ T10] usb 7-1: Product: syz [ 1744.723580][ T10] usb 7-1: Manufacturer: syz [ 1744.723593][ T10] usb 7-1: SerialNumber: syz [ 1744.886029][ T10] usb 7-1: config 0 descriptor?? [ 1744.902687][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input108 [ 1745.062071][ C1] bcm5974 7-1:0.119: trackpad urb failed: -1 [ 1745.285402][ T10] usb 7-1: USB disconnect, device number 102 [ 1748.557348][ T36] audit: type=1326 audit(1790177545.400:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.585452][ T36] audit: type=1326 audit(1790177545.400:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.585503][ T36] audit: type=1326 audit(1790177545.410:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.638857][ T36] audit: type=1326 audit(1790177545.430:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.639175][ T36] audit: type=1326 audit(1790177545.490:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.639218][ T36] audit: type=1326 audit(1790177545.490:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.639644][ T36] audit: type=1326 audit(1790177545.490:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.644324][ T36] audit: type=1326 audit(1790177545.490:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1748.644587][ T36] audit: type=1326 audit(1790177545.490:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.7.4839" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1749.809337][T21917] fuse: fd is not a fuse device [ 1749.973708][ T36] audit: type=1326 audit(1790177546.830:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1749.973857][ T36] audit: type=1326 audit(1790177546.830:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.026761][ T36] audit: type=1326 audit(1790177546.870:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.026800][ T36] audit: type=1326 audit(1790177546.870:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.026822][ T36] audit: type=1326 audit(1790177546.870:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.044497][ T36] audit: type=1326 audit(1790177546.890:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.044537][ T36] audit: type=1326 audit(1790177546.890:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.044559][ T36] audit: type=1326 audit(1790177546.890:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.044583][ T36] audit: type=1326 audit(1790177546.890:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1750.044605][ T36] audit: type=1326 audit(1790177546.890:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21920 comm="syz.4.4849" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9221ee159 code=0x7ffc0000 [ 1751.178227][ T42] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1751.330932][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 1751.331795][ T42] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1751.333875][ T42] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 1751.333912][ T42] usb 6-1: config 0 has no interface number 0 [ 1751.333945][ T42] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1751.333957][ T42] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1751.333971][ T42] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1751.333985][ T42] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1751.336218][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.336241][ T42] usb 6-1: Product: syz [ 1751.336250][ T42] usb 6-1: Manufacturer: syz [ 1751.336257][ T42] usb 6-1: SerialNumber: syz [ 1751.340655][ T42] usb 6-1: config 0 descriptor?? [ 1751.502958][ T42] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input109 [ 1751.768115][ T9718] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1751.880298][ T42] usb 6-1: USB disconnect, device number 18 [ 1752.008331][ T9718] usb 7-1: Using ep0 maxpacket: 16 [ 1752.009471][ T9718] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1752.013686][ T9718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.013722][ T9718] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.013744][ T9718] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1752.013785][ T9718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.101127][ T9718] usb 7-1: config 0 descriptor?? [ 1752.232967][T21946] binder: 21945:21946 ioctl c018620c 200000000000 returned -22 [ 1752.867716][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868164][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868198][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868225][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868251][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868277][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868299][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868325][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868365][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.868392][ T9718] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1752.953226][ T9718] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0028/input/input110 [ 1754.557494][ T9718] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1754.697261][ T9718] usb 7-1: USB disconnect, device number 103 [ 1754.724582][T21952] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1755.017416][ T36] kauditd_printk_skb: 51 callbacks suppressed [ 1755.017436][ T36] audit: type=1326 audit(1790177551.860:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.017479][ T36] audit: type=1326 audit(1790177551.860:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.017517][ T36] audit: type=1326 audit(1790177551.860:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.026793][ T36] audit: type=1326 audit(1790177551.870:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.026846][ T36] audit: type=1326 audit(1790177551.870:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.026887][ T36] audit: type=1326 audit(1790177551.870:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.042339][ T36] audit: type=1326 audit(1790177551.890:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.042392][ T36] audit: type=1326 audit(1790177551.890:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.042430][ T36] audit: type=1326 audit(1790177551.890:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.048375][ T36] audit: type=1326 audit(1790177551.890:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21959 comm="syz.6.4862" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f27ff0de159 code=0x7ffc0000 [ 1755.138583][T21960] fido_id[21960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1755.668211][T21964] random: crng reseeded on system resumption [ 1755.985201][T21964] hwrng_fill thread creation failed [ 1757.253634][ T9486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1757.370636][ T9486] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1757.382663][ T9486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1757.396959][ T9486] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1757.425286][ T9486] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1759.819555][T16157] Bluetooth: hci3: command tx timeout [ 1760.438076][T12405] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1760.609978][T12405] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1760.611653][T12405] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.716098][T12405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1760.716129][T12405] usb 7-1: Product: syz [ 1760.716144][T12405] usb 7-1: Manufacturer: syz [ 1760.985208][T12405] usb 7-1: selecting invalid altsetting 1 [ 1761.349515][T12405] dvb_ttusb_budget: ttusb_init_controller: error [ 1761.349541][T12405] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1761.527012][T12405] DVB: Unable to find symbol cx22700_attach() [ 1761.632157][T12405] DVB: Unable to find symbol tda10046_attach() [ 1761.632176][T12405] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1761.889510][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 1761.889531][ T36] audit: type=1800 audit(1790177558.730:1791): pid=22038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.4882" name=08 dev="sda1" ino=2081 res=0 errno=0 [ 1761.898579][T16157] Bluetooth: hci3: command tx timeout [ 1762.412441][T15037] usb 7-1: USB disconnect, device number 104 [ 1762.590851][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4886'. [ 1762.592246][T21976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.592393][T21976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.654850][T21976] bridge_slave_0: entered allmulticast mode [ 1762.674886][T21976] bridge_slave_0: entered promiscuous mode [ 1762.696855][T21976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.699416][T21976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.713129][T21976] bridge_slave_1: entered allmulticast mode [ 1762.740154][T21976] bridge_slave_1: entered promiscuous mode [ 1762.897561][T21976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.898528][T22052] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1762.923880][T21976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1763.061591][T21976] team0: Port device team_slave_0 added [ 1763.079775][T21976] team0: Port device team_slave_1 added [ 1763.220820][T21976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1763.220840][T21976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.220867][T21976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1763.227618][T21976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1763.227638][T21976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1763.227665][T21976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.657268][T21976] hsr_slave_0: entered promiscuous mode [ 1763.680510][T21976] hsr_slave_1: entered promiscuous mode [ 1763.682086][T21976] debugfs: 'hsr0' already exists in 'hsr' [ 1763.682153][T21976] Cannot create hsr debugfs directory [ 1763.997594][T16157] Bluetooth: hci3: command tx timeout [ 1764.227957][T15037] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1764.397501][T15037] usb 6-1: Using ep0 maxpacket: 32 [ 1764.422501][T15037] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1764.422562][T15037] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1764.423787][T15037] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1764.423812][T15037] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1764.423833][T15037] usb 6-1: config 14 has no interface number 0 [ 1764.423850][T15037] usb 6-1: config 14 has no interface number 1 [ 1764.423921][T15037] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1764.423946][T15037] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1764.423972][T15037] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1764.423995][T15037] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1764.424021][T15037] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1764.424046][T15037] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.424072][T15037] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1764.424091][T15037] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1764.559949][T15037] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.559979][T15037] usb 6-1: Product: syz [ 1764.559994][T15037] usb 6-1: Manufacturer: syz [ 1764.560007][T15037] usb 6-1: SerialNumber: syz [ 1764.758655][T22069] binder: 22067:22069 ioctl c0306201 200000000080 returned -14 [ 1765.028995][T15037] legousbtower 6-1:14.57: interrupt endpoints not found [ 1765.113534][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1765.420428][T15037] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1765.434789][T15037] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1765.575431][T21976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.014975][T22086] usb 6-1: LEGO USB Tower reset control request failed [ 1766.017118][ T10] usb 6-1: USB disconnect, device number 19 [ 1766.047986][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1766.058385][T16157] Bluetooth: hci3: command tx timeout [ 1766.242913][T15037] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1766.281897][T21976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.381518][T15037] usb 3-1: device descriptor read/64, error -71 [ 1766.664308][T22098] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl816) [ 1766.668037][T15037] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1766.797947][T15037] usb 3-1: device descriptor read/64, error -71 [ 1766.815455][T21976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.908444][T15037] usb usb3-port1: attempt power cycle [ 1767.171852][T22106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4908'. [ 1767.287943][T15037] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1767.381265][T15037] usb 3-1: device descriptor read/8, error -71 [ 1767.411232][T21976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.618059][T15037] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1767.638685][T15037] usb 3-1: device descriptor read/8, error -71 [ 1767.893845][T15037] usb usb3-port1: unable to enumerate USB device [ 1768.699410][T21976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1768.731588][T21976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1768.732569][T21976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1768.760857][T21976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1768.761913][T21976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1768.800831][T21976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1768.801874][T21976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1768.856761][T21976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1769.091943][T21976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.118987][T21976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.128686][T15981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.130196][T15981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.159286][T15985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.159423][T15985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.558976][ T9486] Bluetooth: hci5: command 0x1003 tx timeout [ 1770.561860][T16157] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1771.816304][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4919'. [ 1772.299840][T21976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1773.172252][T21976] veth0_vlan: entered promiscuous mode [ 1773.265842][T21976] veth1_vlan: entered promiscuous mode [ 1773.587253][T22184] usb usb1: usbfs: process 22184 (syz.6.4927) did not claim interface 0 before use [ 1773.741078][T21976] veth0_macvtap: entered promiscuous mode [ 1773.769599][T21976] veth1_macvtap: entered promiscuous mode [ 1773.843420][T21976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1773.917662][T21976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.996348][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4930'. [ 1774.075504][T22194] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1776.024246][T22206] overlayfs: failed to resolve './file2': -2 [ 1776.372711][T16007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.373837][T16007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.375331][T16007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.375653][T16007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1778.734229][T18780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1778.734251][T18780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1778.914208][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4941'. [ 1779.170957][T15987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.170981][T15987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.526184][T22240] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1779.914946][T22246] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4945'. [ 1780.505203][T22258] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl816) [ 1780.784843][T22269] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1780.867693][T22274] FAULT_INJECTION: forcing a failure. [ 1780.867693][T22274] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.881994][T22274] CPU: 1 UID: 0 PID: 22274 Comm: syz.5.4955 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1780.882030][T22274] Tainted: [L]=SOFTLOCKUP [ 1780.882038][T22274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1780.882052][T22274] Call Trace: [ 1780.882061][T22274] [ 1780.882071][T22274] dump_stack_lvl+0xe8/0x150 [ 1780.882109][T22274] should_fail_ex+0x46b/0x600 [ 1780.882141][T22274] should_failslab+0xa8/0x100 [ 1780.882176][T22274] __kmalloc_cache_noprof+0xa1/0x680 [ 1780.882211][T22274] ? pcpu_alloc_noprof+0xdae/0x18d0 [ 1780.882240][T22274] ? shrinker_alloc+0x59/0xbc0 [ 1780.882260][T22274] ? shrinker_alloc+0x59/0xbc0 [ 1780.882287][T22274] shrinker_alloc+0x59/0xbc0 [ 1780.882311][T22274] ? __rt_spin_lock_init+0x3e/0x50 [ 1780.882346][T22274] sget_fc+0xe41/0x1a60 [ 1780.882378][T22274] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1780.882405][T22274] ? __pfx_sget_fc+0x10/0x10 [ 1780.882432][T22274] ? rcu_is_watching+0x16/0xb0 [ 1780.882462][T22274] ? cap_capable+0x123/0x460 [ 1780.882487][T22274] ? __pfx_ramfs_fill_super+0x10/0x10 [ 1780.882519][T22274] get_tree_nodev+0x2a/0x150 [ 1780.882545][T22274] vfs_get_tree+0x92/0x2a0 [ 1780.882572][T22274] vfs_cmd_create+0xa2/0x200 [ 1780.882605][T22274] __se_sys_fsconfig+0x6bf/0x810 [ 1780.882640][T22274] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1780.882673][T22274] ? rcu_is_watching+0x16/0xb0 [ 1780.882708][T22274] ? __x64_sys_fsconfig+0x20/0xc0 [ 1780.882739][T22274] do_syscall_64+0x166/0x520 [ 1780.882760][T22274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.882780][T22274] ? clear_bhb_loop+0x70/0xc0 [ 1780.882805][T22274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.882826][T22274] RIP: 0033:0x7fe68135e159 [ 1780.882847][T22274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1780.882866][T22274] RSP: 002b:00007fe67f5b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1780.882889][T22274] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68135e159 [ 1780.882906][T22274] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 1780.882918][T22274] RBP: 00007fe6813f506b R08: 0000000000000000 R09: 0000000000000000 [ 1780.882932][T22274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1780.882945][T22274] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007ffd57d78b58 [ 1780.882980][T22274] [ 1780.887190][T22277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1781.450209][T22287] input: syz0 as /devices/virtual/input/input111 [ 1782.011360][ T36] audit: type=1326 audit(1790177578.860:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.011553][ T36] audit: type=1326 audit(1790177578.860:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.011680][ T36] audit: type=1326 audit(1790177578.860:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.012697][ T36] audit: type=1326 audit(1790177578.860:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.013351][ T36] audit: type=1326 audit(1790177578.860:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.013555][ T36] audit: type=1326 audit(1790177578.860:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d34c1f9c7 code=0x7ffc0000 [ 1782.013890][ T36] audit: type=1326 audit(1790177578.860:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.014214][ T36] audit: type=1326 audit(1790177578.860:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.014623][ T36] audit: type=1326 audit(1790177578.860:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.121811][ T36] audit: type=1326 audit(1790177578.900:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22279 comm="syz.7.4959" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1782.218031][T12405] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 1782.237901][ T10] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 1782.369117][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1782.378872][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1782.378909][T12405] usb 6-1: can't read configurations, error -61 [ 1782.414064][T22307] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1782.448691][ T10] usb 7-1: New USB device found, idVendor=04b4, idProduct=931f, bcdDevice= 0.40 [ 1782.451092][ T10] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1782.453429][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.453456][ T10] usb 7-1: Product: syz [ 1782.453472][ T10] usb 7-1: Manufacturer: syz [ 1782.453486][ T10] usb 7-1: SerialNumber: syz [ 1782.507901][T12405] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1782.683412][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1782.719947][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1782.719987][T12405] usb 6-1: can't read configurations, error -61 [ 1782.720435][T12405] usb usb6-port1: attempt power cycle [ 1782.731739][T22311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4969'. [ 1782.766178][ T10] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1782.834207][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880324d6800: rx timeout, send abort [ 1782.869545][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1782.871034][ T10] usb 7-1: can't set first interface for hiFace device. [ 1782.871072][ T10] snd-usb-hiface 7-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1782.922346][ T10] usb 7-1: can't set first interface for hiFace device. [ 1782.922386][ T10] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 1782.926393][ T10] usb 7-1: can't set first interface for hiFace device. [ 1782.926418][ T10] snd-usb-hiface 7-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 1782.961909][ T10] usb 7-1: USB disconnect, device number 105 [ 1782.975852][T21304] udevd[21304]: setting owner of /dev/bus/usb/007/105 to uid=0, gid=0 failed: No such file or directory [ 1783.018792][T21304] udevd[21304]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1783.058082][T12405] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1783.079177][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1783.080650][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1783.080681][T12405] usb 6-1: can't read configurations, error -61 [ 1783.394252][T12405] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1783.409861][T12405] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1783.411595][T12405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1783.411634][T12405] usb 6-1: can't read configurations, error -61 [ 1783.413572][T12405] usb usb6-port1: unable to enumerate USB device [ 1784.328230][T22328] random: crng reseeded on system resumption [ 1784.637830][T22328] hwrng_fill thread creation failed [ 1784.727932][T17467] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1784.883581][T17467] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1784.883631][T17467] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1784.884696][T17467] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.884721][T17467] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1784.884764][T17467] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 145, changing to 7 [ 1784.884779][T17467] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 58464, setting to 1024 [ 1784.884793][T17467] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1784.886963][T17467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.886989][T17467] usb 3-1: Product: syz [ 1784.886997][T17467] usb 3-1: Manufacturer: syz [ 1784.887005][T17467] usb 3-1: SerialNumber: syz [ 1785.259799][T17467] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 1785.328403][T17467] usb 3-1: incorrect wMaxPacketSize 0x1c00 for BADD profile [ 1785.570117][T17467] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1785.593612][T17467] usb 3-1: USB disconnect, device number 49 [ 1785.649186][T21304] udevd[21304]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1785.937040][T22344] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1786.240660][T22351] FAULT_INJECTION: forcing a failure. [ 1786.240660][T22351] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.240706][T22351] CPU: 0 UID: 0 PID: 22351 Comm: syz.5.4981 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1786.240738][T22351] Tainted: [L]=SOFTLOCKUP [ 1786.240746][T22351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1786.240760][T22351] Call Trace: [ 1786.240769][T22351] [ 1786.240778][T22351] dump_stack_lvl+0xe8/0x150 [ 1786.240817][T22351] should_fail_ex+0x46b/0x600 [ 1786.240851][T22351] should_failslab+0xa8/0x100 [ 1786.240885][T22351] __kvmalloc_node_noprof+0x176/0x890 [ 1786.240921][T22351] ? seq_read_iter+0x1eb/0xcb0 [ 1786.240952][T22351] ? seq_read_iter+0x1eb/0xcb0 [ 1786.240980][T22351] ? seq_read_iter+0xa5/0xcb0 [ 1786.241012][T22351] seq_read_iter+0x1eb/0xcb0 [ 1786.241057][T22351] proc_reg_read_iter+0x1bf/0x290 [ 1786.241089][T22351] vfs_read+0x59e/0xa90 [ 1786.241121][T22351] ? __pfx_vfs_read+0x10/0x10 [ 1786.241148][T22351] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1786.241185][T22351] ? mutex_lock_nested+0x152/0x1d0 [ 1786.241208][T22351] ? fdget_pos+0x252/0x320 [ 1786.241234][T22351] ksys_read+0x156/0x270 [ 1786.241258][T22351] ? __pfx_ksys_read+0x10/0x10 [ 1786.241298][T22351] do_syscall_64+0x166/0x520 [ 1786.241318][T22351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.241339][T22351] ? clear_bhb_loop+0x70/0xc0 [ 1786.241364][T22351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.241385][T22351] RIP: 0033:0x7fe68135e159 [ 1786.241405][T22351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.241424][T22351] RSP: 002b:00007fe67f5b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1786.241448][T22351] RAX: ffffffffffffffda RBX: 00007fe6815e5fa0 RCX: 00007fe68135e159 [ 1786.241464][T22351] RDX: 0000000000002020 RSI: 0000200000000200 RDI: 0000000000000003 [ 1786.241479][T22351] RBP: 00007fe6813f506b R08: 0000000000000000 R09: 0000000000000000 [ 1786.241492][T22351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1786.241505][T22351] R13: 00007fe6815e6038 R14: 00007fe6815e5fa0 R15: 00007ffd57d78b58 [ 1786.241541][T22351] [ 1786.313286][T22355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1786.888010][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1787.039856][ T1879] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1787.096029][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1787.124058][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1787.124100][ T10] usb 5-1: can't read configurations, error -61 [ 1787.142921][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 1787.142942][ T36] audit: type=1326 audit(1790177583.970:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.142984][ T36] audit: type=1326 audit(1790177583.970:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.143023][ T36] audit: type=1326 audit(1790177583.980:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.143061][ T36] audit: type=1326 audit(1790177583.980:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.143097][ T36] audit: type=1326 audit(1790177583.980:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.143134][ T36] audit: type=1326 audit(1790177583.980:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.143172][ T36] audit: type=1326 audit(1790177583.980:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe68135dec2 code=0x7ffc0000 [ 1787.189169][ T1879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1787.190576][ T1879] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1787.190601][ T1879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.190620][ T1879] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1787.190639][ T1879] usb 3-1: config 1 has no interface number 1 [ 1787.190680][ T1879] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1787.190718][ T1879] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1787.193205][ T1879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.193230][ T1879] usb 3-1: Product: syz [ 1787.193244][ T1879] usb 3-1: Manufacturer: syz [ 1787.193257][ T1879] usb 3-1: SerialNumber: syz [ 1787.325921][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1787.431541][ T36] audit: type=1326 audit(1790177584.000:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe68135dec2 code=0x7ffc0000 [ 1787.431597][ T36] audit: type=1326 audit(1790177584.000:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.431633][ T36] audit: type=1326 audit(1790177584.000:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22366 comm="syz.5.4989" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68135e159 code=0x7ffc0000 [ 1787.458435][T22378] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1787.572391][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1787.600132][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1787.600173][ T10] usb 5-1: can't read configurations, error -61 [ 1787.600565][ T10] usb usb5-port1: attempt power cycle [ 1787.715637][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4986'. [ 1787.817653][T22386] tipc: Failed to remove unknown binding: 66,0,0/0:3921243134/3921243136 [ 1787.817694][T22386] tipc: Failed to remove unknown binding: 66,0,0/0:3921243134/3921243135 [ 1787.866062][T22386] tipc: Failed to remove unknown binding: 66,0,0/0:3921243134/3921243136 [ 1787.866105][T22386] tipc: Failed to remove unknown binding: 66,0,0/0:3921243134/3921243135 [ 1787.936262][ T1879] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1787.936340][ T1879] usb 3-1: MIDIStreaming interface descriptor not found [ 1787.957882][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1788.006086][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1788.015999][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1788.016037][ T10] usb 5-1: can't read configurations, error -61 [ 1788.102891][ T1879] usb 3-1: USB disconnect, device number 50 [ 1788.147960][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1788.178892][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1788.182580][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1788.182614][ T10] usb 5-1: can't read configurations, error -61 [ 1788.199218][ T10] usb usb5-port1: unable to enumerate USB device [ 1788.281841][T20561] udevd[20561]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1788.565014][T22403] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4998'. [ 1789.785623][ T1879] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1790.266079][ T1879] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1790.553861][ T1879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1790.553914][ T1879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.553955][ T1879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.608654][ T1879] usb 3-1: config 0 descriptor?? [ 1790.752091][T22417] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1791.196470][T22430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1791.224183][ T1879] usb 3-1: string descriptor 0 read error: -22 [ 1791.533479][T22437] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.5009'. [ 1791.585408][ T1879] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0029/input/input112 [ 1791.588252][ T5878] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 1791.753893][ T5878] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1791.755658][ T5878] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.755711][ T5878] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1791.755738][ T5878] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1791.773945][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1791.773975][ T5878] usb 7-1: Product: syz [ 1791.773990][ T5878] usb 7-1: Manufacturer: syz [ 1791.774004][ T5878] usb 7-1: SerialNumber: syz [ 1791.811382][ T5878] usb 7-1: config 0 descriptor?? [ 1791.861568][ T1879] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1791.900522][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.900591][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.952075][ T5878] usb 7-1: no audio or video endpoints found [ 1792.188199][ T1879] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1792.338700][ T1879] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1792.339665][ T1879] usb 6-1: config 0 has no interfaces? [ 1792.339701][ T1879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.375541][ T1879] usb 6-1: config 0 descriptor?? [ 1792.394511][ T5878] usb 3-1: USB disconnect, device number 51 [ 1792.493147][T22451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1792.591698][ T1879] usb 7-1: USB disconnect, device number 106 [ 1793.106819][T22461] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5018'. [ 1793.134394][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 1793.134413][ T36] audit: type=1326 audit(1790177589.980:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.135197][ T36] audit: type=1326 audit(1790177589.980:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.135370][ T36] audit: type=1326 audit(1790177589.980:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.135782][ T36] audit: type=1326 audit(1790177589.980:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.135819][ T36] audit: type=1326 audit(1790177589.980:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.136624][ T36] audit: type=1326 audit(1790177589.980:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.136884][ T36] audit: type=1326 audit(1790177589.980:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.137210][ T36] audit: type=1326 audit(1790177589.980:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.140875][ T36] audit: type=1326 audit(1790177589.980:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.140918][ T36] audit: type=1326 audit(1790177589.980:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22462 comm="syz.7.5019" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d34c1e159 code=0x7ffc0000 [ 1793.147866][ T5878] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1793.300959][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1793.305400][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1793.305439][ T5878] usb 3-1: can't read configurations, error -61 [ 1793.428352][ T5878] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1793.578981][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1793.580608][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1793.580669][ T5878] usb 3-1: can't read configurations, error -61 [ 1793.581141][ T5878] usb usb3-port1: attempt power cycle [ 1793.747970][T12405] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1793.911347][T12405] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1793.938410][T12405] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.938439][T12405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1793.958664][T12405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1793.958693][T12405] usb 5-1: Product: syz [ 1793.958708][T12405] usb 5-1: Manufacturer: syz [ 1794.078027][ T5878] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1794.108376][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1794.111759][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1794.111801][ T5878] usb 3-1: can't read configurations, error -61 [ 1794.159763][T22472] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.5023'. [ 1794.195351][T12405] usb 5-1: USB disconnect, device number 15 [ 1794.317947][ T5878] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1794.339147][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1794.341056][ T5878] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1794.341094][ T5878] usb 3-1: can't read configurations, error -61 [ 1794.341708][ T5878] usb usb3-port1: unable to enumerate USB device [ 1794.978085][T12405] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1795.088075][ T1879] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1795.149417][T12405] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1795.150006][T12405] usb 7-1: config 0 has no interfaces? [ 1795.151657][T12405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1795.151683][T12405] usb 7-1: Product: syz [ 1795.151698][T12405] usb 7-1: Manufacturer: syz [ 1795.157575][T12405] usb 7-1: config 0 descriptor?? [ 1795.239988][ T1879] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1795.241596][ T1879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1795.243690][ T1879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1795.243718][ T1879] usb 5-1: Product: syz [ 1795.243728][ T1879] usb 5-1: Manufacturer: syz [ 1795.270962][ T1879] usb 5-1: selecting invalid altsetting 1 [ 1795.271121][ T1879] dvb_ttusb_budget: ttusb_init_controller: error [ 1795.271138][ T1879] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1795.337379][ T1879] DVB: Unable to find symbol cx22700_attach() [ 1795.360246][T12405] usb 6-1: USB disconnect, device number 24 [ 1795.438831][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5028'. [ 1795.444544][T17467] usb 7-1: USB disconnect, device number 107 [ 1795.526238][ T1879] DVB: Unable to find symbol tda10046_attach() [ 1795.526253][ T1879] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1795.693003][T22497] FAULT_INJECTION: forcing a failure. [ 1795.693003][T22497] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.693043][T22497] CPU: 0 UID: 0 PID: 22497 Comm: syz.7.5031 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1795.693071][T22497] Tainted: [L]=SOFTLOCKUP [ 1795.693078][T22497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1795.693091][T22497] Call Trace: [ 1795.693098][T22497] [ 1795.693107][T22497] dump_stack_lvl+0xe8/0x150 [ 1795.693152][T22497] should_fail_ex+0x46b/0x600 [ 1795.693183][T22497] ? __d_alloc+0x37/0x6f0 [ 1795.693206][T22497] should_failslab+0xa8/0x100 [ 1795.693238][T22497] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 1795.693265][T22497] ? __d_alloc+0x37/0x6f0 [ 1795.693291][T22497] __d_alloc+0x37/0x6f0 [ 1795.693315][T22497] d_alloc_pseudo+0x21/0xc0 [ 1795.693339][T22497] alloc_path_pseudo+0x107/0x220 [ 1795.693372][T22497] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 1795.693401][T22497] ? rt_spin_lock+0x1e2/0x400 [ 1795.693436][T22497] alloc_file_pseudo+0xa8/0x1e0 [ 1795.693469][T22497] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1795.693506][T22497] ? alloc_fd+0x654/0x6d0 [ 1795.693531][T22497] sock_alloc_file+0xb8/0x2f0 [ 1795.693556][T22497] ? __sys_socket+0x12b/0x1b0 [ 1795.693587][T22497] __sys_socket+0x13f/0x1b0 [ 1795.693617][T22497] __x64_sys_socket+0x7a/0x90 [ 1795.693647][T22497] do_syscall_64+0x166/0x520 [ 1795.693664][T22497] ? trace_irq_disable+0x3b/0x140 [ 1795.693690][T22497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.693708][T22497] ? clear_bhb_loop+0x70/0xc0 [ 1795.693730][T22497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.693750][T22497] RIP: 0033:0x7f8d34c1e159 [ 1795.693769][T22497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.693787][T22497] RSP: 002b:00007f8d32e76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1795.693808][T22497] RAX: ffffffffffffffda RBX: 00007f8d34ea5fa0 RCX: 00007f8d34c1e159 [ 1795.693824][T22497] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000028 [ 1795.693838][T22497] RBP: 00007f8d34cb506b R08: 0000000000000000 R09: 0000000000000000 [ 1795.693851][T22497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.693864][T22497] R13: 00007f8d34ea6038 R14: 00007f8d34ea5fa0 R15: 00007fff46e49f08 [ 1795.693896][T22497] [ 1795.962931][T17467] usb 5-1: USB disconnect, device number 16 [ 1797.287914][T12405] usb 7-1: new full-speed USB device number 108 using dummy_hcd [ 1797.442667][T12405] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1797.444787][T12405] usb 7-1: config 0 has no interfaces? [ 1797.444826][T12405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.473921][T12405] usb 7-1: config 0 descriptor?? [ 1797.709479][T17467] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1797.789954][T22549] batman_adv: batadv0: Adding interface: veth0 [ 1797.789974][T22549] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1797.790010][T22549] batman_adv: batadv0: Interface activated: veth0 [ 1797.945007][T17467] usb 6-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 1797.948873][T17467] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1797.948907][T17467] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1797.948941][T17467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.956062][T17467] usb 6-1: config 0 descriptor?? [ 1798.410452][T17467] wacom 0003:056A:003F.002A: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.5-1/input0 [ 1798.604142][ T5878] usb 6-1: USB disconnect, device number 25 [ 1798.797949][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1798.948578][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1798.950302][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.952203][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1798.952229][ T10] usb 3-1: Product: syz [ 1798.952237][ T10] usb 3-1: Manufacturer: syz [ 1799.001882][ T10] usb 3-1: selecting invalid altsetting 1 [ 1799.002049][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1799.002066][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1799.057361][ T10] DVB: Unable to find symbol cx22700_attach() [ 1799.090888][ T10] DVB: Unable to find symbol tda10046_attach() [ 1799.090907][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1806.348777][T22553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.348806][T22553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.424177][T22553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.424206][T22553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1806.448895][T22553] batman_adv: batadv0: Interface deactivated: veth0 [ 1806.448926][T22553] batman_adv: batadv0: Removing interface: veth0 [ 1806.858410][T17467] usb 3-1: USB disconnect, device number 56 [ 1807.042768][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 1807.042788][ T36] audit: type=1326 audit(1790177603.900:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.042828][ T36] audit: type=1326 audit(1790177603.900:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.042983][ T36] audit: type=1326 audit(1790177603.900:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.043142][ T36] audit: type=1326 audit(1790177603.900:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.043260][ T36] audit: type=1326 audit(1790177603.900:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.043620][ T36] audit: type=1326 audit(1790177603.900:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.043755][ T36] audit: type=1326 audit(1790177603.900:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.043875][ T36] audit: type=1326 audit(1790177603.900:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.044845][ T36] audit: type=1326 audit(1790177603.900:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.045040][ T36] audit: type=1326 audit(1790177603.900:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22579 comm="syz.2.5054" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc523ee159 code=0x7ffc0000 [ 1807.339815][T12969] usb 7-1: USB disconnect, device number 108 [ 1808.277956][T17467] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1808.357939][ T1879] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 1808.430284][T17467] usb 5-1: Using ep0 maxpacket: 16 [ 1808.432039][T17467] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1808.433966][T17467] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1808.433996][T17467] usb 5-1: config 0 has no interface number 0 [ 1808.434041][T17467] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1808.434066][T17467] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1808.445074][T17467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.445104][T17467] usb 5-1: Product: syz [ 1808.445118][T17467] usb 5-1: Manufacturer: syz [ 1808.445131][T17467] usb 5-1: SerialNumber: syz [ 1808.494063][T22603] net_ratelimit: 10 callbacks suppressed [ 1808.494086][T22603] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1808.497097][T17467] usb 5-1: config 0 descriptor?? [ 1808.500546][T22599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1808.500889][T22599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1808.511141][ T1879] usb 7-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1808.519868][ T1879] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1808.519904][ T1879] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1808.519985][ T1879] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1808.520020][ T1879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.680448][ T1879] usb 7-1: config 0 descriptor?? [ 1808.790524][T22599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1808.790712][T22599] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1809.007597][T17467] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1809.490135][T22600] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl816) [ 1809.886330][T17467] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1809.886628][T17467] asix 5-1:0.34: probe with driver asix failed with error -71 [ 1809.923803][T17467] usb 5-1: USB disconnect, device number 17 [ 1810.010291][ T1879] asus 0003:0B05:1807.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.6-1/input0 [ 1810.028206][ T1879] usb 7-1: USB disconnect, device number 109 [ 1810.102235][T22614] fido_id[22614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1810.559039][ T10] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 1810.718817][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1810.719717][ T10] usb 3-1: config 0 has no interfaces? [ 1810.719751][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.725020][ T10] usb 3-1: config 0 descriptor?? [ 1811.927951][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1812.082633][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1812.084453][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1812.084482][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.084503][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1812.084525][ T10] usb 5-1: config 1 has no interface number 1 [ 1812.084565][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1812.084603][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.087424][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.087452][ T10] usb 5-1: Product: syz [ 1812.087467][ T10] usb 5-1: Manufacturer: syz [ 1812.087481][ T10] usb 5-1: SerialNumber: syz [ 1812.815965][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 1813.832096][ T10] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1813.832160][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 1814.170381][ T10] usb 5-1: USB disconnect, device number 18 [ 1814.224235][ T1879] usb 3-1: USB disconnect, device number 57 [ 1814.495778][T22656] udevd[22656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1815.078335][ T1879] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1815.228744][ T1879] usb 3-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1815.230262][ T1879] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1815.230296][ T1879] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1815.230322][ T1879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1815.230354][ T1879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.246485][ T1879] usb 3-1: config 0 descriptor?? [ 1815.423840][ T10] usb 7-1: new full-speed USB device number 110 using dummy_hcd [ 1815.578879][ T10] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1815.580289][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.580343][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 1815.580371][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1815.582745][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1815.582773][ T10] usb 7-1: Product: syz [ 1815.582788][ T10] usb 7-1: Manufacturer: syz [ 1815.582803][ T10] usb 7-1: SerialNumber: syz [ 1815.656723][ T10] usb 7-1: config 0 descriptor?? [ 1815.680265][ T10] usb 7-1: no audio or video endpoints found [ 1815.737470][ T1879] asus 0003:0B05:1807.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:1807] on usb-dummy_hcd.2-1/input0 [ 1815.941970][T22660] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl816) [ 1815.949493][ T1879] usb 3-1: USB disconnect, device number 58 [ 1816.109714][ T10] usb 7-1: USB disconnect, device number 110 [ 1816.657914][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1816.989199][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1817.003219][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1817.003277][ T10] usb 5-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 1817.005652][ T10] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 1817.005679][ T10] usb 5-1: config 3 has an invalid interface number: 25 but max is 1 [ 1817.005698][ T10] usb 5-1: config 3 has an invalid interface number: 223 but max is 1 [ 1817.005717][ T10] usb 5-1: config 3 has no interface number 0 [ 1817.005733][ T10] usb 5-1: config 3 has no interface number 1 [ 1817.005787][ T10] usb 5-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1817.005808][ T10] usb 5-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1817.005834][ T10] usb 5-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 1817.005870][ T10] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1817.005895][ T10] usb 5-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1817.005920][ T10] usb 5-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 1817.005957][ T10] usb 5-1: config 3 interface 223 has no altsetting 1 [ 1817.005975][ T10] usb 5-1: config 3 interface 25 has no altsetting 0 [ 1817.118120][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.118149][ T10] usb 5-1: Product: syz [ 1817.118164][ T10] usb 5-1: Manufacturer: syz [ 1817.118178][ T10] usb 5-1: SerialNumber: syz [ 1817.425666][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.426670][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.448069][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.449156][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.652798][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.655937][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1817.737906][ T9719] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1817.888865][ T9719] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1817.889652][ T9719] usb 3-1: config 0 has no interfaces? [ 1817.889688][ T9719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.964975][ T9719] usb 3-1: config 0 descriptor?? [ 1818.387903][ T9719] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1818.538782][ T9719] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1818.540165][ T9719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.540199][ T9719] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.540221][ T9719] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.540260][ T9719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.580675][ T9719] usb 7-1: config 0 descriptor?? [ 1818.710595][ T10] usbtv 5-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 1818.824971][ T10] usb 5-1: USB disconnect, device number 19 [ 1819.513483][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1819.513857][ C1] raw-gadget.1 gadget.6: ignoring, device is not running [ 1819.514009][ T9719] usbhid 7-1:0.0: can't add hid device: -32 [ 1819.514110][ T9719] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1819.525607][ T9719] usb 7-1: USB disconnect, device number 111 [ 1820.558157][ T9719] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 1820.708697][ T9719] usb 7-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00 [ 1820.709837][ T9719] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1820.709869][ T9719] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1820.709893][ T9719] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1820.709921][ T9719] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.820948][ T9719] usb 7-1: config 0 descriptor?? [ 1820.847579][ T10] [ 1820.849971][ T10] ========================= [ 1820.854489][ T10] WARNING: held lock freed! [ 1820.859021][ T10] syzkaller #0 Tainted: G L [ 1820.865014][ T10] ------------------------- [ 1820.869521][ T10] kworker/0:1/10 is freeing memory ffff88807bc94000-ffff88807bc947ff, with a lock still held there! [ 1820.880296][ T10] ffff88807bc941d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1820.890414][ T10] locks held by kworker/0:1/10: 5, last CPU#0: [ 1820.896571][ T10] #0: ffff8880222b9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1820.907924][ T10] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1820.919796][ T10] #2: ffff888021f84210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1820.928680][ T10] #3: ffff88803e978210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 1820.937828][ T10] #4: ffff88807bc941d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1820.948380][ T10] [ 1820.948380][ T10] stack backtrace: [ 1820.954280][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1820.965593][ T10] Tainted: [L]=SOFTLOCKUP [ 1820.970021][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1820.980078][ T10] Workqueue: usb_hub_wq hub_event [ 1820.985116][ T10] Call Trace: [ 1820.988399][ T10] [ 1820.991333][ T10] dump_stack_lvl+0xe8/0x150 [ 1820.995931][ T10] debug_check_no_locks_freed+0x149/0x170 [ 1821.001658][ T10] kfree+0x12b/0x6d0 [ 1821.005562][ T10] ? device_release+0xc4/0x1f0 [ 1821.010361][ T10] ? __pfx_usb_release_interface+0x10/0x10 [ 1821.016177][ T10] device_release+0xc4/0x1f0 [ 1821.020775][ T10] kobject_put+0x222/0x550 [ 1821.025203][ T10] v4l2_device_disconnect+0x79/0xd0 [ 1821.030446][ T10] usbtv_video_free+0x25/0x30 [ 1821.035175][ T10] usbtv_disconnect+0x5c/0xa0 [ 1821.039862][ T10] usb_unbind_interface+0x295/0x9f0 [ 1821.045071][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1821.050800][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1821.056538][ T10] device_release_driver_internal+0x4f5/0x880 [ 1821.062613][ T10] bus_remove_device+0x449/0x560 [ 1821.067565][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 1821.073029][ T10] ? up_read+0x34/0x180 [ 1821.077184][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1821.082915][ T10] device_del+0x528/0x8f0 [ 1821.087272][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1821.093092][ T10] ? __pfx_device_del+0x10/0x10 [ 1821.097954][ T10] usb_disable_device+0x3d4/0x8d0 [ 1821.102993][ T10] usb_disconnect+0x32d/0x990 [ 1821.107679][ T10] hub_event+0x1bb7/0x4cf0 [ 1821.112099][ T10] ? __lock_acquire+0x747/0x2de0 [ 1821.117047][ T10] ? register_lock_class+0x31/0x2e0 [ 1821.122264][ T10] ? __pfx_hub_event+0x10/0x10 [ 1821.127030][ T10] ? rcu_is_watching+0x16/0xb0 [ 1821.131806][ T10] ? process_scheduled_works+0x97a/0x1630 [ 1821.137535][ T10] process_scheduled_works+0xc3d/0x1630 [ 1821.143103][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.149097][ T10] ? assign_work+0x3cf/0x5d0 [ 1821.153708][ T10] worker_thread+0xa47/0xfb0 [ 1821.158314][ T10] ? __kthread_parkme+0x71/0x1f0 [ 1821.163265][ T10] kthread+0x38b/0x470 [ 1821.167342][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1821.172490][ T10] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1821.177086][ T10] ret_from_fork+0x514/0xb70 [ 1821.181715][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.186830][ T10] ? __switch_to+0xc89/0x1420 [ 1821.191515][ T10] ? __pfx_kthread+0x10/0x10 [ 1821.196106][ T10] ret_from_fork_asm+0x1a/0x30 [ 1821.200881][ T10] [ 1821.228745][ T10] ================================================================== [ 1821.228762][ T10] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0 [ 1821.228791][ T10] Read of size 8 at addr ffff88807bc94008 by task kworker/0:1/10 [ 1821.228808][ T10] [ 1821.228822][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1821.228848][ T10] Tainted: [L]=SOFTLOCKUP [ 1821.228856][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1821.228871][ T10] Workqueue: usb_hub_wq hub_event [ 1821.228892][ T10] Call Trace: [ 1821.228900][ T10] [ 1821.228909][ T10] dump_stack_lvl+0xe8/0x150 [ 1821.228939][ T10] print_address_description+0x55/0x1e0 [ 1821.228966][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1821.228985][ T10] print_report+0x58/0x70 [ 1821.229009][ T10] kasan_report+0x117/0x150 [ 1821.229039][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1821.229063][ T10] usb_unbind_interface+0x2c2/0x9f0 [ 1821.229086][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1821.229116][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1821.229135][ T10] device_release_driver_internal+0x4f5/0x880 [ 1821.229167][ T10] bus_remove_device+0x449/0x560 [ 1821.229194][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 1821.229221][ T10] ? up_read+0x34/0x180 [ 1821.229240][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1821.229265][ T10] device_del+0x528/0x8f0 [ 1821.229289][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1821.229321][ T10] ? __pfx_device_del+0x10/0x10 [ 1821.229351][ T10] usb_disable_device+0x3d4/0x8d0 [ 1821.229383][ T10] usb_disconnect+0x32d/0x990 [ 1821.229410][ T10] hub_event+0x1bb7/0x4cf0 [ 1821.229430][ T10] ? __lock_acquire+0x747/0x2de0 [ 1821.229455][ T10] ? register_lock_class+0x31/0x2e0 [ 1821.229491][ T10] ? __pfx_hub_event+0x10/0x10 [ 1821.229511][ T10] ? rcu_is_watching+0x16/0xb0 [ 1821.229537][ T10] ? process_scheduled_works+0x97a/0x1630 [ 1821.229562][ T10] process_scheduled_works+0xc3d/0x1630 [ 1821.229599][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1821.229627][ T10] ? assign_work+0x3cf/0x5d0 [ 1821.229652][ T10] worker_thread+0xa47/0xfb0 [ 1821.229683][ T10] ? __kthread_parkme+0x71/0x1f0 [ 1821.229712][ T10] kthread+0x38b/0x470 [ 1821.229731][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1821.229755][ T10] ? __pfx_kthread+0x10/0x10 [ 1821.229774][ T10] ret_from_fork+0x514/0xb70 [ 1821.229795][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1821.229813][ T10] ? __switch_to+0xc89/0x1420 [ 1821.229840][ T10] ? __pfx_kthread+0x10/0x10 [ 1821.229859][ T10] ret_from_fork_asm+0x1a/0x30 [ 1821.229885][ T10] [ 1821.229893][ T10] [ 1821.229910][ T10] Allocated by task 10: [ 1821.229921][ T10] kasan_save_track+0x3e/0x80 [ 1821.229947][ T10] __kasan_kmalloc+0x93/0xb0 [ 1821.229972][ T10] __kmalloc_cache_noprof+0x3d5/0x680 [ 1821.229995][ T10] usb_set_configuration+0x3cc/0x2180 [ 1821.230012][ T10] usb_generic_driver_probe+0x8d/0x150 [ 1821.230039][ T10] usb_probe_device+0x1c3/0x3b0 [ 1821.230056][ T10] really_probe+0x254/0xae0 [ 1821.230073][ T10] __driver_probe_device+0x1e8/0x360 [ 1821.230088][ T10] driver_probe_device+0x4f/0x240 [ 1821.230105][ T10] __device_attach_driver+0x270/0x410 [ 1821.230121][ T10] bus_for_each_drv+0x25b/0x2f0 [ 1821.230142][ T10] __device_attach+0x2c7/0x450 [ 1821.230176][ T10] device_initial_probe+0xa1/0xd0 [ 1821.230202][ T10] bus_probe_device+0x12d/0x220 [ 1821.230222][ T10] device_add+0x7d7/0xb80 [ 1821.230243][ T10] usb_new_device+0x99a/0x1680 [ 1821.230264][ T10] hub_event+0x28cf/0x4cf0 [ 1821.230279][ T10] process_scheduled_works+0xc3d/0x1630 [ 1821.230302][ T10] worker_thread+0xa47/0xfb0 [ 1821.230326][ T10] kthread+0x38b/0x470 [ 1821.230341][ T10] ret_from_fork+0x514/0xb70 [ 1821.230356][ T10] ret_from_fork_asm+0x1a/0x30 [ 1821.230372][ T10] [ 1821.230376][ T10] Freed by task 10: [ 1821.230386][ T10] kasan_save_track+0x3e/0x80 [ 1821.230409][ T10] kasan_save_free_info+0x40/0x50 [ 1821.230429][ T10] __kasan_slab_free+0x5c/0x80 [ 1821.230452][ T10] kfree+0x1c5/0x6d0 [ 1821.230471][ T10] device_release+0xc4/0x1f0 [ 1821.230489][ T10] kobject_put+0x222/0x550 [ 1821.230507][ T10] v4l2_device_disconnect+0x79/0xd0 [ 1821.230527][ T10] usbtv_video_free+0x25/0x30 [ 1821.230545][ T10] usbtv_disconnect+0x5c/0xa0 [ 1821.230563][ T10] usb_unbind_interface+0x295/0x9f0 [ 1821.230580][ T10] device_release_driver_internal+0x4f5/0x880 [ 1821.230597][ T10] bus_remove_device+0x449/0x560 [ 1821.230617][ T10] device_del+0x528/0x8f0 [ 1821.230640][ T10] usb_disable_device+0x3d4/0x8d0 [ 1821.230664][ T10] usb_disconnect+0x32d/0x990 [ 1821.230687][ T10] hub_event+0x1bb7/0x4cf0 [ 1821.230701][ T10] process_scheduled_works+0xc3d/0x1630 [ 1821.230724][ T10] worker_thread+0xa47/0xfb0 [ 1821.230747][ T10] kthread+0x38b/0x470 [ 1821.230763][ T10] ret_from_fork+0x514/0xb70 [ 1821.230778][ T10] ret_from_fork_asm+0x1a/0x30 [ 1821.230794][ T10] [ 1821.230799][ T10] The buggy address belongs to the object at ffff88807bc94000 [ 1821.230799][ T10] which belongs to the cache kmalloc-2k of size 2048 [ 1821.230818][ T10] The buggy address is located 8 bytes inside of [ 1821.230818][ T10] freed 2048-byte region [ffff88807bc94000, ffff88807bc94800) [ 1821.230838][ T10] [ 1821.230844][ T10] The buggy address belongs to the physical page: [ 1821.230868][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bc97000 pfn:0x7bc90 [ 1821.230890][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1821.230907][ T10] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1821.230930][ T10] page_type: f5(slab) [ 1821.230948][ T10] raw: 0080000000000240 ffff88813ffbe000 ffffea000094d210 ffffea00017c1210 [ 1821.230965][ T10] raw: ffff88807bc97000 0000000000080005 00000000f5000000 0000000000000000 [ 1821.230984][ T10] head: 0080000000000240 ffff88813ffbe000 ffffea000094d210 ffffea00017c1210 [ 1821.231002][ T10] head: ffff88807bc97000 0000000000080005 00000000f5000000 0000000000000000 [ 1821.231020][ T10] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1821.231036][ T10] head: ffff88807bc91300 0000000000000000 00000000ffffffff 0000000000000008 [ 1821.231046][ T10] page dumped because: kasan: bad access detected [ 1821.231056][ T10] page_owner tracks the page as allocated [ 1821.231063][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20605, tgid 20605 (syz-executor), ts 1682635498586 [ 1821.231102][ T10] post_alloc_hook+0x1f9/0x250 [ 1821.231126][ T10] get_page_from_freelist+0x2591/0x2600 [ 1821.231158][ T10] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 1821.231185][ T10] allocate_slab+0x7d/0x620 [ 1821.231204][ T10] refill_objects+0x2d8/0x350 [ 1821.231223][ T10] __pcs_replace_empty_main+0x339/0x690 [ 1821.231239][ T10] __kmalloc_node_track_caller_noprof+0x61e/0x7b0 [ 1821.231264][ T10] pskb_expand_head+0x22c/0x13a0 [ 1821.231285][ T10] netlink_trim+0x1b3/0x2c0 [ 1821.231302][ T10] netlink_broadcast_filtered+0x6d/0xea0 [ 1821.231320][ T10] nlmsg_notify+0xe3/0x1a0 [ 1821.231339][ T10] rtnetlink_event+0x224/0x270 [ 1821.231366][ T10] notifier_call_chain+0x1a5/0x3d0 [ 1821.231382][ T10] netif_set_mac_address+0x393/0x4d0 [ 1821.231399][ T10] do_setlink+0x9ad/0x4670 [ 1821.231416][ T10] rtnl_newlink+0x15a3/0x1c30 [ 1821.231441][ T10] page last free pid 20605 tgid 20605 ts 1682635332113 stack trace: [ 1821.231456][ T10] __free_frozen_pages+0xf8e/0x1070 [ 1821.231478][ T10] __slab_free+0x250/0x2a0 [ 1821.231501][ T10] qlist_free_all+0x99/0x100 [ 1821.231524][ T10] kasan_quarantine_reduce+0x148/0x160 [ 1821.231545][ T10] __kasan_slab_alloc+0x22/0x80 [ 1821.231568][ T10] __kmalloc_node_track_caller_noprof+0x505/0x7b0 [ 1821.231592][ T10] __alloc_skb+0x2c1/0x7a0 [ 1821.231617][ T10] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 1821.231639][ T10] rtnetlink_event+0x1b7/0x270 [ 1821.231664][ T10] notifier_call_chain+0x1a5/0x3d0 [ 1821.231679][ T10] netif_set_mac_address+0x393/0x4d0 [ 1821.231696][ T10] do_setlink+0x9ad/0x4670 [ 1821.231712][ T10] rtnl_newlink+0x15a3/0x1c30 [ 1821.231738][ T10] rtnetlink_rcv_msg+0x802/0xc00 [ 1821.231764][ T10] netlink_rcv_skb+0x226/0x4a0 [ 1821.231784][ T10] netlink_unicast+0x7f5/0x990 [ 1821.231802][ T10] [ 1821.231807][ T10] Memory state around the buggy address: [ 1821.231818][ T10] ffff88807bc93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1821.231832][ T10] ffff88807bc93f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1821.231845][ T10] >ffff88807bc94000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.231855][ T10] ^ [ 1821.231866][ T10] ffff88807bc94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.231880][ T10] ffff88807bc94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1821.231890][ T10] ================================================================== [ 1821.231935][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1822.096172][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1822.107467][ T10] Tainted: [L]=SOFTLOCKUP [ 1822.111803][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1822.121876][ T10] Workqueue: usb_hub_wq hub_event [ 1822.126927][ T10] Call Trace: [ 1822.130221][ T10] [ 1822.133161][ T10] vpanic+0x56d/0xa60 [ 1822.137157][ T10] ? __pfx_vpanic+0x10/0x10 [ 1822.141680][ T10] ? __pfx___schedule+0x10/0x10 [ 1822.146567][ T10] panic+0xc5/0xd0 [ 1822.150316][ T10] ? __pfx_panic+0x10/0x10 [ 1822.154753][ T10] ? preempt_schedule_thunk+0x16/0x40 [ 1822.160153][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1822.165547][ T10] check_panic_on_warn+0x89/0xb0 [ 1822.170507][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1822.175902][ T10] end_report+0x73/0x170 [ 1822.180177][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1822.185565][ T10] kasan_report+0x128/0x150 [ 1822.190098][ T10] ? usb_unbind_interface+0x2c2/0x9f0 [ 1822.195493][ T10] usb_unbind_interface+0x2c2/0x9f0 [ 1822.200707][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1822.206454][ T10] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1822.212186][ T10] device_release_driver_internal+0x4f5/0x880 [ 1822.218280][ T10] bus_remove_device+0x449/0x560 [ 1822.223253][ T10] ? __pfx_bus_remove_device+0x10/0x10 [ 1822.228735][ T10] ? up_read+0x34/0x180 [ 1822.232912][ T10] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1822.238650][ T10] device_del+0x528/0x8f0 [ 1822.243043][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1822.248877][ T10] ? __pfx_device_del+0x10/0x10 [ 1822.253752][ T10] usb_disable_device+0x3d4/0x8d0 [ 1822.258804][ T10] usb_disconnect+0x32d/0x990 [ 1822.263510][ T10] hub_event+0x1bb7/0x4cf0 [ 1822.267952][ T10] ? __lock_acquire+0x747/0x2de0 [ 1822.272913][ T10] ? register_lock_class+0x31/0x2e0 [ 1822.278148][ T10] ? __pfx_hub_event+0x10/0x10 [ 1822.282933][ T10] ? rcu_is_watching+0x16/0xb0 [ 1822.287719][ T10] ? process_scheduled_works+0x97a/0x1630 [ 1822.293461][ T10] process_scheduled_works+0xc3d/0x1630 [ 1822.299049][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 1822.305060][ T10] ? assign_work+0x3cf/0x5d0 [ 1822.309687][ T10] worker_thread+0xa47/0xfb0 [ 1822.314314][ T10] ? __kthread_parkme+0x71/0x1f0 [ 1822.319295][ T10] kthread+0x38b/0x470 [ 1822.323396][ T10] ? __pfx_worker_thread+0x10/0x10 [ 1822.328534][ T10] ? __pfx_kthread+0x10/0x10 [ 1822.333148][ T10] ret_from_fork+0x514/0xb70 [ 1822.337758][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 1822.342892][ T10] ? __switch_to+0xc89/0x1420 [ 1822.347597][ T10] ? __pfx_kthread+0x10/0x10 [ 1822.352223][ T10] ret_from_fork_asm+0x1a/0x30 [ 1822.357017][ T10] [ 1822.360328][ T10] Kernel Offset: disabled [ 1822.364657][ T10] Rebooting in 86400 seconds..